Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zbx95wlNtliafXIoEcuEzrcz4xY.roa
File: zbx95wlNtliafXIoEcuEzrcz4xY.roa (raw, json)
Hash identifier: 6hI2cd+W2P93Z3Pe++SqJjWkJY1ocgAOmca0Smehfbo=
Subject key identifier: CD:BC:7D:E7:09:4D:B6:58:9A:7D:72:28:11:CB:84:CE:B7:33:E3:16
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192DDBD948293596271256377DBD8569965
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zbx95wlNtliafXIoEcuEzrcz4xY.roa
Signing time: Wed 30 Oct 2024 14:04:01 +0000
ROA not before: Wed 30 Oct 2024 14:04:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215540
IP address blocks: 5.253.59.0/24 maxlen: 24
212.87.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:dd:bd:94:82:93:59:62:71:25:63:77:db:d8:56:99:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 30 14:04:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cdbc7de7094db6589a7d722811cb84ceb733e316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c0:aa:57:f0:42:41:13:cc:e8:1d:7c:6f:0f:
03:ed:7c:6d:5c:3f:62:e9:07:49:8e:fa:38:1b:ee:
6d:e3:07:29:35:32:74:c3:51:29:c2:11:ba:f3:f9:
06:05:67:e2:57:87:38:76:51:33:77:c6:21:28:aa:
a1:6b:1f:da:b9:b5:6f:f0:5a:af:f8:31:c6:62:56:
9b:5e:cc:4d:d3:66:c1:d1:64:4a:35:e8:9b:e1:5f:
da:b0:1a:39:72:aa:f5:f7:4c:6d:51:04:ca:20:86:
51:28:2b:55:a1:c3:61:9e:c9:8c:54:fd:75:b3:da:
36:14:8f:12:ee:9b:9e:10:9c:92:7a:65:ff:c1:fe:
6d:88:9c:ca:c1:ec:09:d8:a8:fe:64:7d:e0:f3:fa:
19:e4:8a:e5:fc:a9:fe:32:08:57:0b:25:2d:03:77:
3a:bb:c2:78:71:9d:1e:7e:1d:bc:80:93:fa:ed:aa:
04:ae:50:75:c1:2e:1a:a1:88:13:0a:1d:e8:52:b7:
5b:05:cb:dd:1b:e2:ec:33:b8:55:7c:05:29:db:e4:
83:01:b7:19:88:26:26:a2:e0:b2:3a:cd:53:da:b9:
fc:8e:1e:4b:c2:65:3e:ee:a5:19:cc:1f:e5:f2:f0:
b0:5b:b5:25:8e:fa:95:e2:1b:92:92:c9:a6:e6:ab:
ab:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:BC:7D:E7:09:4D:B6:58:9A:7D:72:28:11:CB:84:CE:B7:33:E3:16
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zbx95wlNtliafXIoEcuEzrcz4xY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.59.0/24
212.87.222.0/24
Signature Algorithm: sha256WithRSAEncryption
74:08:8a:b5:e7:bf:b7:f9:61:78:0d:21:dc:a2:3e:b0:f4:d7:
ef:ee:4e:1f:a2:76:ad:f1:47:69:8d:4c:3d:34:63:93:5e:c8:
d1:91:fc:ee:8c:89:88:4a:41:b4:6c:f6:bf:04:0f:df:6e:1d:
70:ab:84:13:67:bb:4c:53:b3:fd:57:d4:86:77:96:42:0b:74:
59:60:17:c0:d6:1a:7d:18:54:55:0b:87:01:72:50:c6:f1:7a:
d7:12:a2:39:f8:7e:cf:cf:7a:ef:72:62:d5:6d:01:cb:b4:2a:
4c:cc:14:5f:1b:9d:99:92:a9:ad:d1:f4:a3:aa:f6:28:26:23:
e9:04:d3:44:ec:82:a7:e6:2e:27:8e:9e:5f:40:d3:aa:8a:ff:
1c:f8:76:69:cc:99:17:3b:da:5b:8d:aa:45:0c:aa:d4:8b:de:
37:bb:ed:72:5c:27:1c:72:73:91:df:0a:a0:df:31:6e:2c:38:
8a:2a:10:a9:01:f1:99:be:fc:8d:53:4e:a1:12:b2:a0:2c:15:
7c:6f:f0:d5:90:82:38:00:b1:c7:b5:51:ec:0e:d0:e2:d4:f9:
04:08:16:b7:af:95:2d:b8:1e:cf:b6:a9:74:c2:06:98:02:a9:
9b:1f:83:2c:40:10:52:4e:92:6a:2d:dd:d6:9d:92:e7:f7:b0:
83:0b:28:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:35:59 2024 by rpki-client on console-ams.rpki-client.org