Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/ZGvLV564kQ2IaJZBrWTfsmi5F7A.roa
File: ZGvLV564kQ2IaJZBrWTfsmi5F7A.roa (raw, json)
Hash identifier: 8dvCzaKwj5p+aGEQVCRTzqfAlo5TmVZtM5N8Jqkz3s8=
Subject key identifier: 64:6B:CB:57:9E:B8:91:0D:88:68:96:41:AD:64:DF:B2:68:B9:17:B0
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018CC2DAD8032DED103E8386909D0B375F77
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/ZGvLV564kQ2IaJZBrWTfsmi5F7A.roa
Signing time: Mon 01 Jan 2024 02:29:31 +0000
ROA not before: Mon 01 Jan 2024 02:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62258
IP address blocks: 81.15.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:d8:03:2d:ed:10:3e:83:86:90:9d:0b:37:5f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 02:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=646bcb579eb8910d88689641ad64dfb268b917b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:04:e5:c4:ef:c6:e0:99:18:bc:37:13:dd:24:
ca:d0:e6:a3:74:18:84:4b:85:c2:03:ec:c4:7e:8c:
1c:ea:63:3d:5a:67:f2:c5:f5:81:ac:7d:77:82:8f:
02:2f:5f:87:70:89:82:90:a1:74:f4:04:bd:e0:ff:
33:22:7f:50:5e:7e:6e:18:9d:b4:8b:59:41:59:46:
ba:1d:8f:06:b5:69:7f:86:a4:55:6d:62:45:fa:de:
f2:7c:44:16:e7:e8:6f:01:0a:ac:1b:8e:29:32:96:
b7:1e:e0:95:25:ff:54:b6:46:c1:a0:f4:25:84:22:
b6:86:39:c4:ce:12:ce:83:8e:9d:c8:ae:4e:63:0e:
b2:f2:5c:ac:83:95:12:75:13:1e:97:7c:a8:66:1c:
16:16:4c:29:a7:9f:1c:1e:39:3f:0c:05:8a:b2:b1:
f0:10:57:64:48:f3:e4:a0:19:35:74:a0:ce:72:b0:
2b:40:83:56:38:43:6c:6a:e1:7e:67:e6:27:74:5b:
8d:81:e7:24:27:2b:6a:3b:c9:87:75:28:c2:a3:29:
90:ef:c6:cf:3d:ef:66:d5:83:af:61:a7:8b:e7:f9:
32:2b:4b:09:08:10:60:2c:16:5e:2d:1e:3f:02:c0:
1a:43:06:33:95:3c:1e:ff:04:49:46:01:db:5c:9d:
e5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6B:CB:57:9E:B8:91:0D:88:68:96:41:AD:64:DF:B2:68:B9:17:B0
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/ZGvLV564kQ2IaJZBrWTfsmi5F7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.208.0/24
Signature Algorithm: sha256WithRSAEncryption
32:f7:b6:9b:a0:3a:77:21:e0:3f:b0:1f:38:c8:f5:7b:d0:c9:
a2:39:79:19:4e:e8:f6:41:cb:8c:34:01:7d:a3:09:71:bc:90:
d3:eb:13:e7:49:a9:a1:0b:db:eb:0b:b6:1c:5e:cc:87:42:10:
8d:0d:3b:6c:0c:7a:d0:fe:ca:9c:ee:16:d2:76:77:0a:7c:09:
36:f2:1c:71:48:16:3f:15:04:83:54:a2:8a:0c:35:df:35:14:
48:ff:be:fc:fa:c7:b2:18:c0:21:ce:a6:e4:ab:d8:30:3c:62:
1e:c7:0e:60:9e:8c:2e:ba:37:8b:6d:29:c7:be:5a:c0:00:e7:
58:11:6d:8d:da:9c:23:f9:68:36:20:99:f5:e4:32:7c:94:20:
56:09:ad:c5:bd:0a:71:c7:06:e2:8e:b6:45:22:d4:c1:f7:12:
8f:58:23:d5:74:a7:b2:a7:5d:6e:bb:54:0c:bc:bf:9f:ba:95:
1e:3c:6d:1b:78:c8:01:50:a6:fb:30:bc:a5:10:26:34:01:a2:
95:9b:be:dd:73:26:5b:f9:77:6b:1e:66:b4:26:8c:4b:94:6c:
e8:6f:6e:e1:8a:00:cf:53:45:6e:89:80:23:2b:77:b9:76:5e:
ad:29:61:72:22:08:3c:e9:71:63:12:9e:c2:03:b0:57:c0:96:
0e:b1:7c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:32:45 2024 by rpki-client on console-ams.rpki-client.org