Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/ZkrwdpP0bg8c8HJ8lGblkkax-So.roa
File: ZkrwdpP0bg8c8HJ8lGblkkax-So.roa (raw, json)
Hash identifier: YDdRD19jLF9KlvIb73aX0vW3vsSWBXLvv98q1gpR5sI=
Subject key identifier: 66:4A:F0:76:93:F4:6E:0F:1C:F0:72:7C:94:66:E5:92:46:B1:F9:2A
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 018CC64B385946FFB2A4C902DE5C5659BCD5
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/ZkrwdpP0bg8c8HJ8lGblkkax-So.roa
Signing time: Mon 01 Jan 2024 18:31:07 +0000
ROA not before: Mon 01 Jan 2024 18:31:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56765
IP address blocks: 94.182.242.0/24 maxlen: 24
94.182.242.0/23 maxlen: 23
94.182.243.0/24 maxlen: 24
94.182.236.0/24 maxlen: 24
94.182.236.0/23 maxlen: 23
94.182.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:38:59:46:ff:b2:a4:c9:02:de:5c:56:59:bc:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jan 1 18:31:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=664af07693f46e0f1cf0727c9466e59246b1f92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7c:7b:e5:2f:3b:b7:bc:dd:a6:c4:d2:33:62:
db:82:b0:36:7f:fb:67:d0:29:ec:82:1d:0e:5c:5c:
94:84:e4:12:a9:8a:e4:0b:5c:3e:30:18:62:50:ff:
b0:e3:b2:be:5e:2d:84:ea:a9:74:d7:b2:0c:b7:22:
73:f6:10:f7:f3:b1:d0:e7:c7:29:1e:1c:c0:fc:e5:
5d:bb:e4:b5:65:8f:98:3c:76:bd:7e:53:e0:07:02:
8c:2e:e4:8b:db:c7:90:c5:65:91:1f:7f:2e:81:c5:
fc:b9:ac:7f:bf:d4:1a:23:4b:78:99:b4:5f:7b:52:
ca:c4:46:0c:63:a5:48:6f:3b:f5:13:8c:eb:0f:3f:
fd:35:db:11:93:9c:bf:0c:0c:8c:e5:0e:43:59:34:
2e:a7:10:81:2c:4b:d9:1f:e3:dd:84:eb:bb:cf:9a:
48:de:6d:72:2e:af:2e:30:79:7c:3d:c6:24:43:00:
24:76:f2:d5:9b:eb:94:2e:a1:db:d2:87:a4:02:09:
b0:aa:bc:3b:f1:34:e7:c1:ed:ba:57:a8:9a:c9:a8:
f4:70:6d:6e:a4:2c:01:5a:31:b6:e4:b3:06:a4:2d:
0b:83:29:55:9d:41:f3:29:79:b3:d7:b5:82:78:42:
d1:58:b6:bf:f7:54:1d:2c:fb:f2:3e:4a:87:ae:04:
c2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4A:F0:76:93:F4:6E:0F:1C:F0:72:7C:94:66:E5:92:46:B1:F9:2A
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/ZkrwdpP0bg8c8HJ8lGblkkax-So.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.182.236.0/23
94.182.242.0/23
Signature Algorithm: sha256WithRSAEncryption
50:38:c3:df:83:18:5c:69:19:86:52:22:2e:bf:1a:a8:f4:02:
57:7f:4f:ad:9c:6f:50:47:56:87:41:c7:c8:f1:9c:50:48:6a:
bc:b7:4f:2e:9e:00:96:b6:ca:ea:33:38:f0:aa:e5:ac:f3:30:
20:7e:ae:ca:3a:9b:10:5f:16:87:40:7c:58:cb:81:ee:05:b4:
d6:49:33:20:20:fc:3b:a4:e5:86:de:87:1c:6e:49:a7:2c:63:
d4:38:1e:d7:99:ec:ac:19:51:7e:60:ea:45:e0:72:76:6f:fb:
7a:75:66:38:a9:e2:d8:b1:9f:81:57:31:f4:28:94:36:cb:05:
4c:3c:ff:25:83:3a:ce:a6:36:86:fe:6a:67:d1:94:1a:d8:76:
5b:64:6a:ec:f7:d5:ec:80:bf:7e:c5:aa:1e:7f:8b:12:ae:09:
5e:fd:3f:92:b3:ef:99:a5:a8:35:70:f7:89:06:61:aa:24:b4:
a7:bd:4f:c4:aa:a9:80:07:a3:a0:e5:04:0d:89:fe:69:21:a7:
fa:96:37:a2:7f:f4:50:ec:0c:3a:c0:95:09:ca:24:1c:ef:67:
81:f0:07:03:ad:f8:68:bb:31:84:d3:b0:c1:6d:6a:d3:50:b9:
f6:5f:bc:38:c1:88:cf:4c:e7:8d:4a:bf:15:85:3e:ba:70:37:
39:43:10:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:00:24 2024 by rpki-client on console-fra.rpki-client.org