Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/z3WZ1sHE8jHKeFZwGLi5B67pFxM.roa
File: z3WZ1sHE8jHKeFZwGLi5B67pFxM.roa (raw, json)
Hash identifier: I6DPc57WvL7E/Z6Dhq3lczRMHMK+kbys0sGGmQXGmDA=
Subject key identifier: CF:75:99:D6:C1:C4:F2:31:CA:78:56:70:18:B8:B9:07:AE:E9:17:13
Certificate issuer: /CN=81bb78be41e48337997c8fe91d8e2f24f7b49eaf
Certificate serial: 018DE9B680D7664885DE9DF91067815B7F2E
Authority key identifier: 81:BB:78:BE:41:E4:83:37:99:7C:8F:E9:1D:8E:2F:24:F7:B4:9E:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/z3WZ1sHE8jHKeFZwGLi5B67pFxM.roa
Signing time: Tue 27 Feb 2024 08:37:48 +0000
ROA not before: Tue 27 Feb 2024 08:37:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41678
IP address blocks: 92.43.224.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e9:b6:80:d7:66:48:85:de:9d:f9:10:67:81:5b:7f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81bb78be41e48337997c8fe91d8e2f24f7b49eaf
Validity
Not Before: Feb 27 08:37:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf7599d6c1c4f231ca78567018b8b907aee91713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fc:58:91:7f:f4:40:f2:5e:be:ae:ee:23:f3:
96:bc:64:ce:33:24:3c:b8:39:74:06:f8:93:bb:a1:
e8:fc:7c:0a:0c:e1:d6:33:c2:72:49:6d:33:c7:d2:
de:97:fd:6b:39:f8:9e:bc:9c:63:c3:14:e5:98:56:
54:c9:aa:a5:c2:71:28:42:2f:6f:8c:ff:e2:32:88:
5e:ec:cf:c3:c8:2a:fa:c5:ba:ee:1b:e2:d6:0e:59:
b5:27:37:01:e5:81:d3:27:41:e8:cc:9f:f3:f6:c8:
b5:20:b7:ec:83:f1:26:3d:bd:d8:dc:cd:11:3d:18:
c9:1f:c9:7c:78:f2:1a:c6:f3:d1:68:2f:32:b9:6e:
ac:ec:81:26:b5:29:77:b1:92:c9:d5:10:64:f6:48:
13:48:14:5d:47:cf:63:9c:5c:d7:b8:e3:66:42:3f:
f8:c2:1b:93:92:ee:a4:1d:10:c8:ce:a3:87:73:9b:
3e:64:18:b9:41:c5:2d:7d:a2:27:20:76:8e:b8:8c:
cd:3d:d5:6b:3b:51:66:31:db:bb:10:88:aa:f0:44:
a1:50:64:0d:2b:dc:37:e1:bf:48:dc:49:e5:ee:b6:
09:ef:df:5d:50:d0:76:27:a4:e7:72:d1:1d:f2:25:
6e:be:db:ab:e6:80:ef:59:ea:53:3d:2b:14:2c:a1:
c8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:75:99:D6:C1:C4:F2:31:CA:78:56:70:18:B8:B9:07:AE:E9:17:13
X509v3 Authority Key Identifier:
keyid:81:BB:78:BE:41:E4:83:37:99:7C:8F:E9:1D:8E:2F:24:F7:B4:9E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gbt4vkHkgzeZfI_pHY4vJPe0nq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/z3WZ1sHE8jHKeFZwGLi5B67pFxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/9db4d3-f78d-4430-87c0-6cbd581d317c/1/gbt4vkHkgzeZfI_pHY4vJPe0nq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.43.224.0/21
Signature Algorithm: sha256WithRSAEncryption
97:58:f7:6d:7a:b5:50:26:a2:24:e5:c0:a8:53:99:02:40:92:
19:08:3a:38:97:47:3b:0c:30:b9:d2:6e:7f:d5:8e:b3:a2:a2:
41:00:3f:fc:98:a4:fc:d9:c9:34:9c:26:9e:1f:87:15:a3:86:
de:b5:9f:59:b3:8f:78:88:fb:09:e7:f5:22:ab:44:7d:f1:b9:
e5:ef:3f:b9:18:67:f3:0d:54:0d:ea:59:41:67:ce:63:0c:cc:
84:f0:f6:9e:83:60:36:2d:65:b4:96:81:78:5f:ec:88:8e:9a:
a6:09:8d:9b:8f:58:e3:22:90:46:38:ca:39:1c:03:99:0c:c1:
b8:ba:d4:44:0b:a0:31:4d:a5:3f:be:60:f9:58:93:95:5e:54:
23:a2:0c:16:10:ab:ce:32:2f:e4:16:b6:61:5d:0c:2b:d2:58:
70:eb:95:12:40:81:34:81:2a:c4:10:22:00:e8:79:cc:72:e1:
a2:2b:32:8a:c9:83:b5:91:44:c0:75:8d:87:54:2c:1e:ce:26:
6f:e9:73:22:4d:3d:d9:33:e0:78:73:15:75:99:86:37:66:41:
8a:3e:9b:d7:39:62:af:af:a8:33:7c:fa:6d:ad:5a:d5:32:b8:
b1:74:6f:d4:f4:01:8e:ba:4b:b4:a0:05:ef:67:a4:0f:69:24:
40:d5:96:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:27:57 2024 by rpki-client on console-ams.rpki-client.org