Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ztbL6OkjxouIbdTEwUOlf6mhWsA.roa
File: ztbL6OkjxouIbdTEwUOlf6mhWsA.roa (raw, json)
Hash identifier: H9WeqnkEbg1VHeINzU8t46sDfXRu/ffnTdGySfTbOyE=
Subject key identifier: CE:D6:CB:E8:E9:23:C6:8B:88:6D:D4:C4:C1:43:A5:7F:A9:A1:5A:C0
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018EBCA8FBA1D7E685331885EB799604B376
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ztbL6OkjxouIbdTEwUOlf6mhWsA.roa
Signing time: Mon 08 Apr 2024 07:42:54 +0000
ROA not before: Mon 08 Apr 2024 07:42:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 45.85.104.0/24 maxlen: 24
193.19.108.0/24 maxlen: 24
194.242.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bc:a8:fb:a1:d7:e6:85:33:18:85:eb:79:96:04:b3:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Apr 8 07:42:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ced6cbe8e923c68b886dd4c4c143a57fa9a15ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:15:99:67:7f:3a:92:93:82:17:b7:dc:b0:3f:
e2:13:66:b1:8e:4c:0a:36:ae:d2:6f:60:55:7a:b7:
27:b6:f0:e0:95:fa:e2:8e:56:c0:43:22:9a:63:96:
ac:64:f7:b6:71:81:36:e4:b3:45:96:11:9c:47:76:
54:1e:10:0e:90:08:d1:83:78:37:18:9d:41:5c:8d:
82:7b:9b:e0:5b:e9:77:c5:81:c0:42:d7:fc:35:79:
a8:77:76:47:18:a3:56:d8:48:81:59:4a:f9:25:44:
d2:68:89:e2:30:5a:3b:a0:f4:91:7c:41:20:04:d9:
eb:45:ea:6a:a7:4d:91:fb:dc:1f:c6:d9:49:54:7a:
be:eb:84:8b:54:fe:47:9b:14:63:8e:49:41:f8:d7:
0b:31:6f:ed:0f:54:5c:c8:4b:1a:ba:4a:6b:e8:92:
14:0f:3a:2c:ca:de:18:e0:40:29:f2:94:5c:de:99:
2b:85:5a:d7:87:bf:8c:a2:54:eb:64:96:de:7f:e6:
70:46:99:3d:ec:09:24:b2:91:37:3a:9c:56:b8:8b:
2d:1d:de:64:89:19:08:e8:61:8a:1a:85:a2:4b:4b:
8b:30:45:48:43:e8:01:70:ce:40:2c:f2:9e:c7:66:
35:39:64:92:e2:9c:6c:03:ee:21:3b:64:4a:a8:ae:
88:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D6:CB:E8:E9:23:C6:8B:88:6D:D4:C4:C1:43:A5:7F:A9:A1:5A:C0
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ztbL6OkjxouIbdTEwUOlf6mhWsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.104.0/24
193.19.108.0/24
194.242.2.0/24
Signature Algorithm: sha256WithRSAEncryption
89:11:f7:4b:f6:7d:cf:54:c7:65:c0:4f:aa:16:8d:43:47:f7:
27:27:26:5d:87:cb:93:05:1a:37:75:a0:c5:c9:85:e7:d6:03:
3e:08:78:fe:8c:1b:45:4b:a5:45:83:1c:bd:aa:5e:da:16:71:
3d:c3:9f:94:9e:66:58:c2:2d:3b:40:ed:ef:00:74:86:04:d7:
d6:aa:4a:7f:55:b2:bc:15:bb:dd:71:a0:38:e3:bb:ef:7c:8c:
bf:53:bb:1b:c3:f0:70:56:f5:7a:8a:10:39:27:ec:65:2f:50:
c8:85:2d:cd:c2:26:96:a1:f3:f8:a3:69:a4:df:04:bb:b4:df:
b7:4a:2e:ca:0a:bb:d3:82:e4:5d:88:af:24:1b:3c:f5:0e:51:
e8:42:34:cb:3f:73:29:ee:33:0d:57:7e:c1:2c:0e:49:9a:62:
ee:28:82:2f:52:d5:f5:5f:94:a9:3d:20:37:3b:f4:58:01:90:
a0:e8:04:5a:2e:18:c4:3f:49:2c:dc:5c:e8:ab:07:88:87:ee:
e6:15:ba:08:72:7a:ee:92:0c:26:93:f2:61:e9:0d:f1:74:49:
77:16:af:13:65:ec:13:7b:5d:19:2c:dc:6a:5e:d1:eb:60:84:
24:b9:5d:cc:f9:19:6b:f3:70:99:c0:06:79:14:f9:93:bb:e5:
e3:bd:fa:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:13:25 2024 by rpki-client on console-ams.rpki-client.org