Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/1-zzIP2T_WELefxadwcAINr9MERs.roa
File: 1-zzIP2T_WELefxadwcAINr9MERs.roa (raw, json)
Hash identifier: uIWZl9svEV1yaX1SLpzeq/KdZhuYe2G8W9ZJvcLL9tM=
Subject key identifier: FB:3C:C8:3F:64:FF:58:42:DE:7F:16:9D:C1:C0:08:36:BF:4C:11:1B
Certificate issuer: /CN=9ae7d661afca3d3370b8e634494d5246b83d585f
Certificate serial: 018CC5004D18081BD1E7E45C410F6EF6B9C4
Authority key identifier: 9A:E7:D6:61:AF:CA:3D:33:70:B8:E6:34:49:4D:52:46:B8:3D:58:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mufWYa_KPTNwuOY0SU1SRrg9WF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/1-zzIP2T_WELefxadwcAINr9MERs.roa
Signing time: Mon 01 Jan 2024 12:29:40 +0000
ROA not before: Mon 01 Jan 2024 12:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62320
IP address blocks: 89.45.84.0/22 maxlen: 24
185.39.228.0/22 maxlen: 24
2a01:4aa0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mufWYa_KPTNwuOY0SU1SRrg9WF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:4d:18:08:1b:d1:e7:e4:5c:41:0f:6e:f6:b9:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae7d661afca3d3370b8e634494d5246b83d585f
Validity
Not Before: Jan 1 12:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb3cc83f64ff5842de7f169dc1c00836bf4c111b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3f:c6:a7:fb:74:57:a4:b6:7f:ee:6c:9f:83:
33:ed:a7:a5:cc:ab:b5:6d:2d:0d:42:9c:1d:0f:17:
ff:3f:60:58:65:2d:53:c6:ab:2c:e6:29:41:b0:34:
43:1e:e4:79:3c:75:34:ca:83:a0:b9:1e:f4:2b:24:
82:7c:09:c5:30:2e:ca:99:ef:84:b3:2f:4f:73:5a:
02:68:c8:85:ef:32:57:10:cf:f6:fb:5a:8e:6d:a5:
8e:b4:36:25:60:f8:10:fa:90:86:a0:df:84:eb:90:
30:13:3d:66:60:96:62:4f:9f:cb:ff:79:8b:1c:8d:
e1:65:c9:49:6d:ee:92:5b:f3:c9:57:ce:fb:e7:ef:
0b:25:00:9e:29:90:5c:37:dc:54:c3:37:bf:07:b2:
84:d9:82:be:d1:8a:f0:90:0a:4b:4e:df:aa:ca:a6:
99:c7:43:dc:c1:e9:ea:01:ad:ec:44:ff:eb:74:7f:
17:34:db:3e:e6:6a:87:f2:7e:73:3a:a9:94:4d:25:
aa:d6:79:7a:d0:79:76:a0:d3:7e:1b:fc:b1:79:61:
64:0c:22:83:1d:b5:f1:66:98:f5:0f:7e:fb:15:cc:
37:c4:63:8e:aa:74:5f:16:f5:66:56:92:71:66:e9:
db:3a:c7:4b:0d:58:76:54:51:75:b3:53:87:0b:c3:
ca:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3C:C8:3F:64:FF:58:42:DE:7F:16:9D:C1:C0:08:36:BF:4C:11:1B
X509v3 Authority Key Identifier:
keyid:9A:E7:D6:61:AF:CA:3D:33:70:B8:E6:34:49:4D:52:46:B8:3D:58:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mufWYa_KPTNwuOY0SU1SRrg9WF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/1-zzIP2T_WELefxadwcAINr9MERs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.45.84.0/22
185.39.228.0/22
IPv6:
2a01:4aa0::/32
Signature Algorithm: sha256WithRSAEncryption
33:2d:82:2c:e8:28:07:5f:48:92:d8:87:1a:75:a6:65:87:81:
13:07:ae:e2:a8:94:5f:6e:87:65:7d:21:8a:f2:21:cb:a6:5d:
ca:72:c1:bd:17:94:42:91:74:bb:ac:61:19:8f:4f:04:49:e8:
c2:4a:f6:c3:80:28:43:a8:1a:8c:22:4b:46:ea:84:39:71:16:
fb:ee:16:5b:71:b8:05:72:eb:6c:15:e0:ee:db:bf:bc:9b:f4:
2f:c1:cf:47:b8:76:56:5b:53:a7:e8:1e:9a:07:33:41:a4:b0:
f8:62:3c:36:5e:07:52:f7:2e:9d:ea:1c:08:04:f0:5a:8c:4e:
e8:71:3d:00:69:12:05:ee:54:80:fa:7f:7b:8d:88:9d:90:9d:
aa:f1:b8:a7:04:9c:c5:4f:d0:f5:4b:bf:4a:65:a1:9b:45:40:
e2:10:15:0e:e7:46:30:0f:90:5d:73:23:a2:24:46:93:48:5b:
c5:1a:44:9a:cf:ee:f4:8c:25:25:fb:10:02:dd:17:ee:ea:24:
10:a5:9b:e2:cb:50:7d:63:49:68:a9:e0:e4:60:cf:c6:68:47:
b3:b4:de:d6:0e:1e:03:f2:73:f0:0e:2d:23:52:ea:4d:2c:91:
bb:c4:59:42:fe:1e:ac:1f:df:2f:31:04:db:b1:91:4c:cc:94:
8a:d9:e8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:46:56 2024 by rpki-client on console-ams.rpki-client.org