Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/9e5970-0fa8-487c-b259-a99cb54f0d4f/1/Zr-rYChZVQxRMfEP24vFCXtZgTY.roa
File: Zr-rYChZVQxRMfEP24vFCXtZgTY.roa (raw, json)
Hash identifier: bnCOAu/gzkf7ZHJnj6Kt5oT4jeAZxqa2sikWDarNHxM=
Subject key identifier: 66:BF:AB:60:28:59:55:0C:51:31:F1:0F:DB:8B:C5:09:7B:59:81:36
Certificate issuer: /CN=ef8e107b9069c359c67bbdc2e170a9f902d9311e
Certificate serial: 0192B4AAFA5F706CC73E4AF04F08E01B4A50
Authority key identifier: EF:8E:10:7B:90:69:C3:59:C6:7B:BD:C2:E1:70:A9:F9:02:D9:31:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/744Qe5Bpw1nGe73C4XCp-QLZMR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/9e5970-0fa8-487c-b259-a99cb54f0d4f/1/Zr-rYChZVQxRMfEP24vFCXtZgTY.roa
Signing time: Tue 22 Oct 2024 14:39:17 +0000
ROA not before: Tue 22 Oct 2024 14:39:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61071
IP address blocks: 185.134.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/9e5970-0fa8-487c-b259-a99cb54f0d4f/1/744Qe5Bpw1nGe73C4XCp-QLZMR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/9e5970-0fa8-487c-b259-a99cb54f0d4f/1/744Qe5Bpw1nGe73C4XCp-QLZMR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/744Qe5Bpw1nGe73C4XCp-QLZMR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b4:aa:fa:5f:70:6c:c7:3e:4a:f0:4f:08:e0:1b:4a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef8e107b9069c359c67bbdc2e170a9f902d9311e
Validity
Not Before: Oct 22 14:39:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66bfab602859550c5131f10fdb8bc5097b598136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:89:73:a6:20:c7:9d:9d:94:67:b1:45:4d:b0:
1a:59:52:a0:08:91:ad:ab:33:3e:b8:3d:dd:de:e3:
76:0e:bc:c4:e4:9e:40:28:d6:c2:8f:88:95:f0:0d:
aa:18:82:de:93:1b:bf:05:7a:b9:95:06:22:dc:de:
56:8b:50:47:12:21:c8:a0:18:fc:d2:25:f2:b8:d2:
ee:08:03:cc:6a:c5:91:ec:59:06:ac:ec:02:58:d6:
94:82:da:43:cb:91:ae:54:80:88:8a:a5:ae:a7:84:
6b:e8:ab:2c:52:9f:b9:63:14:9f:db:36:54:fd:5a:
c1:bf:11:6d:ec:e3:96:94:67:15:5e:77:b3:1b:0b:
44:fd:ca:8b:cf:e8:cb:a5:f4:ab:bf:62:51:1a:45:
f3:05:a2:a2:d0:44:50:3e:3f:ea:17:e1:a1:b6:9e:
ef:0f:34:55:d4:55:ad:ce:b2:0b:bf:42:73:f8:95:
aa:d7:c3:bf:4e:cd:d4:4c:2a:0d:51:07:94:8d:94:
7f:fb:47:74:54:cc:33:d3:85:39:bf:75:45:2c:34:
28:3c:fb:c3:39:38:9d:eb:ac:e8:aa:85:a6:33:ae:
56:27:35:48:0f:c1:f4:71:19:3b:81:50:79:dd:72:
c5:da:f5:9c:35:7e:8d:79:cf:f1:52:e4:a3:60:80:
3b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BF:AB:60:28:59:55:0C:51:31:F1:0F:DB:8B:C5:09:7B:59:81:36
X509v3 Authority Key Identifier:
keyid:EF:8E:10:7B:90:69:C3:59:C6:7B:BD:C2:E1:70:A9:F9:02:D9:31:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/744Qe5Bpw1nGe73C4XCp-QLZMR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/9e5970-0fa8-487c-b259-a99cb54f0d4f/1/Zr-rYChZVQxRMfEP24vFCXtZgTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/9e5970-0fa8-487c-b259-a99cb54f0d4f/1/744Qe5Bpw1nGe73C4XCp-QLZMR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.228.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:9c:10:ca:22:01:29:e7:4f:c2:dc:35:5e:99:ce:fe:e3:13:
96:13:df:f9:a4:25:e3:6e:4a:80:25:45:2d:30:a7:58:cb:a8:
d8:9a:e4:e2:00:a6:f8:5d:d7:85:49:03:6a:92:8d:49:7a:f4:
02:fb:d9:06:db:67:a4:c4:27:d5:e7:86:71:bd:e9:e6:4a:7b:
78:30:3a:8f:df:6c:36:63:f4:97:f2:2a:91:df:6f:a8:bd:19:
40:3c:89:79:57:e3:46:b5:e9:05:f7:ea:ff:a1:e9:f0:f5:8b:
df:3f:64:74:68:f8:10:dd:f5:d8:6c:f4:40:08:22:5c:f9:72:
ee:65:de:14:f1:1e:19:f4:ca:f6:26:d4:43:f3:be:ba:55:60:
9b:24:7a:cd:1e:3e:0c:ad:53:0b:9a:3d:f7:8a:80:19:46:e3:
17:cb:c2:89:43:9f:92:71:9e:f6:4e:88:fc:aa:ba:e7:11:f8:
c8:84:95:19:75:72:0e:f1:c3:68:f4:7f:07:6d:71:30:43:83:
c7:4b:50:e6:7e:3d:c5:5b:a0:b0:5c:23:ed:29:8b:4d:16:37:
a8:86:4b:89:55:72:2f:3f:62:61:47:3a:11:ab:7d:91:8b:de:
3d:65:f7:f7:f2:e0:22:11:bc:85:53:35:ac:ce:f4:59:56:54:
36:38:34:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:31:46 2024 by rpki-client on console-ams.rpki-client.org