Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/ZvxiRYSIFBVFPup1qmysEjVY4p8.roa
File: ZvxiRYSIFBVFPup1qmysEjVY4p8.roa (raw, json)
Hash identifier: Asr0DLp61S5RmixULZWsypPbegtk4hGBHxzhVqKyMzA=
Subject key identifier: 66:FC:62:45:84:88:14:15:45:3E:EA:75:AA:6C:AC:12:35:58:E2:9F
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 018CC49385A1C80DEFC7E5FDCAF3B54E3B15
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/ZvxiRYSIFBVFPup1qmysEjVY4p8.roa
Signing time: Mon 01 Jan 2024 10:30:51 +0000
ROA not before: Mon 01 Jan 2024 10:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28920
IP address blocks: 149.126.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 01:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:85:a1:c8:0d:ef:c7:e5:fd:ca:f3:b5:4e:3b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jan 1 10:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66fc624584881415453eea75aa6cac123558e29f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:22:ee:f2:70:af:54:6a:ad:f3:d4:2e:a6:d1:
c9:9f:63:46:29:c2:61:14:37:73:3f:85:d3:1d:4e:
80:c8:d4:6f:d2:86:21:41:da:1b:a2:e0:e9:32:3b:
4b:d4:e6:2f:8f:2b:e8:a3:65:0a:4d:25:c7:87:0f:
c9:41:b6:03:9f:d4:af:74:bf:2a:5d:ac:9a:ee:5d:
ad:72:26:81:10:ff:83:59:ea:88:92:6f:57:a5:5d:
5d:e9:d5:b6:c4:a0:28:c0:b4:20:7d:68:e4:de:9f:
fe:18:61:21:c8:1d:ef:17:14:bb:33:a5:da:d4:03:
b6:b4:38:4a:aa:02:0d:bf:bb:97:00:d1:53:18:dc:
b7:78:02:55:b9:26:85:c7:3f:5e:e1:34:e4:84:5d:
fb:20:69:10:18:15:53:bb:61:5d:28:f6:e0:2b:cb:
c7:94:57:c7:5e:10:93:f4:53:d6:eb:b7:aa:92:e0:
c0:f9:73:88:3d:47:a6:81:b7:35:cc:98:21:bb:4b:
87:49:ee:01:01:62:7f:21:4c:1e:90:a5:aa:d5:c2:
ff:21:a3:a1:29:d8:4b:b5:e0:97:b0:47:c9:9d:20:
e9:0b:93:8f:cf:a6:43:85:58:c1:e9:7d:d4:fb:2f:
c3:d0:47:98:b8:d3:39:c1:3a:d4:ed:3d:44:45:13:
e9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FC:62:45:84:88:14:15:45:3E:EA:75:AA:6C:AC:12:35:58:E2:9F
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/ZvxiRYSIFBVFPup1qmysEjVY4p8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.126.12.0/24
Signature Algorithm: sha256WithRSAEncryption
63:26:ad:5c:4c:83:4e:e0:a0:84:46:f1:92:ba:fe:5a:28:7b:
81:b5:9f:dd:0a:e4:cb:f7:4e:73:8f:d2:7e:78:d0:1f:a7:4a:
4b:99:c5:09:e2:cd:23:15:4d:84:fe:70:ce:bb:bb:db:46:5f:
97:72:b6:2f:7d:ff:9d:0b:df:e2:ac:ca:91:2b:e2:57:b2:17:
91:7e:12:e3:8a:ff:ba:a2:bd:e2:6b:ee:04:f7:72:59:6b:de:
8b:f9:d6:90:0f:26:7f:dc:4e:b5:a2:83:ae:b0:6d:00:15:f1:
e7:aa:15:55:0a:59:f5:9c:43:2c:c1:01:a5:e9:ba:b7:53:23:
75:68:54:7e:e2:fd:3f:5a:42:3c:df:de:ed:4f:3d:c4:5a:f0:
89:7d:5e:84:5d:53:51:72:bc:80:e2:40:1b:dd:86:d9:73:8e:
03:b8:f4:c2:2c:2c:44:43:b9:22:4b:15:0c:56:6b:a7:08:a2:
e8:e9:4a:d1:01:a0:d0:cb:34:93:fd:b9:0e:ad:40:64:fa:ed:
b7:6c:64:a3:e1:84:36:96:12:99:b7:86:1f:0d:81:0f:95:d0:
18:2e:00:51:31:2d:28:72:e4:8f:ed:8e:a5:e3:2a:b9:c0:c9:
f3:b2:61:c6:cf:72:70:42:f0:94:45:9e:af:b9:6e:bd:04:68:
6b:94:d7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 11:18:05 2024 by rpki-client on console-ams.rpki-client.org