Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/5c1822-6ff9-4847-86b0-76ffab9b10aa/1/RzpY0h0SjyyQU6Y6Y6uFpwSRck4.roa
File: RzpY0h0SjyyQU6Y6Y6uFpwSRck4.roa (raw, json)
Hash identifier: zB0O9usn9jDIjtx/kiRHS/n3jlqX9V94Dd15COV7K3E=
Subject key identifier: 47:3A:58:D2:1D:12:8F:2C:90:53:A6:3A:63:AB:85:A7:04:91:72:4E
Certificate issuer: /CN=7b019c40386a69e290fac166371565fd8d92e0f6
Certificate serial: 018CC4937C9C3884243A7BD5DAA55CAE33C9
Authority key identifier: 7B:01:9C:40:38:6A:69:E2:90:FA:C1:66:37:15:65:FD:8D:92:E0:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewGcQDhqaeKQ-sFmNxVl_Y2S4PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/5c1822-6ff9-4847-86b0-76ffab9b10aa/1/RzpY0h0SjyyQU6Y6Y6uFpwSRck4.roa
Signing time: Mon 01 Jan 2024 10:30:49 +0000
ROA not before: Mon 01 Jan 2024 10:30:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202326
IP address blocks: 194.180.9.0/24 maxlen: 24
194.180.11.0/24 maxlen: 24
194.180.8.0/24 maxlen: 24
194.180.10.0/23 maxlen: 23
194.180.8.0/22 maxlen: 22
194.180.10.0/24 maxlen: 24
2a07:eb80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/5c1822-6ff9-4847-86b0-76ffab9b10aa/1/ewGcQDhqaeKQ-sFmNxVl_Y2S4PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/5c1822-6ff9-4847-86b0-76ffab9b10aa/1/ewGcQDhqaeKQ-sFmNxVl_Y2S4PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ewGcQDhqaeKQ-sFmNxVl_Y2S4PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:7c:9c:38:84:24:3a:7b:d5:da:a5:5c:ae:33:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b019c40386a69e290fac166371565fd8d92e0f6
Validity
Not Before: Jan 1 10:30:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=473a58d21d128f2c9053a63a63ab85a70491724e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:96:73:b0:e8:7b:86:5b:28:8b:08:b5:90:72:
f1:e8:8c:f0:ec:f0:f6:e2:0a:f3:13:08:30:30:3e:
27:5a:a2:b0:14:6a:63:4e:6c:7b:1c:eb:72:1f:8e:
2c:56:a5:f0:e8:7a:c6:76:11:a6:e3:57:b3:87:e6:
6d:21:aa:d9:2c:92:39:ba:90:d5:23:c3:90:5a:2e:
1e:e1:f6:d6:26:a3:ff:10:fb:41:62:5f:a4:e0:b5:
1a:30:b0:f0:7a:3e:f7:ee:1d:d1:5f:63:cb:97:89:
23:e0:9d:12:ca:9b:54:8b:fa:70:e6:f8:43:e0:be:
43:3c:c3:15:a2:58:db:6c:d3:9b:07:d4:52:2a:44:
17:92:f1:b6:cd:10:96:80:10:73:05:08:82:0d:6e:
29:cb:ef:78:77:30:e7:4f:78:09:cc:b0:fb:b3:fe:
06:69:f9:fd:1a:da:6c:fa:55:e8:7a:f5:8a:5e:10:
1a:38:cf:fc:14:f5:c2:be:00:4c:20:67:20:96:9a:
f2:ac:a0:fb:1e:4b:c6:2f:87:c7:d4:6d:87:f1:83:
28:d3:22:07:0b:b2:3a:d5:0d:17:86:f8:3c:2b:3e:
e1:5c:b1:d7:76:87:5c:77:7a:af:0c:b5:c8:48:16:
ab:12:0b:a9:33:eb:d8:92:b8:ca:ac:e4:b9:8c:35:
4f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3A:58:D2:1D:12:8F:2C:90:53:A6:3A:63:AB:85:A7:04:91:72:4E
X509v3 Authority Key Identifier:
keyid:7B:01:9C:40:38:6A:69:E2:90:FA:C1:66:37:15:65:FD:8D:92:E0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewGcQDhqaeKQ-sFmNxVl_Y2S4PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5c1822-6ff9-4847-86b0-76ffab9b10aa/1/RzpY0h0SjyyQU6Y6Y6uFpwSRck4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5c1822-6ff9-4847-86b0-76ffab9b10aa/1/ewGcQDhqaeKQ-sFmNxVl_Y2S4PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.8.0/22
IPv6:
2a07:eb80::/32
Signature Algorithm: sha256WithRSAEncryption
15:30:bb:6b:dc:a1:88:9d:d1:90:b7:cb:b5:1a:b7:91:47:05:
17:4d:4f:8e:1b:ad:bf:bf:f5:a1:42:dd:03:f5:6e:d1:21:56:
27:06:6c:fa:08:5d:79:37:4a:2a:3a:6c:cd:62:52:cf:16:97:
1e:47:79:08:80:cb:7b:3c:93:7c:07:06:da:19:8d:98:34:e4:
b0:eb:58:66:e3:0b:72:bf:71:34:64:ac:fc:22:24:10:39:4e:
de:b3:96:6c:77:80:c0:2e:5f:2f:ca:36:cf:69:27:b0:71:71:
0c:ef:7a:85:27:c8:02:3b:e7:e4:1d:01:53:7e:32:a4:f9:84:
db:60:20:5b:6e:8d:d7:eb:34:da:fb:21:16:b7:50:db:98:cf:
1e:9a:57:15:be:e9:7f:4e:21:fd:e6:b1:0a:50:26:23:d7:df:
47:a5:62:b3:55:40:42:69:f2:1c:2d:21:7d:9c:1f:6c:73:8a:
d1:0b:66:62:71:a4:bb:0f:a1:7f:eb:eb:7b:7c:87:54:52:1e:
74:eb:65:65:0d:04:fa:91:a6:c6:39:cf:b0:1d:84:0f:2f:58:
f0:d2:c3:31:67:cd:53:55:4c:e1:61:68:1c:7e:64:ad:8e:b2:
41:c2:52:17:6e:67:b9:03:3b:db:5d:fe:58:70:d5:33:86:4f:
f8:94:8e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 14:04:32 2024 by rpki-client on console-ams.rpki-client.org