Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/zT1llEgmQMHkum1Sz-SEFQIHYBc.roa
File: zT1llEgmQMHkum1Sz-SEFQIHYBc.roa (raw, json)
Hash identifier: faq0Ls4yVYoYzjMTPilqXpeZUoNCSmkFHZuQFyZ9hg4=
Subject key identifier: CD:3D:65:94:48:26:40:C1:E4:BA:6D:52:CF:E4:84:15:02:07:60:17
Certificate issuer: /CN=9253e214c8e5a6f41345be682f682655b1abea5b
Certificate serial: 018D3A8538D52ED076A016C5853215EE61CA
Authority key identifier: 92:53:E2:14:C8:E5:A6:F4:13:45:BE:68:2F:68:26:55:B1:AB:EA:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/zT1llEgmQMHkum1Sz-SEFQIHYBc.roa
Signing time: Wed 24 Jan 2024 08:10:25 +0000
ROA not before: Wed 24 Jan 2024 08:10:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49223
IP address blocks: 185.39.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3a:85:38:d5:2e:d0:76:a0:16:c5:85:32:15:ee:61:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9253e214c8e5a6f41345be682f682655b1abea5b
Validity
Not Before: Jan 24 08:10:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd3d6594482640c1e4ba6d52cfe4841502076017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:59:c9:b6:ee:c0:15:b8:66:e9:91:ed:a7:1f:
d9:f4:87:a9:3c:c6:00:df:34:7a:65:44:56:9d:18:
17:9f:17:a1:73:65:8e:2d:49:71:ce:1c:c9:9d:13:
27:5d:36:e8:c8:da:e3:fd:dc:67:2d:be:33:c3:45:
14:fc:be:82:1e:ec:34:0a:03:bc:a7:d1:df:c6:3f:
63:06:e7:00:90:62:3d:ba:a4:ab:f2:65:7d:e7:ef:
a3:62:9f:3b:de:79:d9:a8:51:66:9c:a8:71:cc:41:
b9:aa:a4:e5:de:c0:29:f7:ff:2c:1d:ca:2a:87:9c:
4c:55:eb:13:27:dd:6f:54:1c:1e:d7:3b:35:9a:b4:
ca:b2:81:89:ef:41:a3:bd:d6:84:53:31:72:83:e1:
22:73:5e:66:35:a8:ed:e5:fd:0f:bb:d2:01:14:30:
0b:90:cf:60:a8:c5:a0:94:c0:fb:c3:7f:bd:a5:48:
04:d8:43:62:2c:a3:cc:48:fa:3a:6d:c5:b8:9e:27:
45:a8:4b:eb:76:b7:ef:ec:55:b5:98:59:ac:c9:f9:
07:df:a1:e8:02:40:3f:14:61:2d:a6:a7:15:b3:a7:
d8:ad:47:2b:27:00:95:01:28:f2:8a:4a:16:76:74:
49:b7:94:95:10:c4:ec:9c:02:b2:ac:7d:0e:fc:fa:
06:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3D:65:94:48:26:40:C1:E4:BA:6D:52:CF:E4:84:15:02:07:60:17
X509v3 Authority Key Identifier:
keyid:92:53:E2:14:C8:E5:A6:F4:13:45:BE:68:2F:68:26:55:B1:AB:EA:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/zT1llEgmQMHkum1Sz-SEFQIHYBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.72.0/22
Signature Algorithm: sha256WithRSAEncryption
32:db:f4:ed:63:53:f2:50:72:42:ff:f1:15:30:08:c2:a9:99:
11:93:66:f7:46:fc:b9:ae:d0:67:fe:19:1b:d4:83:31:cc:9e:
ca:5e:d3:3e:50:70:6f:df:27:b1:1c:ac:69:b6:bf:91:a8:9a:
22:91:29:1a:94:73:a9:d8:c2:29:37:79:33:20:84:6b:5d:5a:
57:80:c4:f0:ef:db:51:4b:8d:13:76:70:23:36:f8:4c:90:21:
4f:c2:07:c8:5d:6f:8a:6d:7a:5a:ff:d5:d7:e2:1e:b7:af:0a:
43:50:37:ae:9c:16:16:e8:bf:2d:84:f9:84:42:b3:9d:14:7a:
18:3c:12:bc:6c:36:7c:2b:39:e0:46:43:f3:c1:51:68:65:c7:
a6:6d:04:86:44:1a:9b:c8:46:04:00:dd:99:46:8f:b4:94:fa:
74:3f:66:69:67:ba:72:d8:73:fe:9b:36:54:f9:aa:93:b4:4e:
2f:be:f4:eb:64:2f:c8:5d:57:84:6c:3b:73:a1:bb:0d:cd:d0:
8e:12:63:23:95:77:d4:5b:10:a0:76:37:a1:02:2d:00:de:cf:
f1:eb:2b:55:d5:3d:a6:55:61:8f:ed:ad:d1:44:84:8c:c7:cc:
b1:06:7d:57:66:0d:8c:1b:ce:56:20:eb:15:b3:b8:4d:58:52:
96:a3:10:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:39:29 2024 by rpki-client on console-ams.rpki-client.org