Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/ZjWgzC6eXLP-sEWwCK6MY3kbWxI.roa
File: ZjWgzC6eXLP-sEWwCK6MY3kbWxI.roa (raw, json)
Hash identifier: 3mKZ7IHyDX/09hiXIIDCKF/xkgomhJ729Se87xjHCJg=
Subject key identifier: 66:35:A0:CC:2E:9E:5C:B3:FE:B0:45:B0:08:AE:8C:63:79:1B:5B:12
Certificate issuer: /CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Certificate serial: 0192E107DBC6A2A560C22DC380999FE41688
Authority key identifier: 80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/ZjWgzC6eXLP-sEWwCK6MY3kbWxI.roa
Signing time: Thu 31 Oct 2024 05:24:01 +0000
ROA not before: Thu 31 Oct 2024 05:24:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202391
IP address blocks: 45.142.191.0/24 maxlen: 24
185.141.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e1:07:db:c6:a2:a5:60:c2:2d:c3:80:99:9f:e4:16:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Validity
Not Before: Oct 31 05:24:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6635a0cc2e9e5cb3feb045b008ae8c63791b5b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:75:b6:41:96:2d:bc:6e:24:4c:99:c9:21:71:
bc:b3:5b:90:d2:c3:64:07:b2:0e:ae:2e:dc:ef:41:
ea:92:29:ee:cb:f6:63:d6:c1:d0:61:1b:b4:70:f2:
2f:6a:0b:2c:76:5f:67:b6:43:58:5e:ca:f0:af:36:
e9:c0:87:f7:56:70:d1:9e:a1:90:19:76:f4:b9:51:
d1:6e:c6:fc:63:8f:dd:0e:4c:02:51:75:7c:12:e2:
75:f8:a8:23:04:41:0a:04:5a:b0:f1:8e:f9:49:dc:
d1:1a:4d:3f:e5:5a:ab:9a:24:2d:85:32:b6:15:a5:
4b:06:96:c9:eb:b4:b0:46:c9:4e:4e:d4:23:a5:c0:
2c:b1:f5:39:9f:95:52:ea:29:64:4a:6a:6f:30:3f:
c9:26:5a:cc:5c:5c:34:a9:b0:db:97:54:57:58:2d:
32:45:ed:c9:c2:25:e9:91:97:e8:d0:64:70:15:d5:
b3:6d:a9:43:d1:fd:6b:70:03:0a:00:2c:ea:eb:9e:
d5:30:7a:3f:1a:5d:7d:af:62:dc:e7:dc:d9:e9:8f:
6a:14:38:53:39:ff:78:06:7f:a6:ea:ad:b3:49:3e:
0e:f0:a4:70:de:6d:e1:6f:96:30:19:69:f3:d0:f2:
86:8f:ac:29:cb:30:fc:17:2c:18:68:3a:26:d3:4a:
fe:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:35:A0:CC:2E:9E:5C:B3:FE:B0:45:B0:08:AE:8C:63:79:1B:5B:12
X509v3 Authority Key Identifier:
keyid:80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/ZjWgzC6eXLP-sEWwCK6MY3kbWxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.191.0/24
185.141.36.0/22
Signature Algorithm: sha256WithRSAEncryption
93:c7:b7:1c:46:28:3d:24:d7:a9:2d:16:80:e0:23:e1:7e:81:
87:59:6a:5f:f7:6f:ac:0a:d3:89:d0:6f:6a:36:1d:7a:db:b9:
49:51:de:6f:f0:ec:31:78:85:9f:2d:ab:42:32:f1:9f:d1:f5:
dd:19:19:11:f5:cc:5c:9f:f6:0a:90:fb:88:9b:ec:cd:b0:c5:
00:7d:26:42:c6:6a:a9:ad:14:f9:23:5b:ce:d4:fa:09:80:55:
83:4b:f7:b0:63:7c:53:79:14:09:51:cc:20:3d:c7:61:91:8a:
17:77:56:38:b5:51:84:83:3c:9e:b3:84:22:f9:db:bd:e7:3f:
7b:8a:8a:1a:2d:1d:3c:25:95:de:70:83:7a:00:2a:93:b6:96:
56:05:72:fa:f8:ce:c8:f9:5b:20:14:01:29:61:5d:f6:5e:8e:
27:0f:95:dd:ce:bf:d9:99:c7:c9:12:74:a0:b8:e9:d9:7c:a3:
4c:43:e9:f5:d9:0a:76:af:2a:d2:48:dc:3b:b0:35:dc:cd:21:
27:cc:09:5a:30:d4:03:7d:84:b6:e2:8d:dc:ea:2b:f6:5a:33:
4f:db:a5:5e:d7:9e:71:a0:46:d3:42:b8:c9:3e:f9:66:df:4a:
4a:44:9f:5e:e5:d3:d7:99:db:aa:70:1d:53:3e:ca:e3:bf:0e:
5d:55:f6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:23:01 2024 by rpki-client on console-ams.rpki-client.org