Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Zjc5YNbNXDgKl7j7un4JtIotH7k.roa
File: Zjc5YNbNXDgKl7j7un4JtIotH7k.roa (raw, json)
Hash identifier: uHn0Eym7/HbZsVeP1EdA57EmvcpBGJov8eZaPy6TeN8=
Subject key identifier: 66:37:39:60:D6:CD:5C:38:0A:97:B8:FB:BA:7E:09:B4:8A:2D:1F:B9
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018CC8DFA2A5213D8A45D100303210F7AF2A
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Zjc5YNbNXDgKl7j7un4JtIotH7k.roa
Signing time: Tue 02 Jan 2024 06:32:28 +0000
ROA not before: Tue 02 Jan 2024 06:32:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23470
IP address blocks: 185.243.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:a2:a5:21:3d:8a:45:d1:00:30:32:10:f7:af:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 06:32:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66373960d6cd5c380a97b8fbba7e09b48a2d1fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:cd:9a:45:fc:27:9a:fa:47:a3:98:f8:e7:3b:
c0:12:0f:4f:76:51:fb:54:e3:07:7c:d3:5e:d5:23:
dd:2e:75:85:bc:60:19:db:7a:10:8f:d4:79:7f:46:
d0:b9:b5:da:29:fb:0b:c6:99:e2:27:cd:96:f5:a7:
7a:1e:d9:98:e4:ca:e5:78:39:f7:4c:ed:15:a0:b7:
de:9b:04:17:4b:e8:d6:16:62:05:77:10:92:7f:d2:
92:df:ca:9c:fb:98:65:0f:58:f3:0f:15:26:c7:7f:
c4:a1:19:0b:03:47:2e:45:9d:6d:73:05:23:4d:cf:
9d:1c:a0:07:38:77:12:66:98:d8:41:eb:85:16:7e:
5b:32:3d:28:30:e8:6f:25:d5:9f:63:24:fd:56:4f:
b6:e6:cf:65:ef:0b:1e:8a:0a:c8:bd:47:56:7b:27:
a2:bc:04:28:50:e3:df:24:86:87:b1:14:24:3c:cc:
58:ae:6f:16:eb:70:41:39:c9:e0:41:da:e8:61:f3:
54:a3:17:3a:89:2f:18:2b:1a:ac:dc:5c:8a:bd:d2:
62:a7:75:fa:f0:47:db:ad:c4:37:8b:cf:17:8b:b9:
4f:0a:5b:2f:23:34:e0:34:c1:78:f7:d7:c2:70:db:
27:2d:79:ca:7d:ca:0b:33:c8:d4:b6:a7:c4:cb:3d:
1d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:37:39:60:D6:CD:5C:38:0A:97:B8:FB:BA:7E:09:B4:8A:2D:1F:B9
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Zjc5YNbNXDgKl7j7un4JtIotH7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.5.0/24
Signature Algorithm: sha256WithRSAEncryption
76:24:3c:c4:ea:8b:bd:36:38:1c:7c:30:01:72:28:f3:ee:ac:
e8:42:ed:a8:d5:8a:1c:e8:9c:56:83:1a:27:82:be:9f:dd:1a:
c6:1d:29:fe:4d:7d:ca:76:b7:bf:40:96:ca:70:0b:bc:81:37:
f7:ec:3c:eb:55:38:04:e7:ec:9a:dd:21:6b:97:48:73:b0:43:
96:d5:e0:49:b7:23:21:89:e5:2f:7f:12:bd:60:b5:80:29:a5:
cd:c3:79:88:ef:74:3e:c0:d2:f0:68:ac:84:dd:bf:87:f9:80:
db:21:aa:1f:ae:26:64:a3:7f:fd:55:09:9f:a1:6f:d7:ce:bc:
3c:99:20:93:fc:94:95:a1:ff:79:9a:5a:b6:90:72:cf:34:7c:
87:4c:0c:d4:d0:a0:93:69:ae:d6:12:e8:3a:25:05:4a:6e:d8:
d6:7e:3b:46:2d:cc:85:49:88:40:2b:63:64:b2:d5:bf:ad:b8:
6a:58:35:79:ac:f8:d8:33:83:4e:e3:52:72:df:08:34:85:ae:
8c:3d:cf:02:be:4d:cc:4f:75:bd:0d:cd:aa:35:83:ed:de:e3:
83:23:6b:6d:0a:88:fc:4a:9d:40:32:4f:d6:42:2d:aa:4f:70:
81:f2:ef:54:99:2c:51:50:4a:a6:f8:c4:78:99:8b:d2:55:d9:
86:c7:1c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 12:14:27 2024 by rpki-client on console-fra.rpki-client.org