Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/zPHo0d6hbp1VthZmHYhP0gIaWss.roa
File: zPHo0d6hbp1VthZmHYhP0gIaWss.roa (raw, json)
Hash identifier: j9CaBLR6FlYWzy0t0B0dBOpSzBO0YQZNonessStfPg0=
Subject key identifier: CC:F1:E8:D1:DE:A1:6E:9D:55:B6:16:66:1D:88:4F:D2:02:1A:5A:CB
Certificate issuer: /CN=ce7cacfa735ceeafdd2a214c09ee72469425250e
Certificate serial: 018D1225A8E0946E476B73ECAE9F13C4EC15
Authority key identifier: CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/zPHo0d6hbp1VthZmHYhP0gIaWss.roa
Signing time: Tue 16 Jan 2024 12:01:14 +0000
ROA not before: Tue 16 Jan 2024 12:01:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201089
IP address blocks: 193.58.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:12:25:a8:e0:94:6e:47:6b:73:ec:ae:9f:13:c4:ec:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce7cacfa735ceeafdd2a214c09ee72469425250e
Validity
Not Before: Jan 16 12:01:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ccf1e8d1dea16e9d55b616661d884fd2021a5acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5f:5d:1e:17:17:eb:7e:bf:f4:aa:d4:aa:d0:
07:c4:3d:ab:67:d9:e2:0e:5e:06:06:56:a0:8b:d0:
d4:4f:47:56:1e:06:d2:20:8a:0c:49:30:c9:89:fe:
b0:86:2f:01:16:ac:ea:9a:b7:de:9b:29:82:38:06:
03:0f:28:ad:aa:40:da:c2:ce:3a:ef:97:7b:3c:e7:
a1:c0:e4:96:7f:5c:31:7d:41:09:e6:d6:98:61:50:
e4:50:1f:65:dd:e3:e2:7f:fe:ce:93:1e:02:f3:ab:
a4:0e:3d:ea:43:20:5d:b2:26:4d:75:ab:82:a7:ad:
1b:8b:9a:aa:58:51:fd:42:7f:22:e2:09:35:5d:1b:
2f:fa:92:5d:49:f3:71:53:69:35:7f:80:9f:40:00:
e9:bf:16:7d:4c:b6:38:61:b0:e8:52:51:80:4f:94:
9d:0a:03:8a:b1:fa:ed:57:a1:72:72:0b:57:2e:18:
2f:9b:56:d6:85:14:a3:a3:30:d0:2c:02:b2:b4:ce:
34:57:6e:f5:44:01:b0:86:80:d4:73:41:4c:fa:b1:
3e:3c:6b:80:b8:d4:fc:f1:7e:3d:4d:a9:bd:f3:7f:
95:7a:eb:bd:d2:e1:00:f4:99:2d:12:3a:3c:e2:f4:
44:3c:0e:a4:f4:62:5a:c9:d0:86:8c:61:08:3b:40:
ff:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F1:E8:D1:DE:A1:6E:9D:55:B6:16:66:1D:88:4F:D2:02:1A:5A:CB
X509v3 Authority Key Identifier:
keyid:CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/zPHo0d6hbp1VthZmHYhP0gIaWss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.117.0/24
Signature Algorithm: sha256WithRSAEncryption
52:e1:ac:d5:53:c6:50:7d:c5:39:8a:e8:7e:de:27:8e:09:4c:
1d:98:c0:12:73:91:b4:20:a4:ed:d0:32:42:99:e1:a6:e4:c2:
c4:ca:85:65:99:e4:32:75:ff:ee:10:8e:b7:06:b9:6d:48:75:
2b:ed:4b:93:47:d8:00:8b:9b:59:b2:a4:53:bb:4d:1e:fb:9a:
0c:fd:5d:ac:b0:81:74:33:bf:47:72:70:9d:f2:49:67:94:d3:
58:9d:85:1a:bc:af:a2:89:38:a5:51:25:57:d5:2b:46:b2:e0:
f4:e9:e9:ae:ab:33:7d:1e:04:2f:ff:54:53:1d:57:18:3d:e6:
fc:8a:95:d4:51:aa:c6:1f:43:23:24:e1:b9:d2:43:aa:eb:7a:
a7:69:70:82:03:a0:8d:2f:0f:79:ed:a3:e3:0f:41:2c:9f:8a:
51:60:d2:33:d5:09:e3:0d:d2:70:b9:c1:f2:c5:36:df:17:4c:
30:aa:78:a0:23:72:de:d8:7f:7e:7b:97:72:62:94:d9:c2:e9:
0b:54:af:5c:c2:0b:eb:5d:f0:38:3d:4e:38:19:f1:92:2b:89:
37:69:6a:68:2d:86:c8:bb:e3:43:52:55:16:ea:2c:e1:e0:41:
b6:79:bc:2e:a7:ea:af:16:f0:49:e8:02:02:78:a6:9d:4c:44:
42:10:ba:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:30:08 2024 by rpki-client on console-fra.rpki-client.org