Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/zV3wQFSATu-ZpcBYcG0DFn9E1rI.roa
File: zV3wQFSATu-ZpcBYcG0DFn9E1rI.roa (raw, json)
Hash identifier: lDqrsN3Xf/v8Q8OzMTVzi9v4kgWgpr6CS+uO7adHGck=
Subject key identifier: CD:5D:F0:40:54:80:4E:EF:99:A5:C0:58:70:6D:03:16:7F:44:D6:B2
Certificate issuer: /CN=09dcf1e897e598ec3f1ab60bd443328726dedae4
Certificate serial: 0190FD8115A113389DAA9620803A01EAF154
Authority key identifier: 09:DC:F1:E8:97:E5:98:EC:3F:1A:B6:0B:D4:43:32:87:26:DE:DA:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/zV3wQFSATu-ZpcBYcG0DFn9E1rI.roa
Signing time: Mon 29 Jul 2024 08:00:13 +0000
ROA not before: Mon 29 Jul 2024 08:00:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202914
IP address blocks: 84.246.240.0/22 maxlen: 24
84.246.240.0/23 maxlen: 23
84.246.242.0/24 maxlen: 24
91.210.56.0/22 maxlen: 24
141.98.12.0/22 maxlen: 24
141.98.12.0/24 maxlen: 24
141.98.13.0/24 maxlen: 24
141.98.14.0/23 maxlen: 24
185.121.172.0/22 maxlen: 22
185.121.172.0/23 maxlen: 24
185.121.174.0/23 maxlen: 23
185.121.174.0/24 maxlen: 24
185.121.175.0/24 maxlen: 24
185.150.196.0/22 maxlen: 24
2a0d:3e80::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:fd:81:15:a1:13:38:9d:aa:96:20:80:3a:01:ea:f1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09dcf1e897e598ec3f1ab60bd443328726dedae4
Validity
Not Before: Jul 29 08:00:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd5df04054804eef99a5c058706d03167f44d6b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e5:39:9e:df:8e:dd:22:fb:44:08:01:9b:4d:
e2:96:4f:cb:bc:57:e0:66:32:6f:39:4c:6e:a3:ff:
c4:d2:55:6f:7d:1a:13:0b:04:e7:fa:fa:81:c1:3b:
91:84:b7:c7:ee:61:92:e1:cc:cd:02:94:7f:ed:8b:
ad:9b:57:7c:88:79:25:14:7e:24:27:fa:3b:2b:b9:
0b:c7:09:22:65:bb:2f:58:65:a5:ed:86:7e:3b:57:
f4:24:0e:91:fa:9b:28:c1:4c:16:2a:f4:5b:ff:6a:
74:9c:32:8e:df:a2:e4:3c:99:2a:a4:4a:57:13:34:
95:64:67:b3:43:b0:87:5d:7d:3a:3d:43:62:8e:a6:
a4:26:3e:b4:09:db:48:4c:d4:8b:8f:2c:cd:f2:bb:
12:15:38:00:f4:40:5f:cd:ef:b6:d8:68:fc:a8:95:
1a:e8:77:ad:b7:03:32:c7:44:55:aa:9c:3b:68:21:
9c:b3:7e:79:6e:a9:c6:e5:59:03:13:d3:29:e1:cd:
e3:88:99:24:d8:87:c5:6a:43:73:c5:bf:6c:02:8a:
65:c1:9e:2f:9f:84:c2:78:74:9b:af:47:3c:21:98:
ea:ed:c3:e2:74:53:91:14:ee:fa:0a:a8:fb:29:d0:
e1:85:fe:c9:86:66:9b:a1:15:02:c3:1f:16:61:aa:
2d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5D:F0:40:54:80:4E:EF:99:A5:C0:58:70:6D:03:16:7F:44:D6:B2
X509v3 Authority Key Identifier:
keyid:09:DC:F1:E8:97:E5:98:EC:3F:1A:B6:0B:D4:43:32:87:26:DE:DA:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/zV3wQFSATu-ZpcBYcG0DFn9E1rI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.240.0/22
91.210.56.0/22
141.98.12.0/22
185.121.172.0/22
185.150.196.0/22
IPv6:
2a0d:3e80::/29
Signature Algorithm: sha256WithRSAEncryption
57:3a:4d:94:f5:61:92:d1:96:c5:55:2a:04:e4:2f:f7:d3:38:
31:9b:9d:bf:9d:6d:91:d9:95:26:36:cf:e9:32:5d:86:06:d1:
1d:73:58:66:2b:2c:45:95:3f:de:c2:0e:23:d8:27:f7:87:ac:
c1:fe:46:4e:e7:32:f3:dc:d8:9f:b2:b2:d1:a1:b5:c7:16:d2:
89:06:7e:65:25:c5:e8:8a:c1:15:b1:5c:97:f8:52:e2:8b:a1:
ba:db:19:58:91:d5:0b:31:33:d8:df:53:fb:c6:7d:dc:12:78:
f0:7f:a4:18:fc:17:db:62:6d:a1:0b:17:b1:5c:5e:68:ca:1b:
82:09:1c:93:65:e3:f0:4b:9b:81:cb:b6:2f:3b:3f:7e:9c:38:
f9:24:b3:54:ea:3a:69:71:56:6b:b7:d7:1f:49:a3:76:71:69:
26:ad:ec:c9:23:af:66:7f:aa:90:1a:14:b9:2f:b9:ea:6e:7f:
2c:1d:17:10:c6:41:c9:9a:f8:f1:b4:92:35:6b:c4:eb:cc:47:
37:8c:3d:70:e0:d2:2b:d4:70:9c:b4:55:1a:a3:b9:c3:d9:12:
53:92:58:49:90:e4:83:2b:e9:3e:5d:46:38:30:27:25:bd:d8:
0f:66:28:73:7c:3f:07:39:ab:90:46:7c:7d:c9:e4:76:a9:0f:
1b:5e:75:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 20:12:33 2024 by rpki-client on console-ams.rpki-client.org