Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Z2jTK4EaEZmqYGBucFNAejYL-sI.roa
File: Z2jTK4EaEZmqYGBucFNAejYL-sI.roa (raw, json)
Hash identifier: JIyWV/qMOO4cZRKWz7/s8PusxeT5xgaOoKCRIotilzc=
Subject key identifier: 67:68:D3:2B:81:1A:11:99:AA:60:60:6E:70:53:40:7A:36:0B:FA:C2
Certificate issuer: /CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Certificate serial: 018CC49247E8AFA04453904A1A3A1A207415
Authority key identifier: 22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Z2jTK4EaEZmqYGBucFNAejYL-sI.roa
Signing time: Mon 01 Jan 2024 10:29:30 +0000
ROA not before: Mon 01 Jan 2024 10:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31221
IP address blocks: 193.218.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:47:e8:af:a0:44:53:90:4a:1a:3a:1a:20:74:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Validity
Not Before: Jan 1 10:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6768d32b811a1199aa60606e7053407a360bfac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:bd:15:c4:b8:45:f6:30:e8:ea:46:a1:43:0d:
ab:28:a7:5e:1e:56:0b:98:7a:b7:de:e4:02:eb:da:
94:96:79:eb:0e:1f:b4:b9:f1:a6:44:65:fd:0e:b8:
64:d5:19:c1:8d:d1:f9:17:af:21:fb:64:7c:da:50:
cb:a7:83:5a:69:cb:79:09:cf:9e:e3:2c:83:08:b4:
88:74:0f:bc:f3:b0:9a:65:cc:06:df:5b:9f:e6:46:
e5:bc:02:c5:4c:af:25:91:08:6f:95:ff:87:0f:69:
f0:9e:e2:c8:d9:43:92:1d:8b:9e:6d:11:69:40:50:
ef:41:85:0f:fe:e6:1b:1c:78:65:e9:af:c2:42:b0:
37:22:38:f2:d9:be:fb:c3:28:a1:3b:36:43:72:9a:
26:c0:18:4a:02:31:00:e2:86:9d:7a:96:97:59:61:
ff:30:43:ab:38:be:22:22:1a:ca:30:a0:cf:0f:06:
ac:f1:d0:e8:6e:1b:52:be:25:6b:13:26:db:19:ac:
ac:c9:ea:cd:21:35:60:10:fe:5d:26:43:59:9f:27:
12:77:86:a2:d5:35:04:57:9f:36:1d:b1:2e:75:e9:
c1:a0:c8:d3:40:84:c9:d1:31:42:f3:d7:50:ec:27:
4c:c6:da:69:83:95:f1:c3:85:ab:72:1c:d1:d7:83:
7f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:68:D3:2B:81:1A:11:99:AA:60:60:6E:70:53:40:7A:36:0B:FA:C2
X509v3 Authority Key Identifier:
keyid:22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Z2jTK4EaEZmqYGBucFNAejYL-sI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.218.120.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:83:6f:25:46:93:da:b1:75:ed:41:98:67:73:0d:e0:89:1b:
15:07:58:f1:5f:70:65:9e:4b:0c:7a:3f:a6:be:99:21:77:a7:
dc:9b:5c:ad:22:91:3a:05:38:88:c4:cb:f0:86:72:63:47:62:
d7:3b:9b:06:ec:a9:2f:dd:ed:6f:2e:e7:fa:b0:2b:81:72:15:
cf:cc:31:c4:ae:b7:67:0b:f3:c8:55:51:40:54:dd:57:5e:e9:
ed:e1:77:9d:4c:6b:3f:2d:73:d5:bf:9e:66:09:0c:34:d6:9e:
82:48:28:6c:3d:31:16:2c:0e:b8:59:78:9e:74:16:2c:b8:ae:
ac:46:a2:26:64:24:75:db:bd:50:86:12:8e:07:b7:be:4f:81:
16:fc:63:69:a9:e9:ce:07:14:26:73:f5:cd:4a:26:cc:e7:fd:
d6:a6:53:09:a8:06:52:0c:27:d6:91:ab:7a:72:57:0a:20:91:
e7:bb:b9:99:96:3b:5d:dc:7b:af:4b:fb:6e:3e:c3:fc:a5:cc:
d6:6b:d9:bc:00:27:22:ee:95:3c:a0:8a:1e:20:bd:81:99:1e:
f3:94:3a:7a:d0:e2:42:3a:1e:bb:47:08:5a:3e:de:53:43:c7:
2c:2f:a1:46:39:06:7a:97:68:53:06:a5:41:05:e0:b7:42:40:
1b:d6:37:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 19:10:41 2024 by rpki-client on console-fra.rpki-client.org