Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/pzTBBG0uTyp8enLIHyx6mvEmH-Q.roa
File: pzTBBG0uTyp8enLIHyx6mvEmH-Q.roa (raw, json)
Hash identifier: Z6l5bXBZ6z6xWhBEw8PIduXyxAWND5UIcg3CmXiIMQU=
Subject key identifier: A7:34:C1:04:6D:2E:4F:2A:7C:7A:72:C8:1F:2C:7A:9A:F1:26:1F:E4
Certificate issuer: /CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Certificate serial: 018CCA2AA2CDB3AEC01F73EE1FF41F3C576F
Authority key identifier: 5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/pzTBBG0uTyp8enLIHyx6mvEmH-Q.roa
Signing time: Tue 02 Jan 2024 12:34:00 +0000
ROA not before: Tue 02 Jan 2024 12:34:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211406
IP address blocks: 185.62.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:a2:cd:b3:ae:c0:1f:73:ee:1f:f4:1f:3c:57:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Validity
Not Before: Jan 2 12:34:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a734c1046d2e4f2a7c7a72c81f2c7a9af1261fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:59:bc:85:1f:38:44:29:bf:e2:c6:12:e7:bb:
05:07:5a:a4:2f:80:c0:4d:4e:d5:7a:9e:11:0f:c1:
43:02:70:bc:85:16:b1:62:fc:dc:9d:b3:57:f5:d9:
e2:6b:34:80:21:c3:e0:a9:e8:d7:ab:5d:a3:02:8a:
e4:32:5a:3a:81:83:c4:f3:2f:a2:4c:77:20:7a:58:
45:9e:bb:0d:86:5b:d0:5b:aa:5d:19:d2:67:89:b4:
2f:65:59:12:7f:f8:0b:a5:a1:98:d6:a7:80:04:af:
a1:dd:47:77:a3:71:9c:b9:d6:a9:a9:5c:15:58:28:
3c:45:3a:3a:33:a1:3a:b6:94:e5:a9:33:16:21:74:
6a:db:c8:51:60:20:b7:91:33:13:15:03:b5:7a:b4:
5c:cf:8d:e0:ce:12:ba:2b:fe:83:4d:22:94:26:ce:
83:4f:39:1d:9e:91:c5:ef:7c:65:22:0d:e9:10:9d:
d7:a9:af:d9:f0:a3:3b:ac:98:c2:dc:a1:b7:87:a3:
09:66:64:4c:f9:ef:61:16:cf:f4:b0:fd:9d:53:ae:
32:57:37:7b:5d:d9:f4:d4:ed:f0:7c:00:20:9a:e6:
42:58:d2:f9:a5:e3:8e:44:a6:39:ca:d0:21:8b:8e:
51:57:2c:8f:5f:cf:e7:16:00:e2:21:2e:0d:01:61:
7b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:34:C1:04:6D:2E:4F:2A:7C:7A:72:C8:1F:2C:7A:9A:F1:26:1F:E4
X509v3 Authority Key Identifier:
keyid:5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/pzTBBG0uTyp8enLIHyx6mvEmH-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.101.0/24
Signature Algorithm: sha256WithRSAEncryption
20:16:13:a6:84:80:72:88:8a:1f:09:94:8a:99:f2:a6:75:52:
e9:95:e4:95:da:ce:03:56:92:f0:6b:a8:e7:85:7c:14:2f:ef:
b2:ce:b9:65:e5:b3:87:5c:e0:ab:a3:b7:05:b2:de:ec:ea:dc:
b4:29:05:72:42:6d:ce:c8:32:fa:cd:49:29:30:38:f1:05:49:
c4:ba:1d:2d:12:ee:bf:f0:04:f7:bb:68:2d:93:56:0c:d8:f0:
db:23:9e:5e:b2:2a:58:d0:eb:b6:c1:d7:be:e0:dd:06:5f:78:
ce:b3:b6:46:84:38:72:66:14:bb:01:ca:e6:e0:c7:04:4b:d6:
09:d9:07:96:6d:a4:45:aa:e0:ae:e3:32:96:09:ea:1b:b0:c0:
f2:50:0a:e9:da:c2:b9:2c:53:a5:05:1a:4b:fb:c5:49:20:06:
13:c8:f5:4b:b1:a3:97:9b:19:a3:05:2a:ee:65:06:1a:75:81:
95:cd:6d:62:37:ae:38:25:db:c9:fc:4c:f0:e1:75:12:bf:c9:
4d:2a:f8:f4:1b:f9:d4:a4:27:82:fd:ce:28:db:15:1b:0d:a7:
3a:dc:e3:64:cf:bd:af:ba:94:f9:fd:ba:4f:6a:45:6b:c8:e4:
09:6c:20:fb:90:8e:af:28:52:ea:a8:ec:91:24:01:8b:46:f2:
bd:1b:78:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:24:06 2024 by rpki-client on console-fra.rpki-client.org