Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/ZS3pBU6AKFm2Geb9iHlQh875Pag.roa
File: ZS3pBU6AKFm2Geb9iHlQh875Pag.roa (raw, json)
Hash identifier: bC+QmhAFQwG9Q30jvYL0Sj7HzOGldGfbhc3Cfv8d1rw=
Subject key identifier: 65:2D:E9:05:4E:80:28:59:B6:19:E6:FD:88:79:50:87:CE:F9:3D:A8
Certificate issuer: /CN=7475a2c9588fc695d2754283dcd3d123d1f77811
Certificate serial: 018CC3B731F19DB3A1467EEB785291ED1FAD
Authority key identifier: 74:75:A2:C9:58:8F:C6:95:D2:75:42:83:DC:D3:D1:23:D1:F7:78:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/ZS3pBU6AKFm2Geb9iHlQh875Pag.roa
Signing time: Mon 01 Jan 2024 06:30:12 +0000
ROA not before: Mon 01 Jan 2024 06:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39227
IP address blocks: 194.6.192.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:31:f1:9d:b3:a1:46:7e:eb:78:52:91:ed:1f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7475a2c9588fc695d2754283dcd3d123d1f77811
Validity
Not Before: Jan 1 06:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=652de9054e802859b619e6fd88795087cef93da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3a:6a:e0:55:45:97:06:d3:61:44:c4:32:2d:
b3:cf:87:f3:7e:cf:ea:02:ce:2e:eb:97:07:26:c4:
85:7d:97:e3:95:67:57:84:e8:95:6a:c0:49:9e:07:
39:f7:ab:d9:56:8e:fc:f3:ac:86:fc:7f:bb:d0:a3:
bd:dc:b2:46:bd:f1:0d:fd:0f:46:4e:2c:56:fd:d5:
31:56:04:fe:7d:c1:3e:37:bb:ac:92:f9:8e:e5:8c:
06:e8:0c:ce:83:e3:b2:99:c7:a9:ba:e9:27:a9:55:
df:05:6a:33:d3:7b:ff:84:a4:15:2b:f9:b7:cd:f6:
c1:1a:e0:71:ff:67:f5:47:cb:ee:0c:a4:f7:92:4d:
d4:5d:2d:29:38:c1:6d:5c:60:01:5a:83:54:c1:00:
0d:b1:7a:43:7e:a8:73:20:b4:be:32:b7:df:75:41:
b2:f7:9b:b2:b4:49:db:ee:c0:e6:c9:a5:af:1a:e6:
53:dc:13:69:de:92:ae:f4:c8:ba:db:be:39:fd:37:
26:75:56:e5:8a:ec:22:c3:9d:0a:d3:aa:3e:1e:7f:
61:d3:f2:9e:52:09:27:67:f9:01:e0:97:70:54:97:
67:84:88:94:6c:4a:4c:fe:ee:95:40:14:da:fa:1b:
12:4c:c2:50:6a:62:34:ff:8e:2b:d5:5a:cd:7a:6e:
e7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2D:E9:05:4E:80:28:59:B6:19:E6:FD:88:79:50:87:CE:F9:3D:A8
X509v3 Authority Key Identifier:
keyid:74:75:A2:C9:58:8F:C6:95:D2:75:42:83:DC:D3:D1:23:D1:F7:78:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/ZS3pBU6AKFm2Geb9iHlQh875Pag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.192.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:1d:c6:32:24:aa:5f:e7:b8:c0:3a:eb:12:85:78:1c:d3:b7:
4c:a8:4d:57:cb:97:85:88:7f:50:5d:0c:d5:02:7a:b6:28:85:
84:75:c3:81:ad:d0:cf:04:ac:69:6a:e3:a9:a7:03:b5:4a:59:
b4:9d:d7:df:70:42:71:f0:6f:75:4e:90:6d:e4:b5:31:a9:4f:
32:47:71:01:94:e0:9a:03:95:a7:6d:8c:a5:82:b4:c9:2e:7a:
51:23:9d:14:8e:69:2c:26:d3:e2:f3:2b:fd:35:7c:e4:ed:14:
c9:93:3d:1f:a6:a1:f6:c3:8c:b1:12:ae:a0:8a:e5:02:7b:45:
db:d9:99:bf:17:bb:c0:fd:08:3f:6b:01:84:19:af:3f:c2:e1:
2b:29:ee:9d:cd:46:45:f0:b5:7d:30:5d:92:b1:7e:1d:3a:6d:
84:05:ed:3f:45:be:b4:8e:48:28:12:c0:13:d0:04:72:bb:98:
72:1b:ad:cb:a2:53:90:12:47:87:7b:ba:1f:8b:2b:5e:8e:dc:
30:9c:00:4e:70:3f:58:e1:9a:ba:46:30:6c:74:95:15:df:a9:
09:87:da:bd:af:a8:cb:f1:ad:d7:52:d8:d6:b8:78:6b:cf:e6:
a6:95:cc:ef:aa:10:0e:8c:2f:59:98:b0:4d:ce:2e:29:49:23:
8d:22:0c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:13:30 2024 by rpki-client on console-fra.rpki-client.org