Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/Z9_XzS0tSxM-2rtjcuEnaWksjm4.roa
File: Z9_XzS0tSxM-2rtjcuEnaWksjm4.roa (raw, json)
Hash identifier: G9n2GkKJFprTWShacGF+7lBTjRpLFAzNrih76j1fVRQ=
Subject key identifier: 67:DF:D7:CD:2D:2D:4B:13:3E:DA:BB:63:72:E1:27:69:69:2C:8E:6E
Certificate issuer: /CN=8b5fe50f290dd9e41e5f4a65dabb23972a82cad3
Certificate serial: 018CC5003320518A2B6D39FFC71FC2B4C047
Authority key identifier: 8B:5F:E5:0F:29:0D:D9:E4:1E:5F:4A:65:DA:BB:23:97:2A:82:CA:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/Z9_XzS0tSxM-2rtjcuEnaWksjm4.roa
Signing time: Mon 01 Jan 2024 12:29:33 +0000
ROA not before: Mon 01 Jan 2024 12:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30939
IP address blocks: 194.15.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:33:20:51:8a:2b:6d:39:ff:c7:1f:c2:b4:c0:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b5fe50f290dd9e41e5f4a65dabb23972a82cad3
Validity
Not Before: Jan 1 12:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67dfd7cd2d2d4b133edabb6372e12769692c8e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a6:2b:55:f5:70:81:ca:bd:f8:d8:4c:6c:9c:
5c:1b:2b:8f:d1:9d:55:35:cd:bc:bf:82:7b:91:a8:
55:4b:3b:2c:3c:8e:22:7b:d8:08:ad:ca:69:c0:34:
3e:d0:7f:e7:8f:aa:a2:03:0f:7e:b0:55:30:d2:7c:
dc:70:5c:1e:dc:74:9b:a3:a8:4d:e3:4b:19:bb:8f:
59:6f:f2:b4:a7:75:05:a1:df:d5:d4:00:9f:f5:59:
e8:f3:de:f0:f1:b8:bb:86:9a:71:3d:ec:5c:be:be:
62:62:79:d8:a8:c7:92:f1:f7:cc:e8:0c:e3:78:36:
52:5d:9a:61:f7:d0:bc:c5:f5:71:04:85:a2:2f:f7:
86:7b:8f:db:e6:f5:77:6b:69:a8:a6:88:78:fe:44:
61:6c:75:8c:5a:06:06:02:7a:8a:33:d6:18:7a:e8:
76:7b:bd:77:06:2b:6c:a5:2b:4d:07:fb:07:1d:36:
ab:35:6e:84:c8:61:7a:9d:d9:7e:1d:52:96:f6:e3:
e7:e7:de:e4:ec:c8:e2:3e:f2:12:85:86:3d:05:ab:
9c:95:0f:28:d7:b0:f2:de:72:60:ce:6f:b3:09:28:
1f:a0:1a:8e:03:7e:e1:2b:cc:69:f3:72:d3:fd:7c:
96:5a:58:58:f0:51:d4:54:60:c5:14:65:a8:b2:5e:
4b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DF:D7:CD:2D:2D:4B:13:3E:DA:BB:63:72:E1:27:69:69:2C:8E:6E
X509v3 Authority Key Identifier:
keyid:8B:5F:E5:0F:29:0D:D9:E4:1E:5F:4A:65:DA:BB:23:97:2A:82:CA:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/Z9_XzS0tSxM-2rtjcuEnaWksjm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.213.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:65:6f:b5:65:40:01:e3:7c:c6:74:d1:37:81:52:0f:9e:e2:
09:86:6e:eb:6b:fa:9b:a9:37:57:07:d7:a3:21:12:0f:c8:ce:
a7:1b:3a:94:b5:8a:ca:1c:dc:0a:f0:cf:d4:39:60:11:f9:b2:
73:7e:83:f2:c9:39:7e:ba:fc:6a:1c:08:60:b2:29:ff:0e:34:
1d:45:e6:96:6f:db:4b:5a:93:53:bc:8b:f7:a0:87:81:9f:a5:
83:09:0f:1f:6b:0e:56:26:c9:15:35:61:ff:63:71:5a:90:c0:
87:01:1d:0a:d3:ef:30:10:52:61:0d:1b:23:9e:a7:97:9a:42:
bf:dd:f6:40:d4:df:81:fc:2d:d6:20:60:eb:70:16:41:0b:7a:
57:cb:7f:30:2d:01:ab:bf:f0:20:13:07:96:78:13:3e:13:66:
fc:d0:22:09:cd:7d:fe:42:70:c1:80:82:8f:90:80:ec:2e:e2:
88:92:d7:07:ad:45:21:c0:37:95:35:86:c2:75:d2:fe:67:39:
7b:8f:14:75:b4:78:f0:6a:9d:6f:1a:27:56:c4:66:83:92:1e:
9f:1b:43:35:e3:e4:6a:ab:a2:fa:3a:c4:53:81:3e:fe:08:c0:
55:f9:c8:59:33:31:50:3e:b9:eb:eb:33:b3:47:bd:7d:9c:e0:
58:96:03:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 03:17:41 2024 by rpki-client on console-ams.rpki-client.org