Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/DZNT48SieMJk1RFPYGnmt28d-yA.roa
File: DZNT48SieMJk1RFPYGnmt28d-yA.roa (raw, json)
Hash identifier: gHko4Jnnn3dteaM1tCpqTj7YlXro55/zGZBRinZyrj4=
Subject key identifier: 0D:93:53:E3:C4:A2:78:C2:64:D5:11:4F:60:69:E6:B7:6F:1D:FB:20
Certificate issuer: /CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Certificate serial: 018CC8015F3F5952304546C45EB6F336551C
Authority key identifier: FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/DZNT48SieMJk1RFPYGnmt28d-yA.roa
Signing time: Tue 02 Jan 2024 02:29:42 +0000
ROA not before: Tue 02 Jan 2024 02:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12876
IP address blocks: 62.4.0.0/19 maxlen: 19
212.83.160.0/19 maxlen: 19
212.47.224.0/19 maxlen: 19
62.210.0.0/16 maxlen: 16
195.154.0.0/16 maxlen: 16
212.83.128.0/19 maxlen: 19
212.129.0.0/18 maxlen: 18
2001:bc8::/32 maxlen: 38
2001:bc8:1400::/38 maxlen: 38
2001:bc8:1800::/38 maxlen: 38
2001:bc8:1c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:5f:3f:59:52:30:45:46:c4:5e:b6:f3:36:55:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Validity
Not Before: Jan 2 02:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d9353e3c4a278c264d5114f6069e6b76f1dfb20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:78:35:fb:d7:29:34:be:a4:46:44:20:83:9b:
04:96:63:58:ce:91:29:47:ed:36:2d:37:31:50:5c:
ae:7c:63:59:ef:9f:8a:d3:e1:fb:36:53:5f:a3:aa:
7e:5f:39:13:1a:97:6b:b1:4a:e7:58:56:f6:3f:4e:
62:7e:4b:cf:3e:d3:47:7a:d7:ee:39:08:2d:ba:ff:
af:25:69:89:f2:af:cb:1c:4f:3c:e1:88:42:85:be:
ba:85:82:6d:db:fb:e5:26:64:9b:1d:90:3b:d1:6b:
39:e1:a2:4e:a3:a5:6d:20:0f:ad:9c:b5:bd:b0:16:
e0:d5:cf:36:85:03:d3:75:8a:90:9e:51:86:51:21:
fc:d9:fd:c4:4b:7d:05:3c:1a:0a:2f:3c:43:f0:f2:
e7:db:aa:83:1a:59:89:24:69:6a:06:b4:43:fe:2b:
69:ae:cb:24:ff:3b:4b:cd:97:23:f6:fb:69:6b:a8:
fc:d2:8f:3e:0f:07:71:f6:f7:55:3c:3b:3b:93:49:
fc:ad:97:7b:d6:6a:73:91:c0:a0:2d:8a:02:6e:ae:
c1:4f:16:6b:1b:c3:0e:8e:aa:8d:00:fe:75:51:e7:
89:a2:73:bb:0d:56:19:ef:8d:13:24:1b:e2:5f:5d:
9e:c0:06:08:bb:5e:9a:97:01:6a:99:f5:42:4b:0e:
a9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:93:53:E3:C4:A2:78:C2:64:D5:11:4F:60:69:E6:B7:6F:1D:FB:20
X509v3 Authority Key Identifier:
keyid:FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/DZNT48SieMJk1RFPYGnmt28d-yA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.4.0.0/19
62.210.0.0/16
195.154.0.0/16
212.47.224.0/19
212.83.128.0/18
212.129.0.0/18
IPv6:
2001:bc8::/32
Signature Algorithm: sha256WithRSAEncryption
26:2f:b4:7b:3e:4d:70:9d:bf:cc:47:c3:c5:f9:3c:10:a6:f1:
c7:a4:cf:3b:89:35:d6:95:19:db:0c:3b:20:22:a3:4e:91:b2:
80:c9:36:bd:f4:c0:85:80:e2:9f:04:72:b5:6d:8b:a6:a0:e4:
a6:ea:a3:0b:3c:74:1f:44:ee:d9:70:5f:28:69:37:70:1d:dd:
c7:74:0b:17:24:ce:a8:e0:5a:c1:44:e1:17:d6:9e:27:8d:9b:
7a:f2:20:f0:45:e3:fc:20:cf:36:e1:f0:0b:7a:39:5b:66:e1:
0b:5a:ba:a7:c3:9c:26:6a:bd:7a:9f:f7:ac:ad:fa:80:0f:94:
a7:c1:ee:5b:59:6a:c6:fb:97:2c:9c:80:c6:d2:73:23:fc:12:
a4:1f:34:cf:2c:af:62:ee:9c:ee:c4:0c:7a:91:4d:00:88:c1:
0e:33:88:9b:32:15:64:6c:d5:18:9f:ac:cf:f8:0f:0c:90:5a:
ec:ca:e6:1b:2b:38:e7:70:1d:dd:73:08:76:44:c4:c3:f6:76:
4f:27:4e:e5:fb:1e:3b:a4:76:90:41:8b:d9:72:b7:23:8e:8c:
ad:86:d6:14:fe:24:bc:96:87:c9:b5:7e:f9:79:35:37:4d:47:
59:b9:b0:e8:5a:40:18:b8:e2:c9:f4:6b:7f:2d:b5:f5:84:5c:
4b:50:2d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:16:25 2024 by rpki-client on console-fra.rpki-client.org