Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/zbf4j_bKDDtVnbUj9WoLHoZv2Bk.roa
File: zbf4j_bKDDtVnbUj9WoLHoZv2Bk.roa (raw, json)
Hash identifier: gvXxjTV831/alGNUx8jZoxecbuI10gd3ReuSwAa/dks=
Subject key identifier: CD:B7:F8:8F:F6:CA:0C:3B:55:9D:B5:23:F5:6A:0B:1E:86:6F:D8:19
Certificate issuer: /CN=58e0687a24d6a3e414d798d9b2fb6c52591cbb23
Certificate serial: 018CC871367AB2A06E1DEC67EE345FD5A841
Authority key identifier: 58:E0:68:7A:24:D6:A3:E4:14:D7:98:D9:B2:FB:6C:52:59:1C:BB:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WOBoeiTWo-QU15jZsvtsUlkcuyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/zbf4j_bKDDtVnbUj9WoLHoZv2Bk.roa
Signing time: Tue 02 Jan 2024 04:31:51 +0000
ROA not before: Tue 02 Jan 2024 04:31:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208149
IP address blocks: 185.89.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WOBoeiTWo-QU15jZsvtsUlkcuyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:36:7a:b2:a0:6e:1d:ec:67:ee:34:5f:d5:a8:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58e0687a24d6a3e414d798d9b2fb6c52591cbb23
Validity
Not Before: Jan 2 04:31:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cdb7f88ff6ca0c3b559db523f56a0b1e866fd819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:24:c8:56:a6:51:89:84:0d:b6:db:c6:9d:02:
a1:97:6d:fb:16:9d:ac:ff:39:5a:e4:f7:c9:d3:ab:
49:e0:e6:c2:49:cc:af:17:d3:04:5d:61:8e:b1:8f:
d5:b5:6b:72:4f:6f:e6:d7:88:91:c3:53:5d:4f:48:
fb:dd:29:30:49:30:b2:dd:79:4c:41:9a:57:c4:e3:
cb:43:4e:72:e8:cd:60:1e:02:12:37:52:48:4b:33:
32:ea:a8:3a:10:08:11:4e:a9:13:be:ee:fa:0b:b8:
25:ff:4c:15:92:20:f6:3f:c6:83:29:c2:87:e7:59:
04:b2:30:94:dc:75:cb:f5:c2:9e:88:d8:db:37:3e:
49:3f:f6:e9:ff:84:df:c3:23:32:a8:ad:49:d7:ee:
c4:c4:63:94:63:18:fc:c6:82:d4:38:2c:81:9e:ec:
4c:41:5d:09:2a:e2:76:e8:3f:ae:ae:ab:d3:48:73:
12:56:0e:ba:a0:50:64:b9:c6:7b:91:1f:f2:6e:7a:
4e:6d:fa:e0:18:bd:5d:22:15:68:50:1f:e2:9e:ed:
f4:df:9e:22:6f:1e:e1:7f:e9:99:47:9f:8c:2a:73:
35:9c:ac:d4:fe:07:fe:0e:65:99:c4:66:9c:9b:d6:
21:54:8d:9b:f9:71:24:a8:0b:3d:21:ca:8e:7d:46:
1e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B7:F8:8F:F6:CA:0C:3B:55:9D:B5:23:F5:6A:0B:1E:86:6F:D8:19
X509v3 Authority Key Identifier:
keyid:58:E0:68:7A:24:D6:A3:E4:14:D7:98:D9:B2:FB:6C:52:59:1C:BB:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOBoeiTWo-QU15jZsvtsUlkcuyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/zbf4j_bKDDtVnbUj9WoLHoZv2Bk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.96.0/24
Signature Algorithm: sha256WithRSAEncryption
32:ff:be:ad:cb:b5:4b:59:50:6a:15:cb:cf:e8:c1:f3:4e:c4:
18:1d:33:b5:b7:18:54:03:d3:cb:e1:92:ca:01:df:a9:d7:7e:
f6:02:d1:c4:73:75:d7:d7:6a:6a:a1:04:b3:9e:2e:38:29:c4:
d3:2b:4c:2f:31:65:1d:ce:21:d8:74:b5:54:72:10:fe:f6:c9:
27:f6:49:c7:5e:5e:19:4f:3b:32:f7:5b:9a:8e:ba:42:12:ea:
9b:a0:75:33:c7:ab:ff:e8:e0:f5:bd:7b:ab:27:5b:b9:55:2b:
d1:d1:f3:b8:47:9a:81:4e:40:40:43:dd:5e:7e:7b:98:d4:21:
bf:a3:78:47:17:a1:34:48:18:f5:04:89:96:d0:a7:ae:be:4d:
3b:74:af:18:9f:4f:12:24:18:a7:ca:e1:76:75:d2:db:2e:40:
aa:5d:89:38:4a:72:f8:4c:ef:78:c2:b3:b9:b6:f2:81:eb:8c:
a0:be:b8:c1:de:0b:db:18:e3:f3:91:44:3d:1f:17:01:18:26:
48:7d:c1:f6:1f:a4:a9:85:d7:e1:aa:0c:66:b8:38:8e:e2:21:
cd:b9:5e:00:64:8d:33:ec:55:87:19:38:36:40:b1:6c:be:da:
a0:5c:2c:18:43:d9:1e:6d:79:a0:fd:a4:ed:17:8f:9b:54:18:
14:94:77:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:29:22 2024 by rpki-client on console-ams.rpki-client.org