Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/zCN5DS92gUjx5EiaURlhWVIvqdQ.roa
File: zCN5DS92gUjx5EiaURlhWVIvqdQ.roa (raw, json)
Hash identifier: 8APLJX8RQJjacmvYARPdYliujzRH5/+OoxqfOSysy2o=
Subject key identifier: CC:23:79:0D:2F:76:81:48:F1:E4:48:9A:51:19:61:59:52:2F:A9:D4
Certificate issuer: /CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Certificate serial: 018F7B6D83FB7CE9BD484B1B293D3EBB0D26
Authority key identifier: 1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/zCN5DS92gUjx5EiaURlhWVIvqdQ.roa
Signing time: Wed 15 May 2024 08:45:25 +0000
ROA not before: Wed 15 May 2024 08:45:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3269
IP address blocks: 62.100.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:7b:6d:83:fb:7c:e9:bd:48:4b:1b:29:3d:3e:bb:0d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Validity
Not Before: May 15 08:45:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc23790d2f768148f1e4489a51196159522fa9d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:41:43:fc:f6:c0:f3:93:b4:3e:bf:92:48:ce:
69:08:cf:b8:fc:74:e9:0a:78:0e:41:54:b5:03:b1:
f6:2c:7f:ca:6b:ad:0a:96:5a:32:6a:0e:71:8c:b6:
26:dc:0d:56:31:e7:38:a4:40:a9:ff:85:5e:75:29:
23:16:60:16:38:46:a3:d7:dd:df:ff:19:84:5e:1a:
06:bc:fd:4a:a1:f7:4a:e3:3d:b6:4a:fe:61:e8:d9:
47:61:42:89:5f:07:a6:c3:9e:a4:3a:74:a0:ac:e6:
42:d6:c0:64:e4:d0:a5:36:55:d3:8b:02:27:c4:57:
5a:c6:27:da:d8:31:27:13:29:c0:50:db:33:99:e1:
f9:8c:ef:7c:c2:b9:fa:62:56:38:b0:e9:3f:b6:3a:
e5:3b:1c:92:5b:06:6a:9d:7b:fa:e2:41:ca:5d:d0:
60:45:25:54:3b:62:98:37:a5:60:c3:40:aa:e0:6f:
58:c4:66:5e:76:ed:f5:ff:7c:c6:89:77:02:76:aa:
cc:fb:a7:93:05:92:37:df:e6:74:fc:ab:0f:c8:b5:
0c:d2:cc:51:b2:e8:80:12:02:bc:7e:10:e6:4e:1a:
5e:8d:77:c6:54:1d:37:c1:70:70:9b:8f:cd:b9:dd:
a1:d0:8d:87:41:a5:46:2d:b6:78:ea:d8:80:78:6f:
9a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:23:79:0D:2F:76:81:48:F1:E4:48:9A:51:19:61:59:52:2F:A9:D4
X509v3 Authority Key Identifier:
keyid:1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/zCN5DS92gUjx5EiaURlhWVIvqdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.100.90.0/24
Signature Algorithm: sha256WithRSAEncryption
37:cf:70:00:1c:2b:a2:6c:16:d3:aa:03:97:72:ed:fd:19:36:
2b:12:22:81:5d:0f:cd:a4:0f:a5:7c:c7:ae:bd:0a:6a:56:9b:
7e:2e:0f:ab:a1:05:7f:20:23:38:13:8e:c0:f1:dd:d2:74:0f:
ba:46:67:93:8f:13:b5:4c:04:d8:44:26:3d:7b:39:53:db:6d:
76:3b:fb:b6:82:a4:d7:8e:40:3c:e4:2c:d2:3a:cc:af:fc:19:
da:39:6c:18:20:2d:eb:2f:22:47:7d:85:62:ba:41:24:ed:3d:
f3:2d:3f:b7:77:05:cb:6d:2b:59:19:19:8b:18:50:cb:0a:9b:
60:99:46:85:5c:f1:b1:98:09:2e:15:5f:22:0d:87:3c:29:2f:
f3:b8:48:d5:89:90:9c:10:fb:ba:f8:fd:7f:aa:01:9a:b5:81:
6b:f7:ba:3f:ac:be:91:f8:7d:9b:47:cd:9c:98:33:b8:24:fe:
a8:2e:fc:51:df:10:1c:8f:4a:1a:8f:0a:db:8c:fa:d3:80:8f:
e3:be:47:56:15:3f:bf:57:fd:bd:f8:e0:4b:df:a2:86:24:b9:
bf:62:dd:bc:59:6b:ae:0d:b5:70:ce:5b:fa:37:b2:2c:d6:08:
a9:91:0c:70:3f:5d:b6:be:0b:8a:81:6c:ea:f2:2b:80:5f:50:
2d:c9:e2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:01:00 2024 by rpki-client on console-fra.rpki-client.org