Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/zWa_Dn5TXWQOP2foD_ZV659_3PQ.roa
File: zWa_Dn5TXWQOP2foD_ZV659_3PQ.roa (raw, json)
Hash identifier: c44vpfIymkYTwFuBaMJqMlTtCJeJNcUs7CihcVOzX3c=
Subject key identifier: CD:66:BF:0E:7E:53:5D:64:0E:3F:67:E8:0F:F6:55:EB:9F:7F:DC:F4
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 018CC8013758EB124336CB0E56B0F520966F
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/zWa_Dn5TXWQOP2foD_ZV659_3PQ.roa
Signing time: Tue 02 Jan 2024 02:29:31 +0000
ROA not before: Tue 02 Jan 2024 02:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212717
IP address blocks: 85.254.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Sep 2024 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:37:58:eb:12:43:36:cb:0e:56:b0:f5:20:96:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 02:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd66bf0e7e535d640e3f67e80ff655eb9f7fdcf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:25:29:d5:50:2a:ed:a3:38:ac:fa:c3:62:2f:
b8:cb:54:55:ca:20:71:5e:3b:d3:9c:7e:bc:d0:37:
5c:97:63:1d:77:30:b1:71:85:0b:1c:a3:59:64:54:
3e:c9:95:77:1d:ce:2a:bc:6e:05:d3:66:a2:19:92:
e3:78:9f:d1:71:33:59:94:e4:fa:71:ae:dc:45:66:
0c:48:3a:5f:5a:af:52:00:80:8b:3c:0d:06:79:6a:
bd:06:7d:a6:f6:e2:d8:62:61:61:87:b5:26:1a:93:
83:63:f7:75:eb:0b:f9:83:70:37:a3:9f:24:13:5c:
1b:e2:69:6c:c6:7f:3f:2e:bf:41:32:a3:bc:5b:b3:
df:57:89:d2:95:b5:82:9b:62:5c:28:a2:84:67:79:
5c:28:13:57:68:77:e5:6c:cd:6c:74:6c:e7:08:37:
cf:76:18:34:d7:77:fc:ff:d8:6d:af:8a:e0:16:c0:
18:63:e3:6e:c7:0a:f4:45:49:98:22:cc:c7:ea:e2:
ef:24:a9:4c:c5:c3:b9:95:2e:73:27:eb:f0:e3:a7:
bd:71:7e:1a:fd:05:2e:c5:d2:26:18:cb:ee:99:be:
13:c3:24:10:0d:50:63:e0:ca:f0:4d:71:43:31:32:
60:28:65:7b:d0:8e:e6:f2:8e:dc:35:4c:a1:a9:2c:
31:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:66:BF:0E:7E:53:5D:64:0E:3F:67:E8:0F:F6:55:EB:9F:7F:DC:F4
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/zWa_Dn5TXWQOP2foD_ZV659_3PQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.28.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:96:f8:00:c9:df:19:8c:64:45:6b:18:76:ea:8d:b7:d7:a1:
49:1b:43:f1:cf:93:ac:f0:26:46:97:e4:85:b6:02:aa:3d:f9:
7d:87:50:76:de:25:8a:29:52:e2:69:4f:99:24:04:cc:4b:1e:
02:b0:ae:6a:c3:41:9a:58:50:4d:01:1d:e0:b1:58:d5:54:be:
c3:80:a0:ee:a9:52:78:25:24:03:7b:0a:f8:dd:71:36:4a:e7:
67:b6:66:a3:f0:3e:97:04:c2:b7:5d:db:1f:48:ae:a1:58:0e:
f0:23:0e:47:5b:d2:2f:98:b0:d1:d5:68:39:1c:00:ed:fd:00:
39:99:97:30:42:9b:63:ed:f6:af:f8:d0:0d:14:8b:6d:9f:7a:
2c:a6:94:9d:af:f4:c4:72:b3:bf:16:95:d8:6d:68:a3:5d:5f:
6f:2f:30:b8:24:f4:5d:69:94:6f:1a:50:b3:66:44:28:c9:d7:
66:c9:41:f5:aa:17:67:72:96:e8:34:e6:7e:a0:8c:ac:a1:4a:
d8:08:f3:51:88:c3:89:78:a5:12:bb:c6:f5:0a:62:c9:74:e5:
b9:a7:96:3b:2d:26:63:08:d0:09:1f:ae:fe:b6:6c:22:e8:cf:
70:7d:c9:ad:d3:df:5c:6f:ee:be:e8:3d:44:25:4a:53:b1:a9:
8f:e5:c6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 21:07:35 2024 by rpki-client on console-ams.rpki-client.org