Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ZSbSW3p9WUDkhAXgrxEL-fysMkg.roa
File: ZSbSW3p9WUDkhAXgrxEL-fysMkg.roa (raw, json)
Hash identifier: Lok0uHvVeQjM3ka4rNC308FNAgJYSKQfa+wfzZV9XI8=
Subject key identifier: 65:26:D2:5B:7A:7D:59:40:E4:84:05:E0:AF:11:0B:F9:FC:AC:32:48
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018F2F59C4093EF08B19B0069428922D07D2
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ZSbSW3p9WUDkhAXgrxEL-fysMkg.roa
Signing time: Tue 30 Apr 2024 14:12:42 +0000
ROA not before: Tue 30 Apr 2024 14:12:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215433
IP address blocks: 192.124.172.0/24 maxlen: 24
212.192.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2f:59:c4:09:3e:f0:8b:19:b0:06:94:28:92:2d:07:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 30 14:12:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6526d25b7a7d5940e48405e0af110bf9fcac3248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:16:a9:96:a1:6a:aa:5b:07:e0:bc:05:47:3c:
c5:17:51:86:7b:24:38:96:21:cd:cb:e1:de:7f:20:
b3:e4:5f:00:3d:87:8d:c8:e1:58:77:1f:88:b1:9e:
ee:cc:19:cc:b1:53:97:a7:85:0b:2c:33:4f:5c:99:
8a:7e:7c:15:26:75:ac:6f:06:ad:dd:e1:6d:14:45:
0d:cc:be:86:77:05:3c:c6:51:cc:b4:19:c7:05:aa:
50:b2:2b:4f:3d:be:d4:b9:a4:09:7d:f1:66:e5:0c:
92:5c:ba:8b:1f:8b:7a:1f:f1:8a:12:f0:79:bc:83:
0b:c5:68:c2:02:e5:ed:f1:9e:36:60:68:a2:20:ef:
50:fd:b5:88:a7:a9:83:5c:5a:fb:df:a3:7b:6f:9d:
3c:8c:02:ba:ac:84:b7:11:be:fd:34:25:d3:86:9a:
62:ce:b4:af:d0:dd:18:1f:2e:9f:e8:14:c5:2b:e0:
d2:af:54:57:f4:ca:9f:a0:d5:b6:7a:7b:1c:9f:e4:
a0:a1:4a:79:12:25:12:78:3c:7d:72:cb:7c:86:2d:
a4:27:08:af:d3:df:24:12:27:71:fd:26:be:49:fd:
7f:23:85:b2:68:97:eb:e0:85:cf:ad:98:60:b8:6a:
e9:4d:5e:0b:60:f2:2b:db:6c:59:a3:d8:21:f4:4e:
b3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:26:D2:5B:7A:7D:59:40:E4:84:05:E0:AF:11:0B:F9:FC:AC:32:48
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ZSbSW3p9WUDkhAXgrxEL-fysMkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.172.0/24
212.192.208.0/24
Signature Algorithm: sha256WithRSAEncryption
21:46:4f:55:02:26:5f:54:f6:af:54:02:85:da:70:bd:d3:13:
17:03:8e:ec:10:10:f4:b4:2a:ea:76:be:dc:3d:28:91:7f:b3:
85:53:ec:46:29:9c:4c:79:e3:3c:d4:ad:02:8f:18:f6:79:ad:
b3:46:8d:68:92:93:c3:48:18:08:0a:39:06:15:6e:95:72:f7:
d3:67:3e:e1:0b:d7:5b:60:fb:29:99:a2:e6:36:08:9c:57:a6:
83:94:a2:0a:4e:f2:e0:8b:5c:d8:05:d8:dc:16:59:03:03:70:
df:65:34:bb:46:42:0c:2a:eb:ef:54:f8:4d:2c:e5:7b:46:f5:
10:3c:ed:20:b8:76:32:63:57:5f:63:10:86:0c:c7:c2:e0:f9:
cc:64:ef:53:80:12:b9:e5:b4:d0:6d:be:51:17:fa:f6:9c:9c:
74:70:b1:aa:a6:f3:52:c6:94:66:32:2d:60:83:5d:3f:31:49:
a8:c1:07:1d:ab:13:41:3a:de:2b:49:50:b0:f4:ef:0d:b6:86:
c4:d8:6f:04:ea:03:fc:c8:72:35:2f:29:a2:61:29:a5:e2:07:
14:bb:8d:44:dc:76:36:4a:a4:b1:93:e1:69:77:a3:fc:9a:b4:
3c:c8:0e:c1:dd:50:2f:3a:8b:6d:e8:cd:81:c0:ae:02:ec:7a:
69:79:01:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:39:05 2024 by rpki-client on console-ams.rpki-client.org