Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/Zw2EthNkQSGCMZUYLQMLF4pKPBM.roa
File: Zw2EthNkQSGCMZUYLQMLF4pKPBM.roa (raw, json)
Hash identifier: 2vr3YNX4YVgNfxFDsJ26SCztDdVwqpdTvNeZysk9Z9M=
Subject key identifier: 67:0D:84:B6:13:64:41:21:82:31:95:18:2D:03:0B:17:8A:4A:3C:13
Certificate issuer: /CN=81069c09551b3fe3ba2c9a6e55d8e059bba0b186
Certificate serial: 018CC5DC14DC96219F6F8E1C8C21E701BCFE
Authority key identifier: 81:06:9C:09:55:1B:3F:E3:BA:2C:9A:6E:55:D8:E0:59:BB:A0:B1:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/Zw2EthNkQSGCMZUYLQMLF4pKPBM.roa
Signing time: Mon 01 Jan 2024 16:29:43 +0000
ROA not before: Mon 01 Jan 2024 16:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21221
IP address blocks: 82.210.96.0/19 maxlen: 24
84.35.0.0/16 maxlen: 24
212.29.160.0/19 maxlen: 24
2001:15b0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:14:dc:96:21:9f:6f:8e:1c:8c:21:e7:01:bc:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81069c09551b3fe3ba2c9a6e55d8e059bba0b186
Validity
Not Before: Jan 1 16:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=670d84b613644121823195182d030b178a4a3c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:82:2f:68:b1:d7:1c:8c:6a:1e:7a:32:8b:7a:
4f:6a:2a:5a:d3:00:d2:84:95:8d:5a:27:78:a0:56:
1f:61:f1:6e:cd:da:03:96:99:21:86:2c:b7:57:18:
91:10:12:0f:ee:db:c7:c5:b8:8f:39:2a:47:01:62:
56:81:9c:23:fa:b2:91:60:6e:98:29:f6:7c:16:4f:
33:00:a3:fc:ba:49:2f:5b:c3:36:66:72:ea:8c:4d:
ba:89:d9:db:72:09:4c:5d:10:56:32:75:e6:b6:4b:
5a:b5:6c:36:cc:b4:98:13:c2:20:bf:37:9c:b4:3a:
22:4b:e9:11:e4:e5:f9:36:a0:0a:30:3d:2a:91:42:
5a:7f:d2:34:b9:6f:1c:59:2b:40:9f:42:45:7f:0e:
36:5e:ab:3c:7d:44:70:91:44:42:8c:20:47:e8:25:
30:55:4a:bf:46:cb:fe:1c:80:0a:e5:10:b0:d6:c0:
af:99:d0:ef:4a:4a:a5:48:4b:ef:fa:73:9f:1e:99:
b8:70:d8:31:fd:c5:79:df:d0:6d:5e:17:11:33:88:
ad:2b:8f:93:df:12:b6:94:ae:94:ef:0a:06:7b:eb:
bc:87:b8:32:36:fa:78:71:a4:cd:f1:c5:58:d5:81:
01:6b:46:5b:dc:88:3d:32:99:e1:c5:cc:b4:a4:ea:
5e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0D:84:B6:13:64:41:21:82:31:95:18:2D:03:0B:17:8A:4A:3C:13
X509v3 Authority Key Identifier:
keyid:81:06:9C:09:55:1B:3F:E3:BA:2C:9A:6E:55:D8:E0:59:BB:A0:B1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/Zw2EthNkQSGCMZUYLQMLF4pKPBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.210.96.0/19
84.35.0.0/16
212.29.160.0/19
IPv6:
2001:15b0::/32
Signature Algorithm: sha256WithRSAEncryption
3d:7e:f6:ad:1b:71:08:a0:0c:ae:20:77:61:5a:41:4c:04:a8:
12:53:72:72:12:eb:e9:04:64:bf:60:20:11:2f:c3:6d:65:35:
d9:c2:3f:87:48:0f:08:0b:b9:8f:0d:c1:1a:e5:6e:ca:d5:65:
c9:51:79:0e:9a:30:29:c0:68:52:6d:93:47:2f:06:ec:1f:90:
ec:4c:b4:89:28:e4:50:84:40:bf:1d:02:26:0e:f3:b1:f8:38:
58:36:ec:99:03:66:c4:11:5a:cb:f2:1d:a8:3d:7e:d8:85:61:
95:6e:4c:ea:a6:cf:a5:9f:79:2c:7e:56:d2:16:11:7b:1e:6e:
51:4d:5a:8b:ad:91:d7:5d:a7:55:cb:2e:9a:4c:78:af:4f:cc:
e3:90:4f:e0:3b:f2:5e:15:ee:f0:c4:2f:d9:99:e1:ec:55:e3:
e7:13:6a:27:c4:53:ee:16:02:05:c1:08:00:ec:e8:dd:2a:6f:
9d:09:48:95:b9:d4:12:b7:5f:48:0d:d3:cb:3d:8b:21:e9:1f:
02:cd:c8:a3:d9:64:12:b3:e3:71:73:78:6a:dc:9a:e2:9b:c7:
67:3b:e1:b3:c4:f7:2e:9d:44:ec:79:6c:26:89:a3:df:5b:8a:
93:92:02:87:6a:f8:e1:ec:a4:43:80:da:eb:ec:34:97:fa:0c:
a8:04:7d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:49:44 2024 by rpki-client on console-fra.rpki-client.org