Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/2ZoCEY9hEu4Vf7QV4lrYVPi1RFs.roa
File: 2ZoCEY9hEu4Vf7QV4lrYVPi1RFs.roa (raw, json)
Hash identifier: FWkyG7KCif2gAK8pzV/f7CjfbqKW+bM4HNsSaRg2R7k=
Subject key identifier: D9:9A:02:11:8F:61:12:EE:15:7F:B4:15:E2:5A:D8:54:F8:B5:44:5B
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018EC7F4FFE5DFA9EB156F85C7D23AB57409
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/2ZoCEY9hEu4Vf7QV4lrYVPi1RFs.roa
Signing time: Wed 10 Apr 2024 12:21:46 +0000
ROA not before: Wed 10 Apr 2024 12:21:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21017
IP address blocks: 77.45.128.0/17 maxlen: 17
77.45.128.0/19 maxlen: 19
77.45.192.0/19 maxlen: 19
77.45.224.0/19 maxlen: 19
80.82.32.0/19 maxlen: 19
88.83.192.0/19 maxlen: 19
95.32.0.0/18 maxlen: 18
95.32.64.0/18 maxlen: 18
95.32.128.0/18 maxlen: 18
95.32.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c7:f4:ff:e5:df:a9:eb:15:6f:85:c7:d2:3a:b5:74:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Apr 10 12:21:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d99a02118f6112ee157fb415e25ad854f8b5445b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:36:a0:39:ab:2c:7e:f2:5b:5c:89:ca:2f:5b:
9d:52:9b:a2:ad:91:ef:5a:e7:b5:1e:ba:19:0b:fb:
ab:9b:e6:f0:68:af:15:5a:4c:94:74:81:46:e7:07:
6c:58:f1:8f:a2:98:2b:11:d2:26:6c:9b:d9:2c:b2:
64:36:db:ee:34:53:c7:1e:63:f9:4c:5d:96:00:c9:
b1:09:6c:27:87:93:9b:b3:39:1d:74:11:40:12:33:
dc:ef:f2:1c:31:ae:48:74:49:6d:a7:65:82:63:b1:
aa:3c:0c:37:63:b1:35:60:75:e3:76:03:64:a8:d6:
a6:52:a4:a3:2e:be:19:07:63:68:d4:22:fe:60:a2:
b3:00:75:4e:fe:d5:f5:eb:b6:83:7e:76:78:cf:06:
c9:9c:df:81:ef:5e:d9:59:5e:96:36:3b:37:bb:0b:
96:e0:17:46:30:65:4f:11:80:40:76:50:02:61:b4:
5b:35:7f:b0:81:31:76:a7:6a:c6:e0:19:05:df:06:
d5:7a:f9:95:a6:8e:07:2a:b0:70:8c:05:b8:f3:f5:
1e:b6:6c:48:ca:7b:bd:1b:65:e0:37:49:01:0a:e7:
74:7b:e1:f0:d0:c1:c4:94:bb:cc:20:6e:72:8c:aa:
f1:45:a9:11:91:9f:a7:5e:9f:4d:c3:00:b3:42:c7:
d0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9A:02:11:8F:61:12:EE:15:7F:B4:15:E2:5A:D8:54:F8:B5:44:5B
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/2ZoCEY9hEu4Vf7QV4lrYVPi1RFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.45.128.0/17
80.82.32.0/19
88.83.192.0/19
95.32.0.0/16
Signature Algorithm: sha256WithRSAEncryption
24:ed:b0:06:fa:81:97:71:e7:72:10:70:84:c6:91:66:09:f7:
46:1e:54:2a:4b:a7:71:30:de:ec:46:02:61:04:02:55:cf:8d:
4a:ec:a5:41:90:39:3c:8d:42:9c:bc:e4:63:b6:ab:d9:ad:5d:
13:74:94:6a:89:05:46:97:4a:ec:6b:32:05:5d:2f:fe:84:b1:
08:c9:06:d4:0d:58:76:7c:96:18:03:e6:40:2c:a8:9c:36:9f:
36:fc:56:1d:3b:de:52:30:7b:ff:1a:f8:b6:3a:cc:f0:b8:f1:
6c:6a:93:b2:0d:57:44:6e:1a:8b:b3:73:ef:0a:02:b5:dc:da:
d1:1c:c3:6f:95:4e:86:ca:38:b9:e6:6d:aa:0a:70:f7:0e:42:
50:7e:51:ce:a4:e6:04:d2:13:dd:66:77:fb:8f:97:ff:5a:59:
a3:5e:6a:3f:d2:7a:a2:6a:9a:d4:eb:d3:17:1f:54:f8:93:60:
3f:85:1a:bb:0a:c0:1c:b1:8e:bd:fa:39:b1:93:65:42:5e:b5:
9b:d9:1a:cb:dd:78:7b:91:bf:ef:1f:7f:6f:df:cf:2d:c2:75:
83:a4:45:fe:95:5f:1b:1c:ec:74:c5:69:3a:52:55:18:13:99:
8d:97:a2:67:ab:4b:97:6b:9d:24:71:a6:80:3d:89:72:8f:55:
39:98:75:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:27:56 2024 by rpki-client on console-ams.rpki-client.org