Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/zGzfMhXHgTjTWPnZ6FniiCbNJy8.roa
File: zGzfMhXHgTjTWPnZ6FniiCbNJy8.roa (raw, json)
Hash identifier: JcE7B3LUXls2sRDHYFZrrnzuT+ntEnpCJQZ6Mnp6Hck=
Subject key identifier: CC:6C:DF:32:15:C7:81:38:D3:58:F9:D9:E8:59:E2:88:26:CD:27:2F
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018E976E3272C74A567A43BA70D470740275
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/zGzfMhXHgTjTWPnZ6FniiCbNJy8.roa
Signing time: Mon 01 Apr 2024 02:12:45 +0000
ROA not before: Mon 01 Apr 2024 02:12:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.146.241.0/24 maxlen: 24
46.249.111.0/24 maxlen: 24
89.251.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 20:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:97:6e:32:72:c7:4a:56:7a:43:ba:70:d4:70:74:02:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Apr 1 02:12:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc6cdf3215c78138d358f9d9e859e28826cd272f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:5f:ea:f0:7d:10:56:72:e0:15:06:11:c5:ae:
61:be:0f:db:89:de:12:85:5b:07:3c:5c:6a:cb:42:
e3:68:56:a2:93:ac:86:33:75:59:10:11:06:bd:92:
00:6a:6a:8c:be:17:6f:92:88:66:b9:49:da:3f:38:
20:dc:1d:07:47:5b:3b:78:1f:14:f7:b8:a8:10:39:
f5:a3:29:cc:44:6d:08:6d:1d:26:ff:90:a4:fd:c3:
91:e2:40:9c:5b:e7:4f:f9:51:38:ff:a1:6d:48:cd:
95:28:79:57:e1:34:66:ba:2a:09:93:41:26:9f:14:
30:e0:a5:95:9d:fe:50:76:42:63:74:51:8f:d6:a5:
f7:76:20:04:ce:2b:27:ba:b8:95:56:50:96:20:55:
81:41:87:3d:d3:d1:dd:04:59:59:af:7e:af:a8:bc:
63:3d:ba:b7:8d:a1:7a:c1:bb:2a:5d:59:96:d1:5a:
65:b6:56:fb:46:99:be:fe:73:52:d6:25:95:2f:46:
97:fb:f9:40:7e:92:fe:fa:e5:c6:8b:21:93:bf:cb:
93:be:1e:16:db:da:e7:15:e9:79:2c:de:1c:e2:2b:
dd:ca:c8:9d:4c:a7:a0:cd:e2:0f:3a:a4:76:5d:73:
95:6c:20:14:51:bc:7f:92:ff:0b:af:dd:33:cf:c6:
a1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:6C:DF:32:15:C7:81:38:D3:58:F9:D9:E8:59:E2:88:26:CD:27:2F
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/zGzfMhXHgTjTWPnZ6FniiCbNJy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.241.0/24
46.249.111.0/24
89.251.10.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:6b:6e:77:63:c3:f7:64:b6:ac:a6:dc:40:8d:9f:d5:85:b9:
86:d5:63:53:d1:3f:b7:f6:f0:36:0b:19:b8:f0:7a:a6:c7:89:
1a:2d:22:c5:d4:22:82:59:51:48:9c:86:d6:35:e2:9c:13:de:
e3:18:b9:56:36:02:13:27:a2:10:9e:eb:67:fb:37:b4:1b:83:
67:c9:ba:9d:7f:47:37:95:f5:5d:42:9b:08:4c:c8:3c:55:b7:
02:21:0a:63:de:ea:cb:3b:18:7b:a2:1c:c2:9a:d6:c0:c0:ed:
ee:1c:d3:0c:06:d5:97:61:29:fd:ac:98:f6:4c:0f:4e:81:e7:
da:71:19:67:b2:d7:d0:16:e3:cd:13:e4:73:5b:51:d3:e0:73:
98:43:ae:6e:fc:25:d9:15:6d:c8:3e:06:72:7f:99:28:72:49:
8f:73:dc:0b:33:a5:05:78:dd:9d:5c:b2:62:04:3e:ed:c1:d5:
6f:1f:27:d7:49:dd:40:09:56:97:0f:c1:1f:68:e3:ed:9e:7a:
2f:25:d7:3e:ba:49:5b:41:0c:f6:8e:87:77:22:64:45:41:54:
e2:92:ce:db:8f:76:f6:bb:d6:a3:60:05:a9:06:79:46:c3:48:
0f:23:53:12:ab:98:a9:31:e7:e0:6c:ff:02:0e:1a:0b:fa:df:
5e:6c:13:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:44:41 2024 by rpki-client on console-ams.rpki-client.org