Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/ZnqSex-H7UrC3aW4t25CLQb15-Y.roa
File: ZnqSex-H7UrC3aW4t25CLQb15-Y.roa (raw, json)
Hash identifier: raLn7l3SwUwVr8C/UC5Q9SWr082jyTsXUGlK68R5Dlg=
Subject key identifier: 66:7A:92:7B:1F:87:ED:4A:C2:DD:A5:B8:B7:6E:42:2D:06:F5:E7:E6
Certificate issuer: /CN=e6e4687ab8b1eb6de1abd04a07617c86d118518d
Certificate serial: 018CC5DC2F4CB7C90009E33D2D5905267E9A
Authority key identifier: E6:E4:68:7A:B8:B1:EB:6D:E1:AB:D0:4A:07:61:7C:86:D1:18:51:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5uRoerix623hq9BKB2F8htEYUY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/ZnqSex-H7UrC3aW4t25CLQb15-Y.roa
Signing time: Mon 01 Jan 2024 16:29:50 +0000
ROA not before: Mon 01 Jan 2024 16:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398962
IP address blocks: 176.125.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/5uRoerix623hq9BKB2F8htEYUY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/5uRoerix623hq9BKB2F8htEYUY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5uRoerix623hq9BKB2F8htEYUY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:2f:4c:b7:c9:00:09:e3:3d:2d:59:05:26:7e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6e4687ab8b1eb6de1abd04a07617c86d118518d
Validity
Not Before: Jan 1 16:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=667a927b1f87ed4ac2dda5b8b76e422d06f5e7e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fc:7f:e7:f2:ed:1a:49:1c:e4:30:e0:4b:7f:
d8:4b:58:88:ce:62:75:b8:ea:cc:58:95:2e:85:09:
59:ac:89:58:06:07:b0:02:61:c9:66:e7:f9:99:7d:
7e:d5:d3:fe:00:82:c5:27:24:e9:cd:87:96:ba:4f:
4d:a2:f9:9c:bb:a3:83:f0:e8:e6:89:8c:b0:35:10:
1b:a0:b6:c0:47:d7:6e:85:08:a3:07:8e:41:c6:7d:
5a:39:ba:8b:37:3c:0d:b5:de:34:fc:99:18:90:4c:
52:4e:82:d9:5d:40:ac:f0:cb:10:4f:99:77:27:76:
8a:ab:83:d8:2d:e9:15:0a:e7:69:33:3c:5e:f8:ff:
20:26:43:8f:0c:c8:a9:75:bd:b0:4e:96:09:bd:5a:
bc:8c:ef:a2:e3:cf:73:30:76:9a:0a:26:d7:2f:b4:
c1:94:20:8f:ba:47:c4:42:99:a3:58:44:fe:56:0d:
13:c0:68:04:6a:c0:3e:94:81:54:9a:58:62:b3:a5:
3d:4b:4c:c9:d6:eb:40:43:57:67:90:57:41:d2:30:
e0:42:24:54:76:f7:36:f0:63:62:38:63:05:1b:3f:
c7:c6:21:5c:fc:6f:63:55:a2:a9:b6:c9:c6:a7:1a:
9a:8f:11:a7:89:a0:7e:53:b0:02:cc:26:87:34:b8:
ee:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:7A:92:7B:1F:87:ED:4A:C2:DD:A5:B8:B7:6E:42:2D:06:F5:E7:E6
X509v3 Authority Key Identifier:
keyid:E6:E4:68:7A:B8:B1:EB:6D:E1:AB:D0:4A:07:61:7C:86:D1:18:51:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uRoerix623hq9BKB2F8htEYUY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/ZnqSex-H7UrC3aW4t25CLQb15-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/5uRoerix623hq9BKB2F8htEYUY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.125.236.0/22
Signature Algorithm: sha256WithRSAEncryption
05:b2:f7:82:ac:75:03:3b:d8:18:60:35:2c:ae:66:8f:75:a3:
12:4d:53:03:69:01:de:f7:f6:69:e7:2b:95:71:87:60:0f:d2:
d9:22:47:ba:2b:ba:76:c4:68:9f:4b:4e:47:71:9d:66:34:d8:
06:fb:2d:21:02:01:90:ca:d5:cf:f7:41:34:c4:7a:2d:bd:60:
17:18:a4:a0:63:4f:ce:fa:9f:00:88:a0:fd:e3:41:8e:30:dd:
d6:11:f3:fc:e0:a8:1a:6b:2b:44:ce:f4:77:b9:1d:ad:69:82:
f8:4a:97:10:1a:5d:e2:f6:43:dd:12:d1:d7:86:a0:b0:09:87:
1f:7d:03:12:14:27:18:21:d3:9a:7b:2a:36:d4:7d:48:ba:92:
10:4c:e8:80:7d:54:ee:28:e6:59:f6:81:50:1b:66:82:10:10:
05:08:c2:c5:3d:9b:4e:f8:65:75:fd:01:70:56:9c:ab:c9:85:
83:53:16:c3:ed:8b:7c:ea:08:c2:39:b6:9d:13:00:1a:83:2b:
6c:da:17:87:6f:19:a4:82:50:e2:d1:35:14:58:6d:66:b0:ec:
e4:48:63:fb:6d:2a:b8:14:a0:c7:2e:71:a8:8d:20:98:1d:83:
03:36:d6:44:ea:ed:e2:f5:79:4a:b4:7e:a3:06:ac:dc:76:28:
7a:26:ee:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:45:36 2024 by rpki-client on console-ams.rpki-client.org