Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ZoPTLnIZEe226VwEnZ4yIgx2AaE.roa
File: ZoPTLnIZEe226VwEnZ4yIgx2AaE.roa (raw, json)
Hash identifier: WDYRjkxM4T9ahYMVaiul9CAFUchaWC2W+t7/5976J/w=
Subject key identifier: 66:83:D3:2E:72:19:11:ED:B6:E9:5C:04:9D:9E:32:22:0C:76:01:A1
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018CCE6CFDD9491F07BC6F3369FAD79C9EAE
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ZoPTLnIZEe226VwEnZ4yIgx2AaE.roa
Signing time: Wed 03 Jan 2024 08:24:58 +0000
ROA not before: Wed 03 Jan 2024 08:24:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42689
IP address blocks: 89.33.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Jun 2024 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ce:6c:fd:d9:49:1f:07:bc:6f:33:69:fa:d7:9c:9e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 3 08:24:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6683d32e721911edb6e95c049d9e32220c7601a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:80:f4:f6:b1:0f:87:f9:5c:cf:a1:90:80:9a:
1d:89:01:c0:9a:b7:53:08:7d:e7:d4:a7:af:0f:2b:
c2:7f:0c:3c:fb:93:92:d1:a4:a8:c4:b9:97:9b:3f:
fa:2f:0f:0f:04:c6:09:8c:be:54:95:3d:95:12:fd:
f9:ac:00:28:c7:ba:f3:59:13:d8:59:0b:32:08:be:
c7:21:8d:24:e7:8c:28:79:69:f3:28:f7:9b:19:95:
f1:a2:6f:c3:29:ce:11:73:cf:fb:6d:61:b4:08:4c:
b8:14:e9:a9:a1:53:10:a6:e8:26:f1:d4:78:d6:ec:
32:f5:1e:1e:88:ce:26:6c:b8:19:40:db:16:dd:8a:
a2:4e:20:10:7e:af:f9:8b:70:66:68:be:f2:ce:e9:
b9:0c:b9:18:5b:fc:f9:81:07:52:04:4c:39:31:8d:
42:7f:35:c6:c5:f7:79:06:9c:44:49:dd:ab:4e:6e:
ee:5c:29:63:04:42:66:6e:6d:42:9a:de:8e:9e:b9:
f0:9d:c7:d3:a3:34:20:78:b8:b3:a4:4e:93:c5:71:
7e:d9:47:72:7b:e4:a1:5f:f0:89:ad:f9:c3:7d:3d:
9f:2c:91:3f:66:0e:67:82:05:cc:95:4b:ac:54:f4:
68:fb:84:f7:17:c9:3e:13:6b:ab:ce:18:9f:00:6c:
83:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:83:D3:2E:72:19:11:ED:B6:E9:5C:04:9D:9E:32:22:0C:76:01:A1
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ZoPTLnIZEe226VwEnZ4yIgx2AaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.195.0/24
Signature Algorithm: sha256WithRSAEncryption
39:97:7c:9c:18:87:96:4e:be:cb:e3:b4:c7:f4:c4:c2:5f:9d:
9c:67:ea:00:dc:a9:b9:de:41:ae:6e:79:ad:a9:37:86:f1:99:
3b:a3:5e:84:42:6f:ad:b7:16:99:4e:de:bb:57:b4:59:d4:6f:
0a:89:48:0e:1c:2b:38:37:ba:20:25:ab:f6:68:16:4f:dc:a8:
2c:e6:6a:7a:f6:47:10:f9:57:43:8c:2e:e2:da:00:07:cf:04:
2e:62:7f:28:7b:ab:21:df:24:1b:d0:10:e3:a6:95:08:e2:75:
bc:a7:ec:71:fb:cc:3c:13:8d:66:03:3c:97:2d:51:ab:8f:b3:
29:c0:a7:7e:d3:d3:e2:f2:b3:ab:be:9d:22:2a:14:5e:a1:d9:
40:d6:80:b9:f9:25:33:cb:bb:98:ed:41:40:db:0c:3d:9f:89:
09:1d:8f:36:75:2c:1d:44:fa:dc:d1:d9:76:e0:93:db:94:15:
08:04:60:f7:ec:03:3d:b9:bc:e0:71:53:a6:0b:59:e8:fe:e2:
29:83:13:64:4f:1c:e7:31:8f:c3:af:a8:30:a9:d5:63:ef:06:
46:15:75:a6:2b:74:c2:19:98:57:f7:f3:51:c3:4b:a9:d4:80:
8b:0e:90:72:44:d9:43:6a:19:85:38:f3:e1:cf:89:12:f7:b9:
b3:e8:ef:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 15:22:49 2024 by rpki-client on console-ams.rpki-client.org