Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/Z0W3VcLPjnHzSjowhXQMdocyiIs.roa
File: Z0W3VcLPjnHzSjowhXQMdocyiIs.roa (raw, json)
Hash identifier: 4qxzPK+dDDoB4rsQ6vJtp3mqZ8YqIDgTDR4JUD4LNUE=
Subject key identifier: 67:45:B7:55:C2:CF:8E:71:F3:4A:3A:30:85:74:0C:76:87:32:88:8B
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 018F9ABACDAA71A138D885E3305155B19D93
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/Z0W3VcLPjnHzSjowhXQMdocyiIs.roa
Signing time: Tue 21 May 2024 10:38:04 +0000
ROA not before: Tue 21 May 2024 10:38:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214886
IP address blocks: 185.242.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9a:ba:cd:aa:71:a1:38:d8:85:e3:30:51:55:b1:9d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: May 21 10:38:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6745b755c2cf8e71f34a3a3085740c768732888b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e3:88:b6:0c:7e:0d:9a:c3:5a:51:c9:7f:61:
c4:39:17:09:c6:a2:20:7f:8f:f2:24:5c:8b:b3:f0:
95:ee:87:64:bb:6c:9a:92:ed:9a:fc:7d:98:5b:57:
be:38:64:a8:a4:21:6c:2f:33:7f:7f:63:2e:79:c8:
84:7e:03:96:0f:4d:55:68:cc:c7:fe:ed:20:7f:57:
1f:37:8c:af:88:4c:a4:6a:24:a9:7f:ae:06:b2:a2:
c3:9d:22:d7:66:e1:1d:63:0e:9b:dd:ec:88:9d:80:
81:cb:c6:76:52:6b:03:11:b4:5a:02:1d:f7:61:85:
5e:cb:a2:ab:ec:16:5e:97:82:b8:dd:91:21:0d:5b:
bd:03:43:3d:68:61:fd:a7:4b:fe:b8:85:6d:28:74:
2e:9a:05:04:49:0a:7d:c3:3a:a5:61:e1:d4:ed:47:
f4:2a:7a:1a:20:00:ac:89:29:c7:08:f3:a2:f2:6b:
5b:5b:79:03:7b:96:29:b4:7a:b0:4c:bb:ba:42:3a:
6c:85:58:ee:f3:4c:15:9b:6c:3c:1d:3f:a4:03:1a:
33:d4:58:dd:49:8a:da:e1:a9:41:a2:1a:16:68:23:
dc:95:df:5b:49:e9:45:0f:dd:8a:dd:fd:bb:85:e3:
79:c7:b6:04:21:71:b3:ad:33:75:25:56:56:f2:b0:
4c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:45:B7:55:C2:CF:8E:71:F3:4A:3A:30:85:74:0C:76:87:32:88:8B
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/Z0W3VcLPjnHzSjowhXQMdocyiIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.20.0/24
Signature Algorithm: sha256WithRSAEncryption
56:51:6d:36:53:ba:77:ec:1c:17:5a:52:4e:d3:06:fc:cf:d3:
4c:7b:d3:ca:50:df:b4:b4:68:4a:e3:18:92:17:00:0f:74:c4:
a6:38:e7:f7:3d:82:94:36:fc:38:0d:12:d4:b5:04:13:f9:4a:
5d:93:0b:c2:b4:52:0f:77:06:ab:7f:5d:4e:63:83:5e:25:0a:
74:8f:2f:89:bf:8f:9f:24:43:bd:54:e1:09:4e:41:3b:60:b8:
c1:9d:2f:39:9b:19:59:f5:42:cd:2a:71:d8:76:ed:d9:cb:d2:
77:96:ca:ca:d5:55:61:c7:ff:06:f7:57:6c:bb:de:d1:0e:c4:
e0:d6:9b:48:f6:0e:13:17:4d:23:4d:07:c6:5c:2d:56:57:19:
14:6b:44:1a:9a:3c:29:15:f9:a6:f8:f3:17:ec:d0:94:8e:c5:
03:23:0f:ef:f9:52:72:fb:91:f2:6f:b8:2a:ff:24:7c:74:76:
74:a4:61:39:41:2c:82:3e:78:26:e2:39:f2:94:b8:91:5b:1f:
25:d0:f7:e1:3b:0b:e5:ad:72:34:1c:06:87:35:9d:91:67:90:
e9:72:8b:c3:19:ed:37:6f:49:70:87:00:91:8a:56:8b:b1:ae:
51:c0:09:67:d4:f5:79:45:15:83:dd:17:24:cd:b4:2b:d2:fa:
9a:ff:41:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:02:26 2024 by rpki-client on console-ams.rpki-client.org