Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/ZgjnylyczmRg-pDoZxwapCTfOKY.roa
File: ZgjnylyczmRg-pDoZxwapCTfOKY.roa (raw, json)
Hash identifier: rW5ifipi+6TORvn8/wB8ij/SDkuNuSI4d841X9LPJQE=
Subject key identifier: 66:08:E7:CA:5C:9C:CE:64:60:FA:90:E8:67:1C:1A:A4:24:DF:38:A6
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 018CC649D202A052E9FCFE8361F53E4A81A2
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/ZgjnylyczmRg-pDoZxwapCTfOKY.roa
Signing time: Mon 01 Jan 2024 18:29:35 +0000
ROA not before: Mon 01 Jan 2024 18:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3187
IP address blocks: 92.247.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 06:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:d2:02:a0:52:e9:fc:fe:83:61:f5:3e:4a:81:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 1 18:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6608e7ca5c9cce6460fa90e8671c1aa424df38a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:02:39:ad:cb:8e:5d:bf:42:4b:0e:c7:60:b9:
fb:05:5e:8b:47:09:ee:9c:57:47:dd:9c:40:66:d5:
58:f7:49:53:7b:62:43:3c:fd:b9:a1:61:0f:ac:a1:
47:5a:e5:f3:28:4b:89:58:b7:ac:31:00:81:8f:72:
3d:b2:5b:24:7d:e8:55:7f:f4:02:b7:59:d5:c2:51:
a1:fc:16:e2:bf:2a:3d:65:99:b4:4d:e1:79:4f:0f:
65:d0:6b:54:32:8d:01:63:eb:37:d0:66:48:8d:85:
dd:17:5b:86:c1:d4:6a:3f:26:b8:da:b5:4c:fd:d9:
f4:e5:0a:bd:b0:26:ba:2f:1d:ff:db:52:0d:71:f3:
c7:e4:36:f4:b8:d4:76:11:17:e8:fa:d7:cf:76:0e:
9f:e6:27:61:19:1b:c4:57:39:c6:29:3f:0d:49:66:
46:fd:34:e5:0b:1c:bb:85:35:65:64:7a:6b:14:d4:
8d:fd:59:a5:19:86:f0:dd:62:99:1f:72:0f:53:a5:
1a:d0:e6:1d:dd:c7:ea:56:45:9e:82:20:40:8c:89:
7d:20:95:26:bc:51:6f:94:b0:29:77:31:f7:f1:8e:
6f:4e:61:a2:6a:f8:ba:62:07:ff:5a:b0:88:f0:16:
83:96:7a:37:5c:09:32:3f:14:d3:ee:69:c8:a0:3b:
1c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:08:E7:CA:5C:9C:CE:64:60:FA:90:E8:67:1C:1A:A4:24:DF:38:A6
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/ZgjnylyczmRg-pDoZxwapCTfOKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.247.184.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:5d:77:8f:67:56:ab:23:1b:ff:30:bd:88:03:67:43:ed:1e:
63:e3:af:ed:45:3b:fd:bd:29:c9:6f:98:a9:c9:a0:6a:a1:77:
80:36:9a:bc:67:71:c5:c0:be:a9:db:de:fe:c3:41:00:6b:90:
95:14:c6:ac:6a:2c:f3:09:e3:4a:01:a6:da:29:98:bf:62:29:
73:00:e3:59:ab:c3:3c:fa:b5:a2:44:15:21:2f:02:8b:54:23:
eb:06:2d:b7:fc:01:87:2a:3d:17:40:57:3c:42:b9:0d:20:f3:
51:bd:32:90:e9:56:9d:2d:e9:db:de:c3:7d:75:6f:0b:85:47:
0b:e3:f0:ab:0c:c0:35:14:4e:97:80:9a:f9:c0:43:4d:f8:76:
28:75:61:b0:d8:9e:b8:c0:be:82:0e:f8:ee:56:a2:a5:76:2f:
b6:78:03:8c:65:ec:e5:f9:98:f6:6e:12:aa:48:6e:8a:ab:98:
01:db:41:cc:7d:3c:d2:42:18:8a:0a:ae:71:16:cb:a7:dd:81:
67:4d:f8:c5:87:3b:02:38:ad:d9:81:31:34:ab:7c:10:f7:a4:
b9:58:ba:e0:98:80:13:ef:08:94:6a:70:b9:a5:e8:0b:40:69:
74:18:4e:fe:8b:5b:f0:59:27:bf:54:54:db:d4:8b:cb:b7:02:
0c:f8:44:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 14:59:05 2024 by rpki-client on console-fra.rpki-client.org