Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/zmr6lg4zdXP1GZFEysRt0jxCZGM.roa
File: zmr6lg4zdXP1GZFEysRt0jxCZGM.roa (raw, json)
Hash identifier: lBhYfFIToxNtzP6Owi2GeAp93pfJp7ctG4tcQR1Ff80=
Subject key identifier: CE:6A:FA:96:0E:33:75:73:F5:19:91:44:CA:C4:6D:D2:3C:42:64:63
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 018CC348A967581B1268D27EB010BB112D74
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/zmr6lg4zdXP1GZFEysRt0jxCZGM.roa
Signing time: Mon 01 Jan 2024 04:29:28 +0000
ROA not before: Mon 01 Jan 2024 04:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42626
IP address blocks: 194.27.48.0/23 maxlen: 23
95.183.216.0/22 maxlen: 22
193.255.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:a9:67:58:1b:12:68:d2:7e:b0:10:bb:11:2d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jan 1 04:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce6afa960e337573f5199144cac46dd23c426463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:cc:15:12:5b:92:c6:93:11:d8:0e:5f:46:de:
db:00:c2:e0:1b:c7:d4:a5:ed:f1:e8:b0:fa:4a:5e:
48:bc:cb:d9:20:52:01:3a:2e:99:fb:f7:49:87:75:
e1:bc:93:38:bd:9a:17:d1:ab:41:37:e4:24:bb:1a:
6a:9a:8c:eb:55:81:a3:e8:03:2e:95:ba:9a:7d:a3:
a6:5e:80:2a:2c:be:c4:54:16:c2:3b:16:17:a7:fd:
22:e6:40:06:95:76:f9:86:5c:a2:f9:ea:62:02:31:
7f:97:75:d8:f4:9c:27:54:28:35:5a:22:c0:06:e6:
de:b7:f4:4d:5f:54:ff:71:fb:c9:83:1c:16:2c:2d:
84:3b:5e:bb:6d:76:fa:54:c8:c3:4e:8d:c8:30:f6:
dd:09:32:08:41:b8:70:56:1d:f3:d3:d6:66:8e:70:
63:f7:c6:91:27:17:cd:7c:bb:4c:41:64:bf:9e:a2:
25:a0:70:03:dc:76:05:10:bf:d4:c3:75:c1:c7:53:
01:21:c4:c3:e3:ec:c4:14:6a:41:90:33:30:98:84:
7b:69:82:c5:6e:c5:de:72:49:ba:9c:d1:61:36:59:
b6:f0:3b:83:e7:ae:7b:6d:54:57:f0:01:9d:52:a6:
4e:47:0c:3d:c2:e7:a0:40:6a:4e:c3:98:c1:08:60:
d5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6A:FA:96:0E:33:75:73:F5:19:91:44:CA:C4:6D:D2:3C:42:64:63
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/zmr6lg4zdXP1GZFEysRt0jxCZGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.183.216.0/22
193.255.58.0/24
194.27.48.0/23
Signature Algorithm: sha256WithRSAEncryption
93:9f:f3:af:f8:fd:6c:d1:85:56:24:42:ff:fc:57:46:17:81:
07:c3:86:43:a4:5f:51:9f:b8:f6:21:d8:2e:51:e1:09:b8:23:
1e:2b:20:66:82:d8:e5:ae:92:49:eb:2e:0e:7d:dd:eb:f7:b9:
2e:3c:33:83:f9:f3:40:9a:9a:a5:e5:e6:3a:4c:fd:57:13:3d:
71:61:99:94:57:78:ca:24:30:01:e6:99:f2:65:82:97:9f:d6:
b2:17:74:29:fd:f5:e0:c3:30:17:18:3e:56:9e:20:61:b7:72:
43:c4:b3:89:95:af:33:7b:0c:60:0d:5b:11:cd:de:d9:de:e0:
e3:82:d5:33:48:54:b9:e1:d2:b0:b2:eb:a8:91:2e:3b:5e:ba:
5a:f8:ba:09:4c:fa:ef:44:f0:f7:ca:b4:7d:30:52:f5:c9:fc:
df:f4:18:5e:ff:bf:a7:26:dd:ee:35:c1:ce:3f:90:71:7d:65:
64:7a:f7:69:00:21:56:95:01:68:f8:e0:25:5b:9b:cc:32:4f:
0f:ce:a7:32:84:38:0a:c6:cb:85:32:1d:08:9b:bc:55:0a:1c:
ff:86:3b:c5:18:bb:8d:6e:39:ac:5f:79:81:39:d9:97:1e:aa:
a0:72:cc:42:93:b9:67:19:6f:f4:29:e8:c6:eb:ef:36:f0:f6:
da:cc:10:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 21:36:28 2024 by rpki-client on console-fra.rpki-client.org