Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Zt7QRs9XWnWoLZJsWBu38c_zRfw.roa
File: Zt7QRs9XWnWoLZJsWBu38c_zRfw.roa (raw, json)
Hash identifier: HTLDc3MZLj6FsT6n0Mf7jUaiiyw5aMuTH9U8uanC3Qo=
Subject key identifier: 66:DE:D0:46:CF:57:5A:75:A8:2D:92:6C:58:1B:B7:F1:CF:F3:45:FC
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018CC8DE8772EAB477132924B9AC84B377DA
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Zt7QRs9XWnWoLZJsWBu38c_zRfw.roa
Signing time: Tue 02 Jan 2024 06:31:15 +0000
ROA not before: Tue 02 Jan 2024 06:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61112
IP address blocks: 45.8.186.0/24 maxlen: 24
85.208.104.0/24 maxlen: 24
5.253.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:87:72:ea:b4:77:13:29:24:b9:ac:84:b3:77:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 2 06:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66ded046cf575a75a82d926c581bb7f1cff345fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4e:a2:30:a1:97:ac:76:5e:6b:a9:08:55:0b:
79:f1:ae:03:fc:84:ae:76:78:a8:10:48:71:7b:18:
b7:1c:7d:97:b9:da:8b:15:d0:a1:9f:56:24:1c:d5:
07:43:18:f3:f8:71:3d:6a:68:38:57:3e:6a:c3:d2:
2c:f3:36:e1:45:dd:c1:87:e7:0d:f5:bc:8a:f4:8f:
85:c7:52:e3:cd:c9:c1:87:bd:bb:b0:f0:d1:56:f3:
f0:17:40:bc:80:c3:1d:e9:fb:51:f9:ee:c3:c7:00:
7f:9f:9d:94:44:74:da:4b:8c:6d:d9:60:96:3d:7f:
d0:97:47:b9:c1:74:3c:a7:5c:23:c3:d7:70:4c:02:
69:d0:9f:c1:4a:6c:5e:34:80:fc:c6:0d:36:16:52:
4a:f5:9b:18:39:98:a0:8f:7c:8a:5d:34:6a:20:44:
75:71:fc:dc:6a:d9:68:09:93:4a:7b:aa:de:db:d4:
8c:4d:99:7b:16:79:ae:c7:6a:a2:a7:fc:20:20:13:
bb:f7:9c:f4:13:19:bb:9f:98:21:be:2a:83:0a:34:
df:09:af:94:d4:58:7e:7b:96:e0:57:23:a4:45:30:
5d:fb:dd:87:41:e4:42:70:43:89:17:f3:21:e2:63:
67:b5:dc:d5:39:6b:38:5e:c8:09:ab:1f:78:4f:8d:
4c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DE:D0:46:CF:57:5A:75:A8:2D:92:6C:58:1B:B7:F1:CF:F3:45:FC
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Zt7QRs9XWnWoLZJsWBu38c_zRfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.36.0/24
45.8.186.0/24
85.208.104.0/24
Signature Algorithm: sha256WithRSAEncryption
36:3b:0b:0c:6e:c3:f3:2e:b5:f6:c9:79:48:e8:55:ab:73:b4:
ec:b2:63:f8:12:36:db:9c:9a:4c:9f:98:cc:7c:9b:76:52:b2:
9c:a9:11:1b:d1:f5:45:eb:20:ad:ab:d7:2b:00:15:25:f9:c5:
2e:f8:fb:a4:a8:91:dc:11:3f:2a:16:87:17:63:79:c1:ee:1a:
e3:55:91:b0:55:14:6f:0a:5a:8e:ad:4b:e8:5f:c0:11:40:80:
f7:4b:c7:d7:8b:5d:ac:1c:41:7c:66:0e:4c:a1:f2:45:e0:3d:
5f:a0:2c:b7:ca:b4:fc:33:a5:a3:11:68:f3:e8:f9:1a:49:aa:
97:51:73:15:69:e4:0e:45:ec:b4:14:5d:a4:7c:69:fd:8c:4f:
d5:a8:23:96:05:aa:e3:ed:6b:13:75:c4:41:00:8c:e1:ce:a1:
0d:b2:06:2c:3c:a0:32:84:5d:99:bc:8d:be:f9:39:94:e5:42:
69:9b:93:c0:3c:45:3b:37:60:83:fc:d9:f7:df:a3:cf:17:aa:
31:3c:c5:3b:d0:8c:fe:b6:cd:3e:c1:fa:01:df:9d:db:9c:42:
82:25:80:ed:be:95:93:4b:99:54:e5:fa:dd:ad:14:94:75:e8:
5c:36:b3:ec:7d:9d:48:19:50:c3:4e:6f:87:92:90:71:c1:f8:
17:4c:c7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:40:26 2024 by rpki-client on console-ams.rpki-client.org