Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/ZHyeS9oQPcQJijEjWo0meBLru1M.roa
File: ZHyeS9oQPcQJijEjWo0meBLru1M.roa (raw, json)
Hash identifier: kbs6OMraUf9zZpXjCq2KTVj2JfRg65G/JIQyGO2dDl4=
Subject key identifier: 64:7C:9E:4B:DA:10:3D:C4:09:8A:31:23:5A:8D:26:78:12:EB:BB:53
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 018CC649F04B1B0BB2181D202AA412D73A44
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/ZHyeS9oQPcQJijEjWo0meBLru1M.roa
Signing time: Mon 01 Jan 2024 18:29:43 +0000
ROA not before: Mon 01 Jan 2024 18:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208318
IP address blocks: 88.203.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:f0:4b:1b:0b:b2:18:1d:20:2a:a4:12:d7:3a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 1 18:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=647c9e4bda103dc4098a31235a8d267812ebbb53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5d:ba:20:6f:21:14:ef:35:ab:11:e5:96:d5:
64:e5:90:aa:ef:f3:a4:97:23:76:76:51:54:02:00:
12:f6:a1:40:9b:28:49:4c:b0:7a:82:d1:52:de:6e:
54:6c:8f:3f:22:48:12:81:cb:4e:37:b0:cb:db:08:
80:22:19:ea:73:6e:7f:b9:7e:b2:66:6b:07:59:90:
cc:fe:64:99:5b:19:c4:8e:c9:c3:d4:b5:f0:ad:75:
e9:94:32:1b:01:45:13:62:94:c4:1c:a4:db:fd:7b:
d4:f6:7e:63:f6:4b:b4:8d:70:dd:9e:03:0b:a0:7b:
d4:3c:37:32:89:6c:3b:b4:d9:b0:e5:db:69:01:d7:
41:87:10:3f:83:b2:7e:c9:61:e7:a8:29:da:0c:e3:
14:80:b6:c0:ee:e7:73:1f:8d:22:33:86:97:bb:83:
05:e8:b9:63:7f:a1:8e:8e:dc:ed:b0:a0:d4:42:f6:
4e:96:98:28:4b:57:c9:23:a9:06:3d:b7:17:6d:25:
07:54:8e:e4:32:22:e8:19:7a:6f:ca:d8:47:33:38:
60:a1:aa:77:4c:0a:7e:de:9b:88:63:16:0c:4b:d4:
7d:06:c2:5f:e7:1e:48:87:49:fd:dd:a6:fa:aa:10:
5d:77:6a:86:11:ad:1c:13:96:43:e4:1c:41:e3:ae:
8b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7C:9E:4B:DA:10:3D:C4:09:8A:31:23:5A:8D:26:78:12:EB:BB:53
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/ZHyeS9oQPcQJijEjWo0meBLru1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.203.205.0/24
Signature Algorithm: sha256WithRSAEncryption
78:51:22:5a:fd:33:08:e7:cf:b6:cb:71:62:a2:93:2c:d0:1c:
a7:b3:90:71:6b:47:7d:1f:cc:03:b4:e8:86:33:13:dc:ca:d1:
61:a6:7e:ea:d4:db:2d:ed:99:2b:98:f2:18:bb:6c:1a:3e:9a:
8e:40:7c:ea:31:d6:56:d1:34:9d:f0:2b:7d:68:fa:ed:31:8f:
57:84:a4:3e:52:31:31:41:d1:93:00:bf:d4:4f:71:74:d4:c7:
07:30:b5:c8:86:b1:59:12:c6:5d:76:e2:a6:62:bf:df:2e:23:
ff:a9:18:3b:94:cc:2c:23:be:16:cf:64:76:9b:60:f8:f5:2f:
6a:19:68:48:cf:c5:c2:49:ec:c1:1e:62:cb:26:f0:96:2b:fe:
b0:e6:3c:52:93:0c:62:f6:04:29:6d:05:98:07:86:d8:81:38:
50:aa:7d:eb:be:65:bf:3d:b0:e1:42:48:1f:b1:5f:7e:3d:3a:
0a:46:9d:40:d5:3a:9d:31:07:00:0d:fa:4a:1d:0c:cf:85:01:
17:16:04:37:ef:04:7c:5f:b0:62:57:b8:7c:e5:9f:c1:6b:ce:
06:f0:a9:b8:cd:6d:52:49:e4:b7:d8:69:5f:48:d6:bd:e7:50:
3f:70:83:4c:fc:46:e2:e7:b2:de:ec:4e:55:2f:84:9f:c8:3a:
0a:70:3b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:43:22 2024 by rpki-client on console-fra.rpki-client.org