Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/z5UBgE_XknMP2z6XbS3POeLiHJs.roa
File: z5UBgE_XknMP2z6XbS3POeLiHJs.roa (raw, json)
Hash identifier: xqkdsLRrUFHhZnUjVp7prAWbeRhLnuYiPpOat2Zl/2U=
Subject key identifier: CF:95:01:80:4F:D7:92:73:0F:DB:3E:97:6D:2D:CF:39:E2:E2:1C:9B
Certificate issuer: /CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51
Certificate serial: 018CC26CF4F933AD4504D6021EB1C4788DC0
Authority key identifier: B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/z5UBgE_XknMP2z6XbS3POeLiHJs.roa
Signing time: Mon 01 Jan 2024 00:29:29 +0000
ROA not before: Mon 01 Jan 2024 00:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20634
IP address blocks: 195.234.0.0/23 maxlen: 23
91.207.134.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:f4:f9:33:ad:45:04:d6:02:1e:b1:c4:78:8d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51
Validity
Not Before: Jan 1 00:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf9501804fd792730fdb3e976d2dcf39e2e21c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b8:39:01:9a:4c:2c:78:4e:32:e7:e5:1b:ee:
8d:79:50:94:8e:1f:21:5b:aa:7e:b2:16:83:be:94:
08:2f:f6:16:5e:6b:aa:82:39:74:75:bf:e8:d9:94:
6f:52:58:d0:ac:88:a8:56:58:fb:b3:ce:5e:d0:52:
b9:43:73:e3:e2:a1:c8:36:15:86:5a:d9:20:07:17:
7a:7a:30:e6:b5:58:c8:b2:88:22:54:6c:b9:bb:54:
29:3d:cb:dd:52:42:17:66:28:ca:9b:ff:0a:2b:db:
98:4c:6f:d0:cd:0b:3b:7c:7c:59:1c:eb:fd:01:d4:
29:b3:07:5d:70:ca:ea:5f:d7:2a:48:9e:5b:0d:0c:
d2:10:1b:97:e5:32:04:c7:e4:63:8b:d4:8f:4b:bf:
a9:c3:f4:63:ed:2e:7b:66:08:5d:47:d5:ac:74:7c:
96:42:5b:8d:e0:b2:e8:4e:48:8a:52:7b:20:c2:a6:
ff:cf:bd:d1:bf:1b:ac:0e:a3:f7:c6:e3:61:02:07:
f9:d3:97:07:51:5e:a7:d7:17:f8:c8:1a:25:51:e9:
8f:44:ec:2a:48:1d:77:ea:3a:f3:fa:11:e9:b9:0e:
78:56:74:47:4b:35:78:65:f0:dc:85:e7:16:e2:0f:
ca:0a:b9:b1:ef:11:da:9c:ff:19:54:73:67:e8:f1:
18:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:95:01:80:4F:D7:92:73:0F:DB:3E:97:6D:2D:CF:39:E2:E2:1C:9B
X509v3 Authority Key Identifier:
keyid:B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/z5UBgE_XknMP2z6XbS3POeLiHJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.134.0/23
195.234.0.0/23
Signature Algorithm: sha256WithRSAEncryption
94:8c:30:c9:88:97:04:57:6e:c4:ad:bd:19:66:7b:6f:8e:0a:
ef:b1:9c:f7:3e:2c:ed:ae:65:93:2a:0a:24:fc:d7:30:d7:a7:
14:90:57:31:0f:15:2f:f5:24:8c:37:43:50:d7:2a:eb:b5:dc:
03:b6:95:6a:8a:8b:5a:d8:c9:21:03:e8:8f:53:a3:24:18:28:
31:dd:4d:47:e9:4c:9b:0f:0f:1b:21:08:f5:50:b6:5a:d2:b6:
5c:f6:53:c4:9e:34:47:32:34:b7:47:19:87:1e:42:f3:98:45:
e0:30:5c:14:42:36:86:af:71:80:79:7d:f6:a7:1c:a6:b1:47:
0e:08:b9:94:24:12:c1:17:64:6a:5c:5d:bd:a1:25:c9:50:3e:
9b:82:a7:b6:ab:8c:98:09:e3:c4:b2:46:76:eb:26:e4:62:e6:
78:1d:4c:66:37:75:8c:1c:7e:81:de:2d:62:70:66:97:68:8e:
b4:eb:e8:53:54:e7:b9:05:f7:36:55:ae:c8:7b:eb:74:b2:13:
be:23:b8:f1:97:2e:10:58:b1:e5:4e:3e:e0:78:7a:37:44:59:
50:fe:95:b1:ef:55:1c:75:29:37:51:46:c2:2f:50:33:1a:61:
ef:b9:10:b7:9e:5a:0e:6d:18:7a:d8:13:c6:4b:c9:88:2f:eb:
01:3e:c4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 23:35:35 2024 by rpki-client on console-fra.rpki-client.org