Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/z76deyx9HPCatONSZKlsuHewmHU.roa
File: z76deyx9HPCatONSZKlsuHewmHU.roa (raw, json)
Hash identifier: y730NWVqLVkgwebHhrknpGGtDPlrITuEzPr23Dbgu9c=
Subject key identifier: CF:BE:9D:7B:2C:7D:1C:F0:9A:B4:E3:52:64:A9:6C:B8:77:B0:98:75
Certificate issuer: /CN=320b24a740f2e61632050adc146c1ee6a3e686c5
Certificate serial: 018CCA29D8359EDB514C34380F85E1E5702C
Authority key identifier: 32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/z76deyx9HPCatONSZKlsuHewmHU.roa
Signing time: Tue 02 Jan 2024 12:33:09 +0000
ROA not before: Tue 02 Jan 2024 12:33:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8605
IP address blocks: 5.179.0.0/20 maxlen: 20
5.179.16.0/21 maxlen: 21
5.179.24.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:d8:35:9e:db:51:4c:34:38:0f:85:e1:e5:70:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320b24a740f2e61632050adc146c1ee6a3e686c5
Validity
Not Before: Jan 2 12:33:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cfbe9d7b2c7d1cf09ab4e35264a96cb877b09875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:aa:75:ff:03:7a:1b:ae:09:2a:12:c8:27:e4:
8b:64:5c:84:79:86:92:d8:71:ab:63:37:db:34:6e:
37:e9:23:5d:63:cc:da:ea:8b:c2:60:06:0b:8b:e3:
b4:ae:7d:85:1d:46:bb:58:46:1a:1d:d6:53:59:4d:
ca:a3:e5:cb:4f:ee:2d:e8:d2:f8:85:81:1c:29:84:
34:85:61:9b:71:0b:9c:5d:f4:c6:29:2b:c1:99:42:
75:54:36:b3:0f:4f:f4:af:68:8b:7b:6d:e4:bd:a3:
a3:bf:6e:7d:bc:5b:3a:aa:2a:03:b9:91:63:92:a1:
8a:18:9f:b4:3f:ee:ef:85:8c:db:55:af:29:6c:fb:
e7:bd:65:d9:e7:c9:bd:3a:18:9c:83:6e:86:9a:26:
a3:c7:0c:95:79:02:64:32:2a:b4:29:8a:73:5e:56:
1b:4c:81:f0:e8:ea:3a:34:36:7f:5a:37:f8:99:0b:
34:12:54:5f:85:52:a4:ca:f3:df:3f:a2:e1:de:87:
8d:f3:2e:f1:c7:34:c1:90:15:b0:eb:f2:fe:84:a8:
df:ff:7e:d0:ff:a5:e1:cb:94:37:7a:19:a8:f1:b0:
30:42:26:d0:50:54:16:ec:a6:37:4f:5f:e8:00:96:
dc:65:40:0d:fa:58:35:ee:8b:0f:1b:39:61:0c:b0:
cf:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BE:9D:7B:2C:7D:1C:F0:9A:B4:E3:52:64:A9:6C:B8:77:B0:98:75
X509v3 Authority Key Identifier:
keyid:32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/z76deyx9HPCatONSZKlsuHewmHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.179.0.0-5.179.27.255
Signature Algorithm: sha256WithRSAEncryption
65:f7:06:21:8a:f3:25:dc:98:14:ed:f9:0f:ff:ad:d4:5b:ad:
af:30:57:97:93:12:73:1f:d4:84:dd:1e:91:ef:af:1f:b7:0f:
02:de:a1:78:c9:36:45:91:da:04:38:92:26:29:84:57:27:fd:
fc:5b:dd:6b:70:61:e5:f9:af:f4:57:1d:b4:01:96:95:d4:41:
1b:fa:02:e6:9b:a9:dc:31:aa:60:d1:e9:1f:cb:a4:c2:8a:b2:
88:16:15:96:c5:99:51:48:12:c3:92:4b:4c:ce:ce:e3:e3:c7:
18:ea:24:68:ae:7d:7b:85:f2:64:01:bf:55:68:f7:fb:63:43:
f2:fc:12:d3:29:7f:2d:ad:38:44:ca:ab:b5:65:24:d0:b3:d6:
1f:28:b0:f5:ec:13:1e:3a:96:68:09:66:ec:6b:71:b2:da:e8:
ca:c9:5c:0b:89:06:c0:37:60:62:8c:41:cb:1b:2d:b3:d2:aa:
73:f1:d3:9d:ee:9d:ae:54:b5:f7:c4:78:d9:c7:0c:76:3c:4a:
42:3c:1a:b3:06:48:c6:55:e3:38:58:4e:d6:37:1d:42:0e:ee:
94:57:ac:a7:21:c6:06:dc:78:58:54:0c:b7:a3:ab:f8:2e:9c:
b6:33:2a:3e:bc:0e:e8:6b:3f:66:18:c6:46:10:3a:cb:30:7d:
bb:c4:bb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:35:21 2024 by rpki-client on console-fra.rpki-client.org