Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/ZVZHUfHtDPLxJgLlySJt8Vk6ZQA.roa
File: ZVZHUfHtDPLxJgLlySJt8Vk6ZQA.roa (raw, json)
Hash identifier: jfHTI1WAqT7TmSNH705c80gFS9ZW4BStAjhwYiblM+s=
Subject key identifier: 65:56:47:51:F1:ED:0C:F2:F1:26:02:E5:C9:22:6D:F1:59:3A:65:00
Certificate issuer: /CN=0232a4bfb7796405a556b759f1d193e4c4d37129
Certificate serial: 018CC801775C9FE5F5BBF6920176FE6D9A24
Authority key identifier: 02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/ZVZHUfHtDPLxJgLlySJt8Vk6ZQA.roa
Signing time: Tue 02 Jan 2024 02:29:48 +0000
ROA not before: Tue 02 Jan 2024 02:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 26114
IP address blocks: 62.67.43.0/24 maxlen: 24
62.140.11.0/24 maxlen: 24
213.244.141.0/24 maxlen: 24
213.244.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 01:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:77:5c:9f:e5:f5:bb:f6:92:01:76:fe:6d:9a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0232a4bfb7796405a556b759f1d193e4c4d37129
Validity
Not Before: Jan 2 02:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65564751f1ed0cf2f12602e5c9226df1593a6500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ee:18:8f:ef:57:4c:3c:a2:d3:6d:ad:dd:d8:
bf:2f:c5:ac:72:e8:c3:e8:0e:32:b1:9e:01:d1:f8:
6a:5f:31:5d:cd:a4:e7:51:b3:65:87:84:2f:4b:b4:
50:8b:c5:97:4f:02:fa:58:e4:f4:a3:b0:c1:0d:c2:
4d:79:ee:3b:09:0e:8d:c2:1f:d1:19:fa:a2:cb:78:
36:d1:90:46:f7:9e:02:b8:06:69:7e:7d:a3:4b:d7:
6e:33:0c:40:4e:8f:13:5f:b1:8c:df:36:50:0d:6a:
a2:17:85:7a:a1:c3:39:6b:c8:39:fb:26:d3:8a:07:
76:0b:bb:fb:53:1f:bb:74:bd:c8:9a:19:5a:36:4e:
6c:9a:a1:d6:83:8f:c1:8b:94:9c:e2:b7:a9:94:9b:
09:f6:3a:fe:fc:b1:e1:df:de:86:0c:c9:1a:85:24:
27:4a:0a:3e:36:c2:c2:1e:83:2b:51:13:16:31:a3:
13:fa:a6:0b:d3:d3:90:97:0a:b2:d7:e5:99:1c:f4:
24:f8:fa:96:3e:83:39:bc:12:4d:36:fd:0f:16:ec:
77:a1:2d:61:86:e6:dd:74:8d:30:54:cd:29:6e:e9:
4d:aa:7f:f7:6b:5e:de:7f:c6:a6:b7:6a:e4:aa:f4:
cb:ea:43:0d:10:cc:5c:e4:27:30:43:c3:f7:f7:1b:
de:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:56:47:51:F1:ED:0C:F2:F1:26:02:E5:C9:22:6D:F1:59:3A:65:00
X509v3 Authority Key Identifier:
keyid:02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/ZVZHUfHtDPLxJgLlySJt8Vk6ZQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.67.43.0/24
62.140.11.0/24
213.244.141.0/24
213.244.163.0/24
Signature Algorithm: sha256WithRSAEncryption
74:72:cc:fd:21:7f:41:19:2b:03:38:c9:3d:dc:bf:cc:06:e8:
95:f6:19:87:00:c7:30:15:c9:4a:a1:6c:03:a5:94:c6:8a:c4:
f4:48:e6:99:d8:37:e5:63:7f:fa:29:4a:d6:6d:32:c2:01:38:
6a:ff:e5:50:d1:ef:45:d6:04:1c:5e:9c:ac:32:b5:e6:1d:0f:
5d:54:e1:8e:2b:18:27:60:cb:31:a1:2b:00:13:bf:16:8f:6a:
c4:23:77:71:fe:ce:14:d6:7a:43:6e:a9:4c:ef:a2:a2:42:b2:
5f:b4:2c:1b:2a:08:a6:d7:29:70:27:ed:a9:6d:c0:81:93:25:
c8:12:be:01:35:df:40:94:f0:f8:79:a0:be:9a:1c:cf:c8:1e:
ae:a8:16:54:14:c0:ba:5d:db:fe:55:40:eb:44:95:fb:d9:35:
bd:7f:f9:d9:91:c6:a7:a2:8d:38:86:0a:aa:4c:e7:03:58:38:
93:b8:ca:45:a6:f8:80:c1:a9:5d:b9:27:e6:32:2e:01:2a:8a:
9c:ed:5c:e0:b3:82:97:e4:a0:5d:5f:b2:ff:91:66:a9:e6:4f:
2f:1b:6c:1a:15:fc:66:b8:4f:82:56:3b:68:ae:56:84:57:b6:
3a:88:2a:53:f3:0a:1b:02:61:34:54:24:9e:da:c0:b2:83:23:
df:2c:35:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 04:15:19 2024 by rpki-client on console-ams.rpki-client.org