Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/zT2DmlTigRahHxS6ck_YkEtG8eM.roa
File: zT2DmlTigRahHxS6ck_YkEtG8eM.roa (raw, json)
Hash identifier: VfqarjJd7XXmGx8FgRM9KyjdBsfPpzSJh/MHpcUqZ8s=
Subject key identifier: CD:3D:83:9A:54:E2:81:16:A1:1F:14:BA:72:4F:D8:90:4B:46:F1:E3
Certificate issuer: /CN=e467dbe6ac755a9063c360b1525e844fd2a57b93
Certificate serial: 018D5CB9898F016267E3D5EA18CDF95B7B28
Authority key identifier: E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/zT2DmlTigRahHxS6ck_YkEtG8eM.roa
Signing time: Tue 30 Jan 2024 23:34:39 +0000
ROA not before: Tue 30 Jan 2024 23:34:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207489
IP address blocks: 80.244.4.0/24 maxlen: 24
194.76.145.0/24 maxlen: 24
194.76.149.0/24 maxlen: 24
194.76.150.0/24 maxlen: 24
194.76.186.0/24 maxlen: 24
2a0f:ae40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 May 2024 04:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5c:b9:89:8f:01:62:67:e3:d5:ea:18:cd:f9:5b:7b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e467dbe6ac755a9063c360b1525e844fd2a57b93
Validity
Not Before: Jan 30 23:34:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd3d839a54e28116a11f14ba724fd8904b46f1e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8d:e1:82:8f:cb:52:a3:b0:e2:f0:b8:91:37:
b5:e2:a4:70:18:67:e5:ad:de:2f:b2:27:db:3d:1e:
c7:2a:68:9d:e3:a3:4f:c0:de:4b:12:ad:85:95:c8:
61:0c:a9:3c:0a:33:80:c6:b7:16:fd:f2:5a:ae:71:
64:d1:c7:fd:7b:10:96:87:ac:c6:95:5f:6c:1d:6d:
2a:e3:a0:a5:f2:63:5c:f7:32:16:a8:f2:f8:03:09:
b3:dc:3d:86:f6:1a:d0:b6:c4:58:bc:84:df:36:5a:
c4:5e:8e:6b:14:1d:21:17:54:2e:b7:f5:58:08:9f:
2b:00:6a:9b:af:7d:60:75:96:4b:a4:88:bf:28:3b:
3f:f5:80:e1:f8:90:22:56:d8:bf:41:52:f8:c1:1d:
82:2c:a8:cc:d7:ea:30:6c:8f:ed:e4:cb:25:f0:1c:
44:9b:34:8f:30:8f:c3:b3:d2:2d:02:a0:ac:09:94:
c2:2f:85:d9:b2:d8:ce:e8:64:bc:4c:f3:e5:66:d2:
b8:bd:cc:9e:a1:29:54:8c:81:33:a7:b8:60:7f:fd:
75:b3:7e:3c:e9:10:a8:ab:3c:3e:a3:70:fa:9b:d0:
b9:d1:13:ad:17:e7:9b:48:77:06:60:94:4f:c7:45:
1c:86:6b:0b:56:cc:08:be:10:71:12:34:33:d2:09:
70:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3D:83:9A:54:E2:81:16:A1:1F:14:BA:72:4F:D8:90:4B:46:F1:E3
X509v3 Authority Key Identifier:
keyid:E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/zT2DmlTigRahHxS6ck_YkEtG8eM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.4.0/24
194.76.145.0/24
194.76.149.0-194.76.150.255
194.76.186.0/24
IPv6:
2a0f:ae40::/32
Signature Algorithm: sha256WithRSAEncryption
39:20:81:f6:79:b4:93:aa:18:ca:81:26:22:16:3c:57:9d:fd:
f2:fd:c4:04:3e:c8:ea:a1:4b:4b:13:16:8e:dc:3b:e3:dd:5c:
a5:68:bb:69:46:17:0b:65:21:37:2f:9b:5b:c5:71:78:0e:f7:
56:6e:93:68:a6:8d:d4:f1:50:ed:b1:da:9f:6f:b1:87:e3:ca:
f5:37:4d:72:69:91:44:39:76:be:82:b1:7d:5b:f0:c4:78:88:
07:c3:3e:ff:ca:30:4d:5c:dc:2c:1b:79:78:52:8b:99:ed:59:
4e:ff:33:dd:9f:86:d6:e1:62:64:f3:17:66:a5:2b:f1:3b:93:
28:ef:06:3a:63:d0:f1:78:81:61:d1:6a:f2:e2:c5:6b:d8:6c:
1d:0b:ed:01:b8:6f:9c:47:eb:6b:90:e8:9d:fe:68:78:cb:c1:
90:ff:9d:65:d5:51:0a:81:47:da:c3:48:83:7f:96:00:d6:96:
e6:23:19:30:a0:64:f4:b1:61:dc:52:1f:74:df:aa:79:a4:78:
fc:7a:92:9a:4c:c4:a3:d3:c8:7a:91:e2:bb:d7:76:f6:c5:5e:
a8:e6:ad:cc:56:77:bf:9f:8d:cb:1b:98:5e:8c:67:5e:7a:28:
a4:22:5b:fd:22:9b:94:82:9c:ba:51:6f:01:b0:8b:d9:db:f2:
a1:2f:36:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 08:30:38 2024 by rpki-client on console-ams.rpki-client.org