Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/RzodBXXh-So5UDkiSoBr1R_eVHA.roa
File: RzodBXXh-So5UDkiSoBr1R_eVHA.roa (raw, json)
Hash identifier: r2EeMEp54T2ZDnNK/GPwk6kuvNhV3X+5E+B+WCZtjG4=
Subject key identifier: 47:3A:1D:05:75:E1:F9:2A:39:50:39:22:4A:80:6B:D5:1F:DE:54:70
Certificate issuer: /CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
Certificate serial: 018E8182EE8F0F1570B94D93694D44FD9FF0
Authority key identifier: 55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/RzodBXXh-So5UDkiSoBr1R_eVHA.roa
Signing time: Wed 27 Mar 2024 20:03:45 +0000
ROA not before: Wed 27 Mar 2024 20:03:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212150
IP address blocks: 193.104.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 20:41:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:81:82:ee:8f:0f:15:70:b9:4d:93:69:4d:44:fd:9f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
Validity
Not Before: Mar 27 20:03:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=473a1d0575e1f92a395039224a806bd51fde5470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fd:c7:42:ec:df:47:e7:8c:ed:45:eb:ed:c6:
75:dc:62:99:83:eb:dd:72:f7:11:16:fc:af:78:5a:
8b:d5:b2:83:27:04:40:de:90:26:a1:2b:4e:23:94:
dc:23:02:50:ee:f4:5a:e6:b1:38:9f:e8:a3:1d:a7:
25:91:95:56:ab:06:1f:3e:30:b6:c2:bc:54:3b:f4:
b4:e3:4d:bc:7e:26:d8:e4:45:bc:6d:ba:92:1e:03:
89:5b:43:01:e6:b3:35:45:9a:0d:86:fe:76:ae:69:
5f:39:c8:91:3b:6a:91:bf:7d:b4:97:24:ec:1f:8f:
88:6b:a7:75:56:09:47:73:81:10:31:12:e4:49:5b:
bc:e7:41:28:b9:85:d3:c8:7d:b6:86:ac:8b:88:0e:
f6:f3:db:a2:4d:93:b6:5c:10:3c:7d:d5:12:6c:c0:
f5:4c:af:45:b5:98:cc:47:d8:c2:cb:2a:5b:82:b7:
42:b6:85:18:e9:a5:37:f9:a6:37:95:c7:9a:df:ba:
b0:49:2f:c0:34:e6:c0:bb:4f:a2:c1:8f:c2:c1:ea:
e1:2c:53:e2:c4:87:38:5c:60:70:9d:9f:e0:40:c7:
39:83:67:a1:06:90:9f:91:5a:ef:4f:59:f0:66:47:
ac:dd:f0:87:47:d2:47:8a:5d:9a:d0:89:93:83:a6:
a1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3A:1D:05:75:E1:F9:2A:39:50:39:22:4A:80:6B:D5:1F:DE:54:70
X509v3 Authority Key Identifier:
keyid:55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/RzodBXXh-So5UDkiSoBr1R_eVHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.245.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:6b:7f:65:46:ca:b3:ba:e0:49:2d:04:d6:46:e2:93:9e:6f:
1a:39:13:c8:6d:32:33:ef:cc:19:57:4d:a6:64:3a:82:cf:3d:
3f:8c:7e:57:90:75:09:e1:77:f0:3a:98:95:b3:28:be:b4:8b:
b2:c9:47:a4:5e:b6:98:9c:b7:d7:fb:ea:b6:b0:98:d4:6b:ce:
52:e2:65:8e:32:d3:af:3e:b5:aa:f2:26:e3:32:c8:1e:36:9d:
3d:a1:0a:55:07:7c:f4:dd:7c:9d:d7:85:2f:03:e8:c2:34:1e:
73:a4:24:40:3e:d3:fa:23:25:9f:78:41:13:ef:0d:64:5a:04:
8f:0d:69:62:8f:9c:84:98:bc:59:8d:7e:ba:1e:08:1f:31:65:
ba:f2:1c:49:01:12:47:1e:40:97:75:f6:9c:3c:33:07:8b:fb:
a0:89:62:ce:9e:84:95:0c:59:8a:40:ad:1f:4e:37:72:64:41:
8c:b6:fc:2e:67:9b:02:6d:6d:75:56:cb:ef:96:eb:0c:c2:9f:
d2:10:e9:6f:09:6a:ae:c5:8a:8d:39:1c:2a:e5:21:e4:6c:39:
a7:92:70:6b:f2:ea:d4:c3:e9:f1:74:57:c8:f3:91:8c:e5:31:
74:b5:6a:ba:83:9b:5e:28:59:fd:f5:bd:15:65:ec:75:f1:ce:
0a:f2:61:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 02:54:03 2024 by rpki-client on console-ams.rpki-client.org