Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/ztSmlicWeacnE5d68BiZDKbSZXk.roa
File: ztSmlicWeacnE5d68BiZDKbSZXk.roa (raw, json)
Hash identifier: p4rL2jvV7ycwfor4xZKWd42IBIhEnwsO+Y2Bdh7lRCA=
Subject key identifier: CE:D4:A6:96:27:16:79:A7:27:13:97:7A:F0:18:99:0C:A6:D2:65:79
Certificate issuer: /CN=6284cfa7844340237fe59a3825b54f3f77ed8532
Certificate serial: 01924EFB5C7DA24D67C460BDB2160A1B7934
Authority key identifier: 62:84:CF:A7:84:43:40:23:7F:E5:9A:38:25:B5:4F:3F:77:ED:85:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/ztSmlicWeacnE5d68BiZDKbSZXk.roa
Signing time: Wed 02 Oct 2024 20:45:48 +0000
ROA not before: Wed 02 Oct 2024 20:45:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49659
IP address blocks: 185.60.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4e:fb:5c:7d:a2:4d:67:c4:60:bd:b2:16:0a:1b:79:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6284cfa7844340237fe59a3825b54f3f77ed8532
Validity
Not Before: Oct 2 20:45:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ced4a696271679a72713977af018990ca6d26579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ba:90:af:0b:5b:42:b6:89:f1:3c:91:0a:35:
73:67:6c:6a:ee:60:d5:c4:d6:50:a1:3c:60:d6:7f:
e1:a2:fe:34:e9:49:58:e9:62:1f:29:4b:05:76:cd:
3e:9a:5e:90:ff:b8:12:90:ae:ca:f3:66:76:9f:6e:
84:e7:36:0d:73:8f:16:f7:36:3c:f7:20:4a:fc:86:
63:9a:db:70:e0:8b:59:84:d3:f9:2b:4e:da:b3:8e:
d8:97:56:cf:b2:fd:8e:0c:a1:d6:78:c5:75:83:e3:
3a:bb:30:a8:07:eb:f7:b9:d7:11:b5:8e:ed:ed:37:
8b:a7:78:5c:2f:f3:1e:c6:0c:38:72:7e:77:79:44:
5e:fd:00:48:db:da:0c:3a:90:5e:82:2f:5a:e3:b3:
99:5e:61:05:61:e8:c1:a5:3a:75:19:f7:66:d6:c0:
06:d9:cf:02:e5:86:be:8b:d0:f2:84:99:0e:94:7f:
5c:39:01:ad:c8:07:d8:5f:1b:25:58:00:d1:0c:57:
60:f8:0c:b4:b4:37:b6:18:38:40:42:b0:f8:c9:e7:
16:ce:1e:35:39:64:e7:e8:ac:cf:e3:eb:d4:39:9d:
23:ce:bf:73:f3:45:69:49:38:8d:fd:e1:c4:3a:a7:
64:b0:6a:a6:7f:55:58:ef:59:4f:4e:30:81:e3:6b:
1f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D4:A6:96:27:16:79:A7:27:13:97:7A:F0:18:99:0C:A6:D2:65:79
X509v3 Authority Key Identifier:
keyid:62:84:CF:A7:84:43:40:23:7F:E5:9A:38:25:B5:4F:3F:77:ED:85:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/ztSmlicWeacnE5d68BiZDKbSZXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.119.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:46:d7:8f:0b:0b:0b:12:75:f6:32:6b:59:5a:f2:28:85:0d:
76:5d:10:c3:39:55:86:cb:02:d3:5a:18:d4:59:8a:8a:8b:2f:
a7:44:a3:8a:95:30:28:f0:00:af:97:59:41:4d:74:06:93:c5:
0d:99:95:c8:e9:32:76:8b:30:8b:48:2f:f0:45:89:39:40:52:
62:ad:de:d4:9a:46:ae:0d:69:7a:78:2f:32:b3:c1:aa:08:d4:
04:65:04:4f:16:5a:03:6d:5e:ca:16:8c:f3:bc:78:b2:f8:d5:
6b:e5:14:0f:b7:50:ec:b6:5c:f0:e0:b8:72:23:3a:1d:7c:76:
e8:33:cd:be:10:4f:36:0d:5d:0b:44:44:44:f3:a0:0f:56:05:
13:9f:b1:f6:4b:08:41:4f:8d:7e:d1:1e:95:ce:70:60:2c:be:
82:56:d7:30:e6:01:84:17:d0:2c:40:29:96:7e:36:e6:ce:f0:
e8:23:83:53:83:5d:06:ec:be:b3:80:ae:74:17:54:97:35:b1:
13:39:ba:24:72:7e:2c:b2:9c:7b:98:61:8b:99:8d:68:90:de:
e6:76:25:e2:d4:0a:36:60:eb:77:d2:1b:9f:bd:dc:08:61:b1:
54:55:45:9f:91:7d:74:8d:2e:2a:40:0e:09:a9:02:a0:35:58:
2f:35:ef:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:32:05 2024 by rpki-client on console-fra.rpki-client.org