Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/RZwF8REUvh8PDQySMlImynmhUOw.roa
File: RZwF8REUvh8PDQySMlImynmhUOw.roa (raw, json)
Hash identifier: L1kyD4ZLQ7/F1q+GRendvBv78mo4Iiqh4j2YTYXRaYA=
Subject key identifier: 45:9C:05:F1:11:14:BE:1F:0F:0D:0C:92:32:52:26:CA:79:A1:50:EC
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 018CCA2B7EA2B3257734841BDC813DE1AEEE
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/RZwF8REUvh8PDQySMlImynmhUOw.roa
Signing time: Tue 02 Jan 2024 12:34:57 +0000
ROA not before: Tue 02 Jan 2024 12:34:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34837
IP address blocks: 193.104.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:7e:a2:b3:25:77:34:84:1b:dc:81:3d:e1:ae:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Jan 2 12:34:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=459c05f11114be1f0f0d0c92325226ca79a150ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7a:f7:0d:6d:7d:65:61:9b:21:8a:75:81:34:
d5:60:ee:11:31:99:03:1e:f4:a6:92:25:2b:13:c8:
d6:0c:61:5e:cb:b6:b1:01:16:54:6b:05:ed:fe:f8:
4a:08:db:b8:e3:e3:9e:ec:b4:0a:96:d4:fa:3c:ca:
c8:2b:92:78:dd:3b:e6:99:38:91:0c:f5:9e:a2:72:
1e:e6:ba:05:01:36:07:c7:b0:3d:49:36:84:a1:b0:
ad:7e:46:d8:49:bc:77:07:37:50:df:42:72:bd:70:
05:10:55:72:8b:7c:32:84:9c:28:09:0a:c4:92:cb:
5f:6c:76:ab:79:78:e7:df:90:0b:fd:f2:10:9b:e8:
2c:6a:8e:91:cd:c6:1d:d9:d4:3f:1f:5e:db:6e:2c:
d4:ac:18:c8:47:0b:94:c2:f5:42:ce:89:f3:0e:ca:
fa:57:16:31:48:96:0f:05:05:cb:4d:2a:7f:8e:50:
b7:c9:51:72:3a:55:87:97:c7:32:cc:c4:24:a7:90:
1a:92:9b:1d:04:3c:d9:01:30:03:49:6e:b7:a7:21:
c2:dd:fe:a3:91:f3:44:5b:84:e4:04:29:4b:df:f9:
83:52:e3:e0:89:2f:20:be:71:b3:93:7d:d4:3b:78:
b8:3d:23:bb:17:f9:fe:f5:03:c3:ad:4a:2f:ac:10:
ad:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9C:05:F1:11:14:BE:1F:0F:0D:0C:92:32:52:26:CA:79:A1:50:EC
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/RZwF8REUvh8PDQySMlImynmhUOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.212.0/24
Signature Algorithm: sha256WithRSAEncryption
74:f4:4e:d8:dd:03:37:4a:97:31:f0:c5:38:9f:73:65:ec:15:
70:37:44:55:25:9a:a4:64:4d:c3:64:fd:53:41:0b:3d:c9:60:
82:e5:48:77:70:8b:6f:24:73:ea:8d:d8:1e:05:83:2d:eb:33:
bc:5b:89:76:34:75:4f:25:1c:c3:2f:92:7e:09:4e:5a:af:ae:
06:9f:a8:c6:d1:03:c8:dc:13:59:c1:8f:f4:17:bf:a6:55:c3:
44:d1:68:b5:94:8a:4f:4a:98:a1:82:d1:7f:5f:a4:ae:f3:20:
ac:56:3b:f2:ef:c1:17:11:8b:38:b7:b1:c5:75:bf:9f:0c:7c:
2f:a6:0f:a5:15:f0:59:0c:e1:ac:af:c7:11:c4:7e:9b:7e:cf:
9e:14:21:fe:4a:d2:93:5c:b7:02:a7:e5:73:c0:27:c1:06:26:
3e:8c:49:46:68:a1:7c:06:f5:91:1f:ea:70:43:67:2a:1d:cc:
87:8a:c7:24:1c:39:39:62:af:a4:71:46:b1:7c:c2:5d:df:0a:
ce:00:63:6b:ac:0e:e4:b3:70:21:77:f2:87:55:ee:4b:52:9e:
00:3d:7f:9c:8b:ee:c6:a8:df:0f:21:5a:79:47:35:35:91:95:
5f:e1:84:b0:9c:29:57:32:70:44:39:3e:fc:bd:da:64:2d:83:
95:1b:64:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 00:05:53 2024 by rpki-client on console-fra.rpki-client.org