Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Z_NMufyhsfW3jAP0lTcuF8ydxtE.roa
File: Z_NMufyhsfW3jAP0lTcuF8ydxtE.roa (raw, json)
Hash identifier: 8r12LpN542TsBwRwsSp8qb1aftpHQO5RTGwS6Skh8A4=
Subject key identifier: 67:F3:4C:B9:FC:A1:B1:F5:B7:8C:03:F4:95:37:2E:17:CC:9D:C6:D1
Certificate issuer: /CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Certificate serial: 018DEF96B9585807F3F27FED776DC1505864
Authority key identifier: 43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Z_NMufyhsfW3jAP0lTcuF8ydxtE.roa
Signing time: Wed 28 Feb 2024 12:00:48 +0000
ROA not before: Wed 28 Feb 2024 12:00:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41327
IP address blocks: 5.183.110.0/24 maxlen: 24
185.198.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ef:96:b9:58:58:07:f3:f2:7f:ed:77:6d:c1:50:58:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Validity
Not Before: Feb 28 12:00:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67f34cb9fca1b1f5b78c03f495372e17cc9dc6d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:18:b3:e4:9b:85:79:03:be:02:2a:a7:d6:48:
e1:0a:55:5e:52:40:c8:98:8c:2e:f6:62:e3:15:8d:
1c:eb:67:68:3e:9d:fe:d4:5b:b9:56:39:33:06:08:
0d:a7:a6:43:18:67:18:ec:a6:bc:98:2b:29:85:fd:
c0:db:ea:d7:bd:78:9f:eb:65:d6:1d:7b:e1:2c:49:
b8:e6:f7:ae:2b:c8:83:1c:4a:56:86:b4:a9:f5:55:
33:17:99:4d:1b:9d:43:31:ce:57:52:00:29:2d:51:
20:e3:60:16:63:c0:85:b3:c6:2a:c2:96:87:38:19:
42:cf:a3:6e:1e:34:f7:ba:d9:47:67:3c:d1:75:6a:
43:2e:15:83:bf:38:84:81:58:98:60:71:aa:a2:dc:
20:e3:c3:c8:38:b3:05:c5:0d:62:a8:37:b2:15:44:
7a:3e:4b:0e:b2:04:06:b5:c2:b9:34:56:41:3d:41:
00:b9:94:fc:f0:02:ed:60:fa:4d:98:c5:bf:f8:54:
16:a2:b4:d1:d6:98:65:e7:f6:78:b2:02:37:45:46:
f5:81:22:2b:97:df:25:0a:82:d6:8b:06:c3:3e:0c:
78:a3:32:ca:96:a5:bd:ae:35:61:cc:26:c2:68:d9:
a2:1b:90:93:e7:cb:d3:54:15:74:b2:31:50:5d:28:
05:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F3:4C:B9:FC:A1:B1:F5:B7:8C:03:F4:95:37:2E:17:CC:9D:C6:D1
X509v3 Authority Key Identifier:
keyid:43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Z_NMufyhsfW3jAP0lTcuF8ydxtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.110.0/24
185.198.211.0/24
Signature Algorithm: sha256WithRSAEncryption
16:92:45:a7:02:f4:56:fc:4d:e9:39:ac:5b:9d:40:e7:3b:f0:
38:f8:c6:3a:7f:6e:1e:4e:35:f7:aa:f1:a2:5b:f7:51:cc:5f:
95:f8:ee:71:8c:15:94:7b:70:22:e9:c8:b9:c8:68:92:48:49:
d1:aa:a6:90:eb:25:40:ed:4c:c0:dd:1a:a1:71:17:d2:7d:a8:
8c:12:9a:91:8c:20:03:3e:4f:ed:8d:6f:7d:20:ed:78:64:d4:
ca:3c:40:0e:b1:0b:f1:7e:37:5c:16:88:05:a3:8b:10:96:c4:
9b:83:8d:2a:5f:a2:bd:60:d7:03:57:17:9f:cb:b5:e3:e9:fd:
42:8a:e2:30:0f:d9:09:cb:06:1f:63:a8:2f:d7:b0:bf:08:8e:
e4:6c:04:c6:9f:ea:79:69:c1:13:e3:44:6c:31:3c:fb:05:f4:
84:65:88:63:36:e1:9e:e1:65:c6:e1:15:c0:21:94:e1:a0:ea:
02:05:a4:fb:0b:3c:0e:53:05:15:c0:f3:e2:81:ea:0f:40:46:
ae:ad:49:6e:8f:9a:03:b4:c7:bb:fc:ed:31:f8:66:3d:39:62:
5b:8f:ba:35:c9:94:26:9d:08:2a:68:96:fd:4c:43:64:c0:8b:
c0:8c:cf:57:0d:48:2b:6e:3d:a6:7f:89:8b:f4:8f:07:dc:c5:
ec:75:94:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:36:21 2024 by rpki-client on console-fra.rpki-client.org