Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zVclnSSC1iOVy2_dRHq-mL6xdRI.roa
File: zVclnSSC1iOVy2_dRHq-mL6xdRI.roa (raw, json)
Hash identifier: B/Oe2WsO0DV4Vzf0a/gD8xyX0bMdyQ+oK9c1flw28DY=
Subject key identifier: CD:57:25:9D:24:82:D6:23:95:CB:6F:DD:44:7A:BE:98:BE:B1:75:12
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018F8630EE595724E8DC4B2DC46FB3908493
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zVclnSSC1iOVy2_dRHq-mL6xdRI.roa
Signing time: Fri 17 May 2024 10:55:04 +0000
ROA not before: Fri 17 May 2024 10:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 85.133.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:30:ee:59:57:24:e8:dc:4b:2d:c4:6f:b3:90:84:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: May 17 10:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd57259d2482d62395cb6fdd447abe98beb17512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:46:11:52:d2:cf:fb:43:72:5e:87:37:78:c4:
d0:d8:03:e6:d6:61:c4:d5:2b:74:b6:68:7b:b5:de:
a9:a8:cf:9a:4f:fe:e1:99:72:e2:5d:de:89:3b:4f:
5c:b0:6e:c4:2a:15:e5:5c:42:50:4e:74:43:17:3a:
6a:a1:4e:97:03:1c:74:ea:26:fc:cd:fc:30:55:2b:
56:ad:1a:86:73:b1:4b:70:0d:32:94:8b:fd:35:5a:
13:b1:93:f1:34:ea:b8:34:c9:c7:1c:53:0d:38:33:
0c:49:c6:3d:1b:58:6e:9e:1c:65:83:ef:85:66:ac:
4a:57:bf:81:ad:b4:29:a4:73:56:c5:28:87:ed:c3:
28:57:e0:2a:aa:97:bc:d7:48:51:3e:d2:29:86:27:
d2:f8:f6:f2:ee:17:15:eb:2a:b6:28:f8:63:cf:da:
c6:1f:ff:f9:95:23:24:16:18:ea:fb:25:c3:ad:c9:
61:c3:7c:79:ca:34:58:af:94:ad:98:b1:4b:27:9d:
5e:84:8b:6f:98:1d:ed:94:ac:e2:d7:e9:17:42:ba:
4f:08:79:50:5a:89:12:d1:01:8f:27:3c:99:6d:b3:
85:66:36:91:06:42:ee:63:29:ea:c3:fa:08:28:0e:
97:58:8a:cf:92:ac:7f:ac:e3:6f:81:a6:34:ff:5e:
60:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:57:25:9D:24:82:D6:23:95:CB:6F:DD:44:7A:BE:98:BE:B1:75:12
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zVclnSSC1iOVy2_dRHq-mL6xdRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.217.0/24
Signature Algorithm: sha256WithRSAEncryption
47:08:31:f0:fa:19:82:69:86:b1:77:9b:dc:3b:53:2c:05:df:
8e:e7:50:d9:98:58:67:33:28:5d:f1:59:f1:51:37:a3:77:16:
46:0b:6c:d8:c5:94:c2:b4:90:69:a4:90:87:18:33:c3:e7:5a:
c0:ec:d3:57:ed:08:93:4b:d5:d0:d7:4f:26:e0:ed:97:75:51:
21:1d:b8:ae:25:74:c1:90:4f:88:d5:a1:84:29:0d:f0:40:0a:
4c:2d:e4:7a:4b:a2:62:fb:54:7f:36:eb:02:a4:8f:23:50:29:
0d:53:f7:3a:06:bb:2d:e5:2e:b4:c0:6a:cf:ad:45:68:66:01:
85:37:da:13:25:15:a7:3d:eb:92:b4:fd:62:ef:95:40:73:2f:
31:f8:2c:27:a8:c9:9d:8a:b7:36:8a:b4:cb:c0:30:a9:f1:62:
85:db:67:58:a8:9e:46:6d:70:75:ff:b3:1f:07:71:14:97:76:
71:96:7f:5c:65:9a:b7:ca:ec:e2:42:bd:d6:a3:8c:42:01:4b:
b7:39:f8:bc:91:64:dc:35:6c:ef:62:ab:4a:ed:e9:a0:20:5c:
80:5e:e6:6a:66:ed:98:5c:6d:56:16:dd:89:51:ab:be:fe:82:
8e:11:a5:46:bd:d3:c1:35:7a:c7:f9:c0:47:7b:ac:83:4c:35:
49:7d:85:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:42:03 2024 by rpki-client on console-ams.rpki-client.org