Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/zgM-If4ilb3a7cLvfsa0GRmFr7g.roa
File: zgM-If4ilb3a7cLvfsa0GRmFr7g.roa (raw, json)
Hash identifier: VpF4RKQDpxuXfPb8N7s4ZGqvXekvH0LUbdYxovauwFo=
Subject key identifier: CE:03:3E:21:FE:22:95:BD:DA:ED:C2:EF:7E:C6:B4:19:19:85:AF:B8
Certificate issuer: /CN=f984bce44fa32801d7f10ce9839b06084ddff2ba
Certificate serial: 018CC7934BFC8C6FD9BD452DE6C914992319
Authority key identifier: F9:84:BC:E4:4F:A3:28:01:D7:F1:0C:E9:83:9B:06:08:4D:DF:F2:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/zgM-If4ilb3a7cLvfsa0GRmFr7g.roa
Signing time: Tue 02 Jan 2024 00:29:28 +0000
ROA not before: Tue 02 Jan 2024 00:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211921
IP address blocks: 176.103.212.0/24 maxlen: 24
176.103.213.0/24 maxlen: 24
176.103.215.0/24 maxlen: 24
176.103.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:4b:fc:8c:6f:d9:bd:45:2d:e6:c9:14:99:23:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f984bce44fa32801d7f10ce9839b06084ddff2ba
Validity
Not Before: Jan 2 00:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce033e21fe2295bddaedc2ef7ec6b4191985afb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:80:3f:e8:3f:b5:13:26:bd:ce:ba:8d:67:46:
5d:a1:b4:47:6f:b0:67:9c:fb:7b:a1:a5:bb:4c:ea:
68:85:ea:3a:ae:5d:52:31:e8:eb:1b:64:a2:b6:00:
c1:87:43:6d:05:e0:af:3e:e6:64:23:86:57:d2:dc:
5f:1c:bc:e9:dc:bf:b5:b5:78:21:b5:60:74:1d:2f:
bc:5e:a1:8d:fc:64:e3:06:24:6d:67:12:0e:14:57:
eb:af:c3:7c:88:99:50:70:83:dd:f6:c6:13:c7:d2:
06:00:97:27:fb:b3:4c:58:74:9c:b8:eb:41:d6:eb:
da:4d:4c:76:f6:18:24:4f:95:5e:90:0c:b3:b8:ff:
b1:96:df:3c:cc:86:73:97:cd:d8:9f:33:6d:93:dc:
8d:ee:56:63:42:d2:5a:f0:be:39:54:30:f3:7f:c4:
de:ed:2a:92:f3:aa:f7:ad:35:c4:6e:1e:f1:b6:f2:
af:58:31:d3:71:ff:f5:1c:30:6a:55:15:17:cb:40:
af:16:ce:f4:f4:8e:23:69:1b:5c:03:b1:e9:cf:45:
f2:c1:45:74:8d:60:02:91:bb:b9:5d:7c:44:51:75:
99:7a:1a:4e:48:0a:14:cd:81:28:d7:42:cf:9d:90:
78:eb:92:a0:e0:12:2d:0b:81:b9:82:cd:cf:f3:48:
e0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:03:3E:21:FE:22:95:BD:DA:ED:C2:EF:7E:C6:B4:19:19:85:AF:B8
X509v3 Authority Key Identifier:
keyid:F9:84:BC:E4:4F:A3:28:01:D7:F1:0C:E9:83:9B:06:08:4D:DF:F2:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/zgM-If4ilb3a7cLvfsa0GRmFr7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/aecf2e-29a4-4a20-8de5-db18c1041a95/1/1-YS85E-jKAHX8Qzpg5sGCE3f8ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.212.0/22
Signature Algorithm: sha256WithRSAEncryption
17:e0:e9:ac:f7:21:d7:99:5c:47:ae:c0:83:63:da:53:4b:96:
60:02:9b:09:dc:fd:af:d2:3d:fd:9a:4a:f0:5e:a4:62:d2:eb:
ee:09:c6:b9:aa:26:21:aa:9d:c0:74:7d:f5:67:69:19:c6:1a:
d4:21:2c:19:bb:68:d9:79:79:84:37:f0:0c:30:f9:c4:0a:35:
2f:30:18:64:ec:a0:83:b9:d9:c3:91:97:cf:a5:bd:7b:bd:ec:
c4:0e:2d:ee:f7:8d:62:61:83:cd:08:49:74:4a:b1:39:8b:59:
4d:cd:f7:5b:dd:8b:00:1f:8e:e6:55:bb:c1:59:a1:b9:a3:a9:
94:65:7f:10:d8:30:45:e5:4e:d0:c7:38:d5:a4:42:87:df:c8:
e0:1e:63:fa:b4:e4:33:44:a2:13:19:fd:43:90:68:2c:04:c5:
ba:df:89:a7:c2:da:20:28:45:d8:91:0e:ca:9f:c7:00:d9:f2:
d8:9c:2b:86:65:12:d3:30:3f:95:25:94:da:19:05:59:5d:fc:
48:9d:e2:20:04:d8:b0:5a:03:85:29:dc:4a:86:a0:3e:9f:4d:
8b:cd:6b:66:6c:48:2e:bf:bc:63:45:67:39:da:87:b9:62:7b:
fd:3c:a2:6f:e3:a2:3f:06:3b:38:a7:65:9a:66:54:64:39:18:
0e:77:e8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 12:54:59 2024 by rpki-client on console-ams.rpki-client.org