Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/zTBPScB4Ub9rNofGNBZSU5FVF2U.roa
File: zTBPScB4Ub9rNofGNBZSU5FVF2U.roa (raw, json)
Hash identifier: zAM4HwNhMRdAYn1EuFEnpdOySYGRDmk/sL9qw7zA05o=
Subject key identifier: CD:30:4F:49:C0:78:51:BF:6B:36:87:C6:34:16:52:53:91:55:17:65
Certificate issuer: /CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
Certificate serial: 018CC2DB549F4CDCC8606C0F3A03B8F5F0EC
Authority key identifier: 4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/zTBPScB4Ub9rNofGNBZSU5FVF2U.roa
Signing time: Mon 01 Jan 2024 02:30:03 +0000
ROA not before: Mon 01 Jan 2024 02:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12400
IP address blocks: 195.225.46.0/24 maxlen: 24
195.225.47.0/24 maxlen: 24
195.189.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:54:9f:4c:dc:c8:60:6c:0f:3a:03:b8:f5:f0:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
Validity
Not Before: Jan 1 02:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd304f49c07851bf6b3687c63416525391551765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9e:26:bb:49:7b:ef:70:64:57:96:de:17:35:
98:17:b7:9c:b6:be:6d:c1:bd:1c:a5:93:6f:3c:7d:
79:0f:dd:30:97:15:ae:0a:a2:a4:90:4e:88:7f:84:
f7:ce:13:d4:88:88:91:0c:ca:31:d3:2b:ec:14:6d:
8d:5e:95:ea:cd:79:b0:38:b7:e9:41:fd:da:a4:80:
32:1e:52:bc:7d:35:9e:ac:83:a9:e0:9e:7b:12:12:
64:90:e9:08:d3:e9:47:dd:31:50:0b:00:24:ae:b0:
74:65:dd:46:fe:74:fa:e0:83:fb:bd:a8:41:38:6e:
fc:78:4c:55:63:a5:07:d6:05:d7:02:64:77:ae:3a:
64:d4:dc:b5:41:55:48:91:94:ed:1a:85:d5:90:ec:
0d:4f:11:6d:34:ab:64:67:d9:48:fa:a8:9f:98:73:
38:ef:74:cc:c6:6a:10:dd:40:89:f4:3f:ae:d3:2d:
1c:3e:77:c7:0a:4a:45:11:7b:33:4e:53:35:d1:61:
16:fa:fe:8d:06:aa:25:70:0f:83:a4:2c:2b:7f:cd:
39:be:c4:cf:74:75:1f:d9:0f:d9:cd:a1:91:f5:9a:
11:17:16:e9:a3:1a:6c:19:0b:1e:b2:c1:36:22:b3:
94:1e:e1:5c:99:46:65:7f:86:d7:4b:d7:d6:3b:4d:
6d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:30:4F:49:C0:78:51:BF:6B:36:87:C6:34:16:52:53:91:55:17:65
X509v3 Authority Key Identifier:
keyid:4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/zTBPScB4Ub9rNofGNBZSU5FVF2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.189.140.0/24
195.225.46.0/23
Signature Algorithm: sha256WithRSAEncryption
09:95:11:0c:68:67:95:ac:d4:d6:7b:78:b0:16:35:d7:fb:e0:
d6:80:f0:3d:b6:36:a3:f5:16:6a:f0:0d:c8:93:a3:e8:92:b1:
15:b3:46:b9:0a:bc:88:de:07:89:03:cd:e5:99:17:f3:8f:e8:
fc:8b:4a:96:d2:18:83:71:50:96:fb:3a:3d:aa:f8:fb:bc:fd:
22:d8:8c:4b:d9:05:07:8e:0d:a9:5c:ca:03:98:8f:67:fd:d2:
41:1e:94:d3:35:3b:69:42:39:f0:f5:96:0c:9e:42:26:24:14:
e4:fc:6e:6e:77:26:39:33:21:d0:f1:49:4f:35:1c:e8:d4:89:
a3:07:4c:5f:57:fb:99:da:d0:e9:63:b5:48:8a:65:76:a3:50:
e9:6c:3e:c0:8f:4b:94:d7:7b:55:57:f3:e8:00:ac:d3:a1:96:
36:54:e5:aa:13:aa:82:2b:49:53:ae:58:c8:34:10:91:6f:01:
ad:68:e6:2f:e6:89:32:7a:8e:59:4c:65:28:b2:0a:61:0e:b9:
7c:f0:0d:f2:68:30:f2:36:fb:cb:c6:ce:fd:5b:43:7e:6e:51:
b9:63:ad:4a:44:e6:9b:b5:94:02:f0:3f:19:14:b8:d2:b8:98:
87:7f:1a:fb:4d:16:f7:8a:f8:9f:ea:10:8a:71:11:a2:5b:0e:
11:8d:b5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 12:46:49 2024 by rpki-client on console-fra.rpki-client.org