Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/zbkMu5EXRh5_sLRUmRkIgsyWiKE.roa
File: zbkMu5EXRh5_sLRUmRkIgsyWiKE.roa (raw, json)
Hash identifier: QXaB82BAoJ+nH2uqKP58rlZI8TR9B2LEmy8HuDw9bBs=
Subject key identifier: CD:B9:0C:BB:91:17:46:1E:7F:B0:B4:54:99:19:08:82:CC:96:88:A1
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 018CC7944AC06BA09A2E4565022DA6700B4C
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/zbkMu5EXRh5_sLRUmRkIgsyWiKE.roa
Signing time: Tue 02 Jan 2024 00:30:33 +0000
ROA not before: Tue 02 Jan 2024 00:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207747
IP address blocks: 195.143.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:4a:c0:6b:a0:9a:2e:45:65:02:2d:a6:70:0b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 2 00:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cdb90cbb9117461e7fb0b45499190882cc9688a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:37:0d:bf:5d:bd:13:a0:be:10:50:4c:38:ab:
b1:c6:41:5b:20:32:9b:17:9b:dd:a3:36:84:78:23:
1c:4e:4b:80:3e:7e:26:52:c5:1d:f3:c5:dc:0d:80:
b0:2d:33:45:16:0d:75:57:10:97:70:55:92:e7:98:
5b:72:5d:a5:66:31:91:4a:fe:9f:df:b9:61:4d:27:
60:cb:eb:30:87:8d:57:d8:55:1b:66:8f:35:29:72:
79:9d:57:61:e3:ca:fd:4a:62:24:dc:e9:d2:f2:8b:
2d:9d:9d:6e:e9:52:4b:d6:79:23:7f:6a:4f:57:a0:
e7:47:19:90:7c:5e:92:ec:68:00:a0:e1:06:f1:82:
58:20:63:c0:21:5a:cf:e1:2e:d1:8a:94:0a:cc:69:
b9:a7:a7:b3:d0:f9:c6:04:30:0f:41:40:73:5d:ee:
22:8e:c6:69:d0:e4:de:35:f9:af:20:da:47:6e:a3:
29:ee:c8:f2:48:44:43:67:5d:df:0b:cf:23:c0:1c:
44:a5:81:db:e7:e8:0f:21:7f:9c:a1:19:09:2d:a3:
d9:e7:8d:97:7f:af:69:70:2b:3b:68:00:48:8a:31:
52:cf:c3:5f:64:f0:dc:21:8b:ce:e7:60:63:e3:ac:
27:f2:f9:90:38:9c:2f:e1:74:64:8e:3d:6b:8a:dc:
f0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B9:0C:BB:91:17:46:1E:7F:B0:B4:54:99:19:08:82:CC:96:88:A1
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/zbkMu5EXRh5_sLRUmRkIgsyWiKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.143.125.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:c7:d5:2a:c2:c4:57:15:df:70:58:03:15:3d:42:cc:e8:2c:
03:96:c0:7b:26:96:68:89:c4:e7:50:e0:4b:d5:5c:4a:c6:fb:
eb:59:6e:0f:56:0f:c5:38:ec:be:8f:0b:45:c2:36:eb:25:9c:
2f:fe:d1:b9:aa:cf:77:cd:6a:98:7e:da:44:6f:b0:a8:4c:27:
bf:78:75:c9:75:f1:e3:60:77:f7:25:a1:d5:47:ae:45:23:6b:
32:d1:6b:29:2b:ed:eb:db:ad:2c:48:0b:04:a3:ee:bc:10:e7:
d1:71:89:fc:9b:08:f4:ec:08:d6:69:37:a4:99:ec:c0:1f:0c:
82:57:60:87:22:0c:81:56:0f:ee:00:5c:d8:89:fd:be:c5:f8:
75:a4:5c:fd:c3:e6:aa:34:ec:b9:af:ce:9f:38:4a:02:0f:61:
31:da:32:85:24:ca:9f:d6:5b:e5:94:6d:04:43:a2:6f:15:b1:
34:69:0e:94:2c:73:bb:fe:58:e9:1d:c6:f7:9c:66:d7:33:41:
75:96:c5:9b:c9:d3:db:06:ce:09:15:a9:e6:0d:64:ea:6c:ab:
36:fe:1a:ba:1c:89:34:6d:87:ea:98:00:6f:a8:89:ec:ef:0d:
aa:44:5e:56:0f:32:41:32:ac:cf:98:b6:a3:da:fa:63:a4:bf:
cc:0e:56:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 12:24:41 2024 by rpki-client on console-ams.rpki-client.org