Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/ZILEAtgEVV07jhVFMIJtOF39ihg.roa
File: ZILEAtgEVV07jhVFMIJtOF39ihg.roa (raw, json)
Hash identifier: LEFcWOOQpAAaZIXe6hvWqScKMp8hOX4fFXMEjBh/gi8=
Subject key identifier: 64:82:C4:02:D8:04:55:5D:3B:8E:15:45:30:82:6D:38:5D:FD:8A:18
Certificate issuer: /CN=9917f777e71ac34122edb35edd60cf14d75b9ef6
Certificate serial: 018CC80109D6A03671A7CB2B65EEE1BD2D6F
Authority key identifier: 99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/ZILEAtgEVV07jhVFMIJtOF39ihg.roa
Signing time: Tue 02 Jan 2024 02:29:20 +0000
ROA not before: Tue 02 Jan 2024 02:29:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209638
IP address blocks: 185.178.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:09:d6:a0:36:71:a7:cb:2b:65:ee:e1:bd:2d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9917f777e71ac34122edb35edd60cf14d75b9ef6
Validity
Not Before: Jan 2 02:29:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6482c402d804555d3b8e154530826d385dfd8a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3d:fa:b3:40:51:69:cb:0f:f0:67:19:16:85:
b3:08:cb:1f:b9:a0:4c:1e:22:48:f0:9f:4f:ab:20:
4a:69:3c:c2:dc:23:98:89:7d:e0:12:47:a9:ea:19:
6d:21:39:3c:f2:f4:fa:a3:ba:ef:69:b6:70:8e:96:
5b:22:f4:93:db:db:e4:ac:aa:66:f9:4c:e7:97:aa:
90:b2:66:4a:d7:77:99:86:4b:1b:99:f9:5a:ab:d9:
e3:26:22:9c:72:ee:46:00:61:b0:e1:0a:e7:c2:a0:
10:75:28:10:1b:28:53:2f:19:0f:30:ad:ce:3e:60:
e1:66:ba:b8:64:ad:c9:11:22:ef:27:eb:75:0e:4d:
0f:43:c6:99:48:4c:9f:5c:74:ca:36:7d:f0:1a:cb:
d1:7b:4d:25:26:b0:8b:93:bd:2f:48:d6:ad:51:3d:
80:d3:86:2c:54:86:fe:fd:e4:ca:2d:7f:1e:46:00:
c3:ed:e2:50:90:97:48:40:02:5d:c7:f8:33:ec:4c:
22:b5:73:27:21:12:4d:97:d6:c8:0b:0a:35:22:e8:
36:3c:9e:8f:f0:b0:6e:43:50:ca:8c:47:dd:5f:73:
78:73:19:1b:4f:81:1f:b1:ec:86:05:f6:2d:4e:2f:
a3:5f:57:1d:fa:38:30:d4:7d:d8:40:5b:cf:4c:3f:
9f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:82:C4:02:D8:04:55:5D:3B:8E:15:45:30:82:6D:38:5D:FD:8A:18
X509v3 Authority Key Identifier:
keyid:99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/ZILEAtgEVV07jhVFMIJtOF39ihg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.107.0/24
Signature Algorithm: sha256WithRSAEncryption
51:d5:84:4e:08:0d:97:c8:83:d1:8c:b5:58:1a:97:03:56:be:
2e:90:10:ca:59:4a:32:27:1f:ac:4f:ef:1a:a8:74:9f:da:db:
63:43:10:f0:6e:6b:c3:a8:dc:4a:2b:35:f8:16:6e:32:32:0e:
12:48:8c:62:75:17:ec:53:1f:07:c8:58:49:15:d9:a0:1b:30:
48:ef:09:cf:b2:0b:ad:65:3a:7e:16:a5:71:4a:c5:95:7e:49:
6b:2e:34:7d:ed:b6:96:68:15:50:2e:33:b4:11:3b:bc:3a:b6:
74:70:a5:c5:70:72:f3:c7:ce:62:52:e6:f2:30:da:83:b4:fe:
fa:87:58:b6:46:6d:01:c1:e2:7a:a1:21:6a:69:47:a3:77:2d:
51:02:05:2f:7d:91:fd:31:17:37:68:68:91:0a:44:ad:37:2f:
e0:45:d0:48:86:39:18:d4:83:ce:7f:a5:38:8e:90:a6:d1:2e:
a2:22:e0:35:86:8b:c2:dd:e4:5b:e6:24:3b:29:64:dd:23:16:
fd:33:74:6f:c2:58:2b:fe:43:e6:15:77:a6:ce:b1:42:c6:8b:
14:6f:e1:3d:8f:00:d6:f7:73:b1:81:44:bb:83:31:d2:01:ec:
b4:3d:12:45:f0:6d:86:ba:69:3a:c8:7c:35:56:8f:17:e1:47:
f1:f4:43:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:15:17 2024 by rpki-client on console-fra.rpki-client.org