Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/zRMAZlpQj9-sWZyzh3UD_WlhC_I.roa
File: zRMAZlpQj9-sWZyzh3UD_WlhC_I.roa (raw, json)
Hash identifier: ZKPGPq+L1OBq9v6h2DAPGOTCyVlQSPGwpfXT3tCw6ho=
Subject key identifier: CD:13:00:66:5A:50:8F:DF:AC:59:9C:B3:87:75:03:FD:69:61:0B:F2
Certificate issuer: /CN=e260b0a55a87a66e90a7463a01da6414fc034d3d
Certificate serial: 01927BB9E0FD6C7CA7EFB79F9A827F6263E4
Authority key identifier: E2:60:B0:A5:5A:87:A6:6E:90:A7:46:3A:01:DA:64:14:FC:03:4D:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/zRMAZlpQj9-sWZyzh3UD_WlhC_I.roa
Signing time: Fri 11 Oct 2024 13:17:12 +0000
ROA not before: Fri 11 Oct 2024 13:17:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57866
IP address blocks: 176.61.131.0/24 maxlen: 24
176.61.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7b:b9:e0:fd:6c:7c:a7:ef:b7:9f:9a:82:7f:62:63:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e260b0a55a87a66e90a7463a01da6414fc034d3d
Validity
Not Before: Oct 11 13:17:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd1300665a508fdfac599cb3877503fd69610bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:71:b0:93:20:06:e5:d8:38:11:31:f7:bf:f4:
d0:a9:fa:3e:bc:2c:ca:ab:56:bf:a4:68:22:f6:cc:
82:0d:58:ab:6d:20:b6:b1:ba:7a:92:6c:3d:76:29:
90:fc:a6:68:79:92:e8:a8:f2:5c:72:21:87:14:69:
dc:88:4a:bd:96:c9:29:83:bf:d1:da:8d:16:3b:70:
af:7f:20:09:31:68:14:de:65:bf:07:6f:74:4b:9f:
90:bb:a4:04:9e:77:28:c2:bb:9c:12:3f:91:cf:6c:
25:a0:f8:dd:c3:70:ac:96:4c:95:a8:20:1c:8e:39:
37:49:f2:0a:24:26:ac:d2:b0:66:90:33:d3:16:f6:
1b:5b:69:a0:a4:cf:66:e3:b4:60:dc:39:e9:6d:5e:
7b:03:af:6d:2b:c6:cc:75:d0:c1:c3:02:fe:28:c4:
a8:19:81:6d:91:95:35:0e:e4:b4:57:20:60:d2:7c:
9c:c5:cc:5b:03:0d:dc:3e:83:a3:c7:c1:a3:a5:59:
90:d5:7b:d4:18:66:90:f5:2c:61:e6:d3:eb:4d:c1:
42:e9:ee:36:40:42:5f:18:1b:f3:cc:2a:84:bd:86:
5f:ff:d5:c4:04:d6:8a:11:96:49:f4:ba:24:76:e7:
88:c9:a4:70:bf:c6:23:18:49:1f:a9:2b:d5:15:1e:
a6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:13:00:66:5A:50:8F:DF:AC:59:9C:B3:87:75:03:FD:69:61:0B:F2
X509v3 Authority Key Identifier:
keyid:E2:60:B0:A5:5A:87:A6:6E:90:A7:46:3A:01:DA:64:14:FC:03:4D:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/zRMAZlpQj9-sWZyzh3UD_WlhC_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.61.131.0-176.61.132.255
Signature Algorithm: sha256WithRSAEncryption
3d:da:28:b7:be:cb:22:2c:02:e0:90:fc:66:de:8d:d5:bc:fe:
04:3b:ee:a0:56:9d:c4:2b:f4:cf:b2:cc:96:74:7f:3c:bc:48:
e6:b0:01:1f:09:18:92:1a:0f:00:9b:f3:11:ad:56:0c:4a:31:
c6:00:53:e7:ab:1b:b1:2d:72:d6:c1:05:5c:57:48:c4:18:c5:
3b:bd:fd:1a:b3:7d:5a:c4:b0:26:87:63:1b:6d:4d:1a:c5:83:
d6:8e:5a:54:95:c6:ec:aa:9e:20:e1:16:21:ed:98:84:43:b7:
79:1c:f6:5f:65:b5:74:c1:57:ab:bc:07:b4:e0:7e:22:23:84:
c5:b8:d8:ae:99:8b:4e:2e:6d:1b:3e:19:db:ee:30:5f:96:0f:
e5:af:0d:2c:4a:bb:5f:b1:e7:e8:82:c4:89:d5:8c:8f:19:e8:
8a:9f:e7:01:d0:d7:7e:bd:ab:df:93:2f:2b:f1:4d:4d:5c:be:
7b:a0:23:d8:e2:a0:0f:46:90:7b:67:d3:77:de:5c:51:09:ff:
a3:7e:4d:bd:9b:0d:37:08:0f:db:f6:45:8a:77:d0:9d:3d:24:
a9:52:f5:23:81:a0:ab:8a:be:1d:72:3e:1c:71:0d:c8:55:45:
97:12:c7:2d:6f:ac:47:f8:b2:15:52:3c:23:30:af:71:6a:91:
6d:c7:a5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:40:15 2024 by rpki-client on console-ams.rpki-client.org