Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/zENQbZh_03kITrQzJx6ie9cuR18.roa
File: zENQbZh_03kITrQzJx6ie9cuR18.roa (raw, json)
Hash identifier: 9fpWlYEXMcONd/tMbgixcMuT7gpjVU21MBjiMCmUcz0=
Subject key identifier: CC:43:50:6D:98:7F:D3:79:08:4E:B4:33:27:1E:A2:7B:D7:2E:47:5F
Certificate issuer: /CN=fde1afb55d8bb3dff1f0fe6306f3ef2079585aad
Certificate serial: 018CC2DB0B5A8B05F7AB5EED1FFED8063A1C
Authority key identifier: FD:E1:AF:B5:5D:8B:B3:DF:F1:F0:FE:63:06:F3:EF:20:79:58:5A:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/zENQbZh_03kITrQzJx6ie9cuR18.roa
Signing time: Mon 01 Jan 2024 02:29:44 +0000
ROA not before: Mon 01 Jan 2024 02:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41064
IP address blocks: 91.203.184.0/22 maxlen: 22
193.93.124.0/22 maxlen: 22
2001:678:bc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:0b:5a:8b:05:f7:ab:5e:ed:1f:fe:d8:06:3a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde1afb55d8bb3dff1f0fe6306f3ef2079585aad
Validity
Not Before: Jan 1 02:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc43506d987fd379084eb433271ea27bd72e475f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d9:44:d9:8e:f5:35:20:15:17:2f:0a:64:96:
e9:25:47:62:24:79:01:a5:a4:4f:9d:6e:83:97:4b:
37:b0:0e:1f:44:db:72:ea:22:2b:7a:2d:c0:00:28:
22:ca:f4:9e:3d:40:fe:11:7e:ed:02:72:07:a6:81:
a7:36:da:05:d9:80:20:3a:d4:bc:80:55:59:d7:8f:
06:19:da:6c:55:08:da:42:a1:4e:7f:82:4a:b5:d0:
b2:f8:cc:a3:2e:29:93:85:90:a5:7b:92:14:cb:be:
7d:49:fd:f1:ce:36:86:cd:6e:91:ee:e5:67:bf:e4:
21:88:46:ca:74:be:cc:95:c1:e3:2b:41:a0:ee:54:
dd:fa:01:02:76:02:3d:13:a6:d9:75:9b:db:23:21:
e9:bb:ab:a5:da:74:a8:5e:5f:7f:e2:bf:8a:e5:a7:
58:28:70:41:43:56:89:e6:ad:e6:02:be:3c:06:34:
63:27:04:54:bf:9e:80:93:a1:30:5e:e1:5d:af:3e:
cc:ec:a3:d5:fd:2c:df:44:ee:b8:82:a4:ce:58:69:
ef:f0:6e:3f:df:e0:24:c3:25:fb:ee:10:de:5b:17:
7d:f1:55:39:e3:a6:46:30:12:0b:7b:37:35:df:fd:
6e:16:86:1d:2d:16:32:9d:b4:61:6b:14:2d:45:23:
dd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:43:50:6D:98:7F:D3:79:08:4E:B4:33:27:1E:A2:7B:D7:2E:47:5F
X509v3 Authority Key Identifier:
keyid:FD:E1:AF:B5:5D:8B:B3:DF:F1:F0:FE:63:06:F3:EF:20:79:58:5A:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/zENQbZh_03kITrQzJx6ie9cuR18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ed5ce7-2e2a-4e0e-99d2-1962c1d8cbb3/1/_eGvtV2Ls9_x8P5jBvPvIHlYWq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.184.0/22
193.93.124.0/22
IPv6:
2001:678:bc0::/48
Signature Algorithm: sha256WithRSAEncryption
74:ba:1a:df:3d:4a:37:c7:cf:96:69:53:53:07:3a:c2:f3:2a:
34:8e:91:a8:c6:48:3b:dc:df:f7:52:b0:2a:37:54:d4:c8:e8:
95:ae:68:75:ba:5e:05:71:a7:6d:49:c4:08:2d:ec:dc:03:e9:
d3:00:bb:1b:bb:b5:a5:f8:02:da:c4:93:e8:92:92:53:88:38:
6d:cc:1d:ef:3d:cb:4c:83:ba:0b:4a:3d:45:6a:b3:58:5f:e1:
ce:ce:57:58:23:6b:71:f3:7e:ce:42:54:08:ee:38:e0:94:89:
1a:2a:a2:55:4d:24:b7:9f:42:82:38:65:e7:c3:9e:64:d8:89:
aa:f4:e8:76:fe:74:09:04:7d:6f:8d:a5:7e:9d:50:e8:59:67:
6b:88:e5:ea:b1:56:56:1e:35:a5:bd:03:c4:d0:12:28:7f:1c:
c8:f9:8a:48:17:5c:9b:ab:23:21:ef:3d:2f:24:8c:8c:ce:7e:
c3:c6:31:dd:f1:1f:a0:5f:17:e0:9c:7c:a6:f8:f9:ab:f7:17:
c3:a2:7a:c0:82:b6:e1:74:45:c0:13:e1:03:36:dd:de:5c:04:
84:a0:14:b4:aa:53:09:1b:48:a0:91:eb:91:41:56:b7:43:72:
50:cf:6e:aa:aa:bd:5c:83:04:a9:57:e3:fb:42:e9:2c:e8:ef:
c3:af:f7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:35:46 2024 by rpki-client on console-ams.rpki-client.org