Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/Zs2O9LS7c2plZGZGRqqkpsmW8v8.roa
File: Zs2O9LS7c2plZGZGRqqkpsmW8v8.roa (raw, json)
Hash identifier: UEcnE88KEotGmtiZXVGvg5ratRqqM3Yzu5+iGXwXYBY=
Subject key identifier: 66:CD:8E:F4:B4:BB:73:6A:65:64:66:46:46:AA:A4:A6:C9:96:F2:FF
Certificate issuer: /CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Certificate serial: 018E512D935A89D4366905473556D61EECF2
Authority key identifier: 0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/Zs2O9LS7c2plZGZGRqqkpsmW8v8.roa
Signing time: Mon 18 Mar 2024 10:48:45 +0000
ROA not before: Mon 18 Mar 2024 10:48:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35700
IP address blocks: 212.142.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:51:2d:93:5a:89:d4:36:69:05:47:35:56:d6:1e:ec:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Validity
Not Before: Mar 18 10:48:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66cd8ef4b4bb736a6564664646aaa4a6c996f2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:50:4f:67:d0:0e:7d:b0:97:2e:35:94:43:82:
63:41:50:f6:b4:26:07:80:ce:b9:d5:02:1c:ee:6e:
27:a8:76:54:0d:2d:f3:1f:a4:ed:79:68:05:1b:fb:
29:ef:51:42:aa:8c:65:1e:68:6f:16:5b:5a:ef:bf:
67:98:1b:c0:3a:be:5a:d6:6a:b6:9f:f9:2b:0c:65:
29:8f:49:89:30:cd:ff:45:4a:a6:c5:8b:d4:3d:d3:
c8:11:48:d8:d9:5f:fb:c0:76:96:1b:b1:dc:95:58:
34:1a:74:3e:6f:43:72:2c:1f:51:cd:e5:84:79:82:
87:91:a6:0e:bc:eb:b4:b4:bc:1c:cb:9e:21:99:c1:
fc:62:af:e0:4c:e8:e3:03:8b:b1:2a:c0:cd:99:11:
3c:63:73:67:26:09:a2:59:4b:92:c6:a1:43:43:81:
46:3f:63:dd:84:a8:12:c9:66:5b:1f:35:bf:ab:bc:
19:b8:27:df:df:e5:df:36:5c:0f:9b:e1:b3:5f:dc:
25:8b:c0:fa:2d:aa:f0:fb:00:30:cf:3e:4b:94:7a:
40:1d:25:d8:0d:03:97:69:45:97:cc:9b:76:71:e3:
26:c0:64:8a:27:69:63:48:91:58:84:6a:f6:f6:61:
5a:06:c8:f8:f2:60:52:b1:c6:96:42:50:48:a8:f2:
21:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CD:8E:F4:B4:BB:73:6A:65:64:66:46:46:AA:A4:A6:C9:96:F2:FF
X509v3 Authority Key Identifier:
keyid:0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/Zs2O9LS7c2plZGZGRqqkpsmW8v8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.142.161.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:0b:c3:5c:20:0f:88:39:db:ca:88:3f:a2:95:1f:a1:47:37:
06:c6:3a:cf:1c:fb:c0:98:8c:04:bb:7f:2e:6b:2d:d3:03:a5:
fa:0c:73:f7:65:d9:cf:a7:c6:98:00:31:d4:e5:9d:22:a8:e5:
56:18:7a:ff:57:60:4a:9e:b6:ea:01:40:2f:bd:de:ef:67:f4:
54:61:ef:5a:16:12:ae:6c:f7:d4:93:11:d9:c4:8c:e1:85:11:
f1:f5:a2:30:fa:cc:5a:0c:4d:12:86:56:d9:15:b3:b5:95:a3:
72:d7:02:24:20:0f:88:03:d0:18:80:a9:f8:12:60:10:1d:8b:
10:3c:e8:59:0c:39:bb:8c:8d:6a:4e:2c:32:7a:ff:e0:89:1c:
ce:cc:a9:61:fa:50:b5:9a:2d:91:85:40:ab:ee:a2:97:b2:2a:
37:b6:c7:b7:21:45:76:74:c3:cb:8c:88:2a:89:4c:bb:c0:85:
55:19:e7:54:71:f6:63:42:ea:7f:4d:4a:94:03:43:00:ca:ec:
0b:23:4f:43:27:5b:0e:5c:17:7d:14:ff:74:41:f6:73:15:46:
ac:b7:1c:a5:7a:f1:0b:d2:60:33:8a:63:f7:1a:52:3e:93:c0:
ba:d6:21:cf:99:af:11:6c:90:ec:03:7c:5a:a1:a0:18:d5:2a:
f6:17:94:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:08:28 2024 by rpki-client on console-ams.rpki-client.org