Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/1-ZSufS14yx53HldTvisGN5T2lSs.roa
File: 1-ZSufS14yx53HldTvisGN5T2lSs.roa (raw, json)
Hash identifier: OcOGyYbuJBehB9GQfct4AI1dByXXTYcBigFTdHHuEjg=
Subject key identifier: F9:94:AE:7D:2D:78:CB:1E:77:1E:57:53:BE:2B:06:37:94:F6:95:2B
Certificate issuer: /CN=24350aa8a94af666099fd073ec621cd15d04b316
Certificate serial: 018CCA2A99964A8FED8C01E3866313717AA9
Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/1-ZSufS14yx53HldTvisGN5T2lSs.roa
Signing time: Tue 02 Jan 2024 12:33:58 +0000
ROA not before: Tue 02 Jan 2024 12:33:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197326
IP address blocks: 193.77.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 04:03:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:99:96:4a:8f:ed:8c:01:e3:86:63:13:71:7a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316
Validity
Not Before: Jan 2 12:33:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f994ae7d2d78cb1e771e5753be2b063794f6952b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:36:7b:ac:b1:91:dd:bb:5e:95:05:44:0b:2c:
03:0e:b4:18:97:8d:78:85:ea:c1:72:82:9f:13:71:
e5:d1:ee:65:a9:97:a2:ae:5e:9c:a3:e6:c6:f5:ef:
ee:0f:8b:a1:3f:ed:83:1a:f4:ef:bb:ef:13:96:ba:
a3:46:28:cc:24:92:09:b4:92:c0:9d:0a:a7:bf:7b:
e3:55:cf:cb:10:5b:c0:b3:f0:d8:e5:25:69:62:64:
36:2b:c0:f2:b9:ba:1e:e8:63:06:df:f7:58:5d:f4:
12:04:92:fb:e5:57:2f:3e:eb:ec:9c:5c:ab:1c:7c:
af:5f:12:99:4a:e0:3a:97:17:49:92:e7:0e:97:26:
f4:7e:4f:f2:de:c7:16:6f:35:44:49:3b:47:59:ac:
a5:64:71:68:4a:ca:64:a3:58:c0:51:e5:83:5b:38:
e4:ce:9a:ee:e5:1e:f2:9d:2f:1a:95:ff:1b:f7:88:
07:41:3b:0d:f4:61:71:7c:9d:44:1d:7d:aa:3a:a2:
2f:6c:15:c2:17:17:f9:07:35:08:ee:e6:f9:b9:a2:
95:20:c0:d5:89:a4:ce:ff:88:c4:b3:44:6c:d0:54:
3e:87:45:4b:98:3f:97:b9:f1:40:3a:1f:f6:b9:17:
74:bb:16:a9:ac:ee:33:60:8e:dc:ee:d3:ba:3d:02:
dc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:94:AE:7D:2D:78:CB:1E:77:1E:57:53:BE:2B:06:37:94:F6:95:2B
X509v3 Authority Key Identifier:
keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/1-ZSufS14yx53HldTvisGN5T2lSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.77.42.0/24
Signature Algorithm: sha256WithRSAEncryption
47:c7:ca:81:c2:73:d1:7d:ed:4e:74:75:a8:92:11:b4:04:6c:
22:27:80:c2:54:c0:76:97:75:cc:5a:6a:4b:ce:b4:a1:86:83:
df:e1:cc:1c:a4:c2:83:d7:45:fc:d0:48:af:94:bc:ea:ee:95:
c2:c6:0a:12:34:85:3b:bd:1c:bc:89:b5:05:1f:24:80:51:e3:
c6:1c:5e:54:80:60:42:b6:93:71:be:6c:ac:23:9d:45:af:1a:
43:fd:97:b9:43:77:1f:a0:8a:68:25:ff:b4:79:e2:95:37:bc:
d3:71:bb:7b:7d:18:a2:92:4f:82:b7:36:0c:1d:71:15:c3:a2:
36:af:2b:8d:20:c2:47:aa:7a:23:d9:b0:dd:11:ee:78:55:c7:
c4:ff:f1:30:8b:2b:df:7d:0a:bd:f8:be:f1:ca:0d:6c:a5:4d:
ba:d9:2c:56:51:e1:25:0a:80:42:f1:83:28:84:34:25:a7:af:
c8:56:90:9f:c0:8c:4b:bd:75:b7:7a:29:4c:49:88:d6:3f:7f:
f9:cb:85:a1:0e:7c:9c:d3:98:20:3b:72:41:6c:12:aa:14:b1:
69:bd:df:97:da:a8:40:4c:ef:f2:8f:e3:f3:f2:2e:f8:df:50:
5a:6a:32:22:97:c9:29:2f:db:fb:87:e4:58:68:ca:1b:f5:cf:
c1:32:48:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 12:17:20 2024 by rpki-client on console-ams.rpki-client.org