Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/Zc_2xPSWCJaMF2F1bd0u4VSi5pE.roa
File: Zc_2xPSWCJaMF2F1bd0u4VSi5pE.roa (raw, json)
Hash identifier: 41IyngbswRY0cq14ZQHxRc6JxZUdgxExTRUqx46fmaE=
Subject key identifier: 65:CF:F6:C4:F4:96:08:96:8C:17:61:75:6D:DD:2E:E1:54:A2:E6:91
Certificate issuer: /CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Certificate serial: 01909C9DEEC73065FA9C1784D8E8080E190D
Authority key identifier: 1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/Zc_2xPSWCJaMF2F1bd0u4VSi5pE.roa
Signing time: Wed 10 Jul 2024 12:28:34 +0000
ROA not before: Wed 10 Jul 2024 12:28:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215859
IP address blocks: 5.223.0.0/16 maxlen: 24
2a01:4ff:200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 00:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9c:9d:ee:c7:30:65:fa:9c:17:84:d8:e8:08:0e:19:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Validity
Not Before: Jul 10 12:28:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65cff6c4f49608968c1761756ddd2ee154a2e691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:de:27:55:6f:9e:56:7c:a7:a0:f2:a7:4a:a3:
ee:73:3f:02:d5:f1:cb:26:95:d0:d3:48:b2:54:f2:
09:fd:c8:ef:d8:aa:50:78:49:9f:68:2c:80:dd:4a:
56:2e:9a:7d:97:b8:6a:16:76:c5:24:4c:90:6c:90:
c5:30:c7:9b:5c:aa:8c:0b:4b:52:98:4e:b0:89:c3:
48:24:3c:00:f8:35:59:ad:a2:13:2a:c5:64:e9:a4:
5f:56:7a:49:e3:fb:fc:29:38:0a:e6:6b:e3:70:b8:
bb:15:3c:5a:42:b6:71:d9:ce:74:78:57:2d:03:3d:
c3:ee:d4:8f:c6:69:c3:6a:27:a8:9f:76:61:46:2b:
ca:21:8e:21:87:aa:48:91:87:63:46:bd:8d:e0:4c:
df:2a:88:8a:23:f4:f4:eb:6c:76:f1:1a:f8:0e:5c:
ed:a5:59:c3:c6:48:11:0d:04:fa:6b:37:15:83:e1:
e4:a9:77:1b:94:f1:02:45:1f:ab:b2:cf:3d:75:75:
17:23:70:27:e2:b5:0f:00:78:ef:d5:11:f6:33:26:
32:d8:f4:b4:9a:cf:52:fd:2e:1b:8d:2c:9d:fc:01:
19:cc:9a:1e:70:15:29:4d:ba:fd:b9:f6:3c:14:0c:
78:fb:42:95:76:61:8a:8d:e1:d7:c7:3f:70:5e:72:
53:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CF:F6:C4:F4:96:08:96:8C:17:61:75:6D:DD:2E:E1:54:A2:E6:91
X509v3 Authority Key Identifier:
keyid:1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/Zc_2xPSWCJaMF2F1bd0u4VSi5pE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.223.0.0/16
IPv6:
2a01:4ff:200::/40
Signature Algorithm: sha256WithRSAEncryption
c2:a7:9a:b9:ad:2c:e9:3a:58:55:d9:6d:eb:cd:19:05:97:8f:
40:9c:3d:02:0d:bf:9b:3c:7d:5d:7c:47:ee:01:5f:c3:c8:c7:
bd:34:20:f8:a8:f1:60:15:7d:09:79:83:d0:8a:90:60:45:4b:
85:65:af:b0:c3:d2:5f:af:a6:fc:ff:9f:6f:35:f8:89:74:9a:
03:9d:4b:97:ca:97:24:89:51:01:67:2f:c8:b8:4f:83:6d:f5:
96:01:d7:8e:68:e9:6a:13:07:74:3b:a9:c9:c6:a1:13:d0:2d:
d3:49:89:33:10:da:52:33:36:50:3c:e3:bc:78:68:96:c9:af:
f1:6e:1b:57:d3:79:35:16:1e:30:b3:1d:c9:98:a2:42:ac:d2:
48:48:78:30:25:79:18:9b:93:be:0c:aa:94:f2:10:14:1e:62:
7b:0f:94:2c:4a:77:17:d5:67:13:ea:09:1a:d8:7a:0b:d0:27:
04:e4:57:eb:b3:c8:67:a7:46:78:5d:8b:2f:a5:58:56:ef:8d:
e3:34:93:d9:bd:a3:a0:c5:1c:0e:2b:f3:4f:c0:9f:92:f7:e8:
1a:33:b4:76:17:13:d2:d8:28:4b:a0:52:af:22:1f:a1:ef:12:
9d:19:30:7e:21:b7:1e:ac:59:4e:64:d3:68:c9:38:b9:27:9e:
8a:19:f7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:10:29 2024 by rpki-client on console-ams.rpki-client.org