Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/zbmP3kvVa0m65poGL2dw5DpPgcU.roa
File: zbmP3kvVa0m65poGL2dw5DpPgcU.roa (raw, json)
Hash identifier: GTwY24T5THZrk4g/vPYalzL3LCatHL8UbyBEpGP8P2Q=
Subject key identifier: CD:B9:8F:DE:4B:D5:6B:49:BA:E6:9A:06:2F:67:70:E4:3A:4F:81:C5
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 018CC6B832AA49A6AC78392E13F012C93FB9
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/zbmP3kvVa0m65poGL2dw5DpPgcU.roa
Signing time: Mon 01 Jan 2024 20:30:09 +0000
ROA not before: Mon 01 Jan 2024 20:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56322
IP address blocks: 78.142.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:32:aa:49:a6:ac:78:39:2e:13:f0:12:c9:3f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Jan 1 20:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cdb98fde4bd56b49bae69a062f6770e43a4f81c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:99:cd:be:53:70:76:cc:62:19:98:69:2b:ca:
c6:2b:bc:6d:e5:f1:03:2c:bd:96:64:41:e8:76:0b:
b4:99:15:7c:51:85:1a:16:e4:f6:13:77:e7:59:a9:
56:34:46:7a:c8:7e:36:f7:3e:20:03:0e:50:e6:2b:
32:fc:28:ad:ed:65:88:51:14:68:f3:0f:a6:b5:04:
71:ad:55:d1:17:ac:f2:28:89:29:52:6b:2f:92:87:
03:ce:3d:09:ed:53:56:26:a6:c0:df:b4:52:61:f9:
87:94:84:ae:41:f9:88:c2:9b:05:f9:d5:e2:3b:90:
cb:fa:a6:59:10:ab:f9:49:5a:a9:c3:5d:c9:88:b3:
2a:28:af:d7:66:62:9c:fe:d8:94:f2:fe:a7:9a:97:
b6:27:12:e3:df:0f:37:64:82:1f:dd:85:b5:fe:ce:
59:bc:95:98:ac:e9:0b:9d:36:b5:c3:5f:2d:44:af:
41:22:d7:e3:c3:20:99:03:17:ac:76:aa:23:af:98:
d2:ee:cb:fb:cf:42:f9:81:cf:84:e9:2c:f2:d2:63:
a1:53:30:d4:72:5c:dd:c0:02:a4:f0:7e:e9:71:eb:
6b:bc:e2:ec:bd:bf:6d:22:07:bc:90:f8:29:0e:d7:
f0:e0:18:50:01:cf:e8:b9:4b:12:42:bf:20:be:a8:
00:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B9:8F:DE:4B:D5:6B:49:BA:E6:9A:06:2F:67:70:E4:3A:4F:81:C5
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/zbmP3kvVa0m65poGL2dw5DpPgcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.217.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:4e:b2:b5:2b:62:ba:9b:46:34:e3:76:b6:3a:b1:19:47:5c:
02:48:52:1d:ea:8f:cb:ee:f8:6c:31:22:4e:b2:eb:50:1c:3e:
c2:fc:0b:36:59:9b:a4:7e:ae:ca:95:e4:42:49:e5:eb:26:1f:
66:9c:ec:78:a7:ff:a2:98:00:b4:a6:09:42:2d:cc:2a:1f:94:
d1:69:5e:f0:a2:25:46:0d:40:fc:ea:e3:22:c2:3e:46:5e:d7:
5a:22:71:a3:ae:74:ac:26:83:06:8f:5d:ad:0b:9a:1b:90:1d:
c2:6d:72:1c:d9:45:03:5c:a7:8c:9f:0d:e6:b5:3f:0d:0f:90:
1c:68:78:16:3b:19:78:2f:70:9a:29:b1:d3:b9:38:2b:68:cb:
bc:45:19:1b:35:29:35:92:35:40:c6:3e:89:be:fd:e3:e2:fb:
f4:41:6c:ae:b6:86:0b:82:62:a5:b7:ff:f3:b8:c7:88:a3:5d:
13:2e:68:e7:fd:d1:9b:9b:f8:67:41:ac:36:36:25:87:be:bb:
da:51:2c:07:55:9c:fb:a4:0e:48:b9:35:f5:da:c2:7d:78:7a:
bf:f2:68:85:69:90:52:3f:ae:71:42:f6:9e:ba:c2:89:34:82:
1d:46:8f:5f:25:9f:f6:25:22:5f:52:e2:1e:f4:8d:6f:9f:b1:
a4:8a:6a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:56:06 2024 by rpki-client on console-ams.rpki-client.org