Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zkPU1B4RLiud7kEUO5F4gKPSNUg.roa
File: zkPU1B4RLiud7kEUO5F4gKPSNUg.roa (raw, json)
Hash identifier: v5hwHCbRIgniJ6CEDULYORko8xrvfnOKvYWKA2HBD9U=
Subject key identifier: CE:43:D4:D4:1E:11:2E:2B:9D:EE:41:14:3B:91:78:80:A3:D2:35:48
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCA2A7AC61EE705B6D1873100403FCB0A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zkPU1B4RLiud7kEUO5F4gKPSNUg.roa
Signing time: Tue 02 Jan 2024 12:33:50 +0000
ROA not before: Tue 02 Jan 2024 12:33:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50448
IP address blocks: 194.87.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 12:52:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:7a:c6:1e:e7:05:b6:d1:87:31:00:40:3f:cb:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 12:33:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce43d4d41e112e2b9dee41143b917880a3d23548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ee:36:91:1a:09:43:b4:a5:db:2d:86:e9:00:
59:73:9f:3f:54:10:2c:f8:89:d8:0f:aa:07:24:bd:
b3:0d:b0:c5:2a:46:64:60:2f:bb:5c:8e:48:93:c2:
be:dd:dc:58:5b:b1:b6:98:7a:ca:27:3b:16:4e:22:
2f:ec:14:d9:89:cf:5e:64:45:89:36:70:8a:fc:3d:
09:34:68:c4:c4:45:0e:ae:e4:11:f4:dd:21:e3:77:
9f:eb:42:eb:cd:90:df:88:37:9c:94:3b:a2:d7:99:
32:ef:1d:1b:f3:d4:99:4d:69:64:2e:5d:6f:c7:c3:
b4:c2:9f:73:a7:c4:d8:88:69:41:84:fc:6f:d8:3f:
05:ae:b4:3a:15:3e:51:25:6d:56:37:ac:a5:15:05:
b4:76:cc:d6:3d:26:1b:28:4d:28:53:ee:0a:17:89:
37:f6:7f:ab:95:ba:83:cc:65:ad:a0:3a:d4:ed:44:
92:91:b4:26:b0:f9:12:d8:62:00:54:39:f3:0c:db:
a8:76:c3:22:56:6b:fd:d4:63:a5:f2:b8:7e:3d:27:
88:1f:62:ae:f0:e1:31:6f:38:d9:0c:7d:bf:1c:47:
1d:0e:14:76:58:ed:e8:d1:6c:7a:6a:cb:3b:16:c3:
0f:d8:d0:97:08:47:d9:4d:bb:bc:49:cc:4d:41:ce:
c2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:43:D4:D4:1E:11:2E:2B:9D:EE:41:14:3B:91:78:80:A3:D2:35:48
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zkPU1B4RLiud7kEUO5F4gKPSNUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.162.0/24
Signature Algorithm: sha256WithRSAEncryption
98:34:26:52:a8:56:c0:0f:c8:2b:c3:cd:0d:98:fd:e4:6b:80:
c3:4d:74:5c:ec:f8:65:2f:a9:3e:e0:30:87:59:e3:fd:71:94:
5e:cb:a0:db:1c:3b:00:9c:6e:e8:95:26:2e:c9:0e:6a:cc:94:
aa:b1:de:7e:a0:8c:a3:76:20:2f:e6:1a:ec:8e:d8:e0:f2:01:
2a:18:1f:f2:d5:05:ac:bd:1f:43:b6:92:a5:94:d6:e7:b6:8c:
c6:24:c7:a8:49:33:0f:78:20:30:0e:c1:a0:38:e6:14:aa:fd:
a3:19:0a:fb:97:d4:26:be:c9:08:2b:f3:63:59:6b:fc:2e:d5:
32:5f:3e:5b:5f:2c:9c:f3:f7:fd:aa:61:05:ff:39:47:8d:a0:
c5:73:19:a4:c8:0e:8a:6a:80:c2:cf:85:c1:c6:da:55:c8:c7:
11:88:0a:30:cc:ca:35:f2:77:89:9c:bd:91:1c:a8:6f:b0:32:
d8:51:b9:49:14:d7:a3:ef:58:49:48:ef:bd:d5:63:30:02:2b:
80:20:d3:34:a8:5e:c0:f7:e9:bb:51:5b:50:c9:c1:7b:12:d1:
93:80:b8:aa:56:b4:cf:32:eb:f6:60:08:7b:3c:ee:bb:81:b2:
d1:92:95:6a:2c:87:e6:59:9a:b6:70:6c:39:cc:68:5d:02:70:
79:dd:10:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:05:43 2024 by rpki-client on console-fra.rpki-client.org