Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/2Z8wggP_ftDtV8dRSErc__5zhCk.roa
File: 2Z8wggP_ftDtV8dRSErc__5zhCk.roa (raw, json)
Hash identifier: zNvtG2XYOjVUdRcZrl/2fqrOTSojPR4727ntuA6QAfg=
Subject key identifier: D9:9F:30:82:03:FF:7E:D0:ED:57:C7:51:48:4A:DC:FF:FE:73:84:29
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 018CC56DF80185985299AD93E17ED659AADB
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/2Z8wggP_ftDtV8dRSErc__5zhCk.roa
Signing time: Mon 01 Jan 2024 14:29:27 +0000
ROA not before: Mon 01 Jan 2024 14:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400909
IP address blocks: 213.145.76.0/23 maxlen: 23
213.145.78.0/23 maxlen: 23
213.145.72.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Jun 2024 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:f8:01:85:98:52:99:ad:93:e1:7e:d6:59:aa:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jan 1 14:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d99f308203ff7ed0ed57c751484adcfffe738429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2a:b0:44:d8:db:a0:a8:89:87:db:d5:19:2f:
58:bb:1b:74:b0:a1:0e:a5:10:93:9d:2b:8b:2e:80:
f4:50:e9:4a:f2:49:12:14:0c:31:fa:be:f0:da:63:
ae:b9:1d:cb:b3:76:88:0f:c6:e9:18:91:49:6d:8c:
cf:2a:b0:71:72:d9:de:42:ff:13:cd:1d:97:d6:18:
63:0d:4d:e7:95:4c:30:28:28:ba:ae:7c:f9:7e:cf:
4f:1e:08:0f:0e:71:1d:75:9c:76:ff:33:38:43:48:
9e:5a:2a:71:b0:56:b7:f5:e8:8f:ab:34:40:26:b6:
91:a9:f4:c8:13:7e:4e:bc:89:83:0d:ec:ad:0d:3b:
dd:b8:a1:57:85:6d:d9:e6:24:be:1a:86:48:ca:4b:
ca:ba:19:e7:08:94:f1:eb:a1:90:50:fc:8f:14:7c:
9e:a5:f7:cc:ea:b2:af:5e:dc:d6:64:42:16:ae:af:
ea:3c:e3:b1:5c:48:9b:5e:94:80:1e:7c:4c:73:33:
05:d4:da:8e:4c:ba:a9:d9:66:84:58:16:64:f6:63:
af:f5:d8:6d:1a:5b:09:de:44:e0:4d:a7:e0:94:12:
54:1e:99:70:b2:d0:95:58:f8:2b:18:97:68:d3:25:
e6:64:57:e5:49:1a:fe:fc:6a:bf:47:db:ce:df:c4:
9e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9F:30:82:03:FF:7E:D0:ED:57:C7:51:48:4A:DC:FF:FE:73:84:29
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/2Z8wggP_ftDtV8dRSErc__5zhCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.72.0/23
213.145.76.0/22
Signature Algorithm: sha256WithRSAEncryption
55:bb:36:67:a0:7a:fd:75:5f:42:7d:60:13:67:b1:ed:46:87:
42:33:a4:38:e7:e1:7a:aa:19:88:01:8c:f4:9c:5e:92:f1:06:
d7:4a:f0:0c:56:ed:1d:ab:b8:29:42:d2:25:4b:af:5a:32:dd:
26:77:1c:a8:9d:e7:71:ea:91:ed:c2:99:18:ed:af:02:f2:71:
7c:ff:ea:40:86:87:63:ad:98:4a:bb:f3:98:53:f0:8d:17:a9:
e4:b0:cb:22:48:d0:03:bd:9f:64:a1:de:28:48:87:8a:d3:be:
ab:ec:fd:5b:52:f1:38:ad:92:5e:79:1d:26:25:5d:1e:c1:a4:
95:99:db:cc:fb:0e:db:99:06:2b:0a:66:5c:ca:1a:33:5e:8f:
aa:f5:77:ca:f3:23:fe:2a:50:29:c3:e9:3f:d2:e8:ed:03:3a:
8d:d5:78:ba:08:19:5c:ff:51:eb:70:f0:d6:b3:af:a0:c8:da:
81:05:70:59:4b:b2:d9:6e:d1:f4:6a:a6:ef:6a:e2:62:b8:86:
61:24:e5:4f:eb:4d:f0:1c:91:71:13:be:d6:d4:51:be:be:4c:
93:ac:1b:ac:ce:12:16:70:a9:61:9b:0f:37:0d:7c:c3:f4:f7:
96:a1:d1:4b:62:02:ae:1b:63:9a:21:9a:3c:76:d6:22:bb:0a:
8b:36:b2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 15:21:53 2024 by rpki-client on console-ams.rpki-client.org