Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/zp2yCTHlEI9Jk2sgc99Yj_Gm-ws.roa
File: zp2yCTHlEI9Jk2sgc99Yj_Gm-ws.roa (raw, json)
Hash identifier: 0HF+fc5rzLqp8gMRuy0B0vZiMQs3jTSzVbFMzU6dGqs=
Subject key identifier: CE:9D:B2:09:31:E5:10:8F:49:93:6B:20:73:DF:58:8F:F1:A6:FB:0B
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 018CC86FB6CF2D32F1BDFE30EA157360FA84
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/zp2yCTHlEI9Jk2sgc99Yj_Gm-ws.roa
Signing time: Tue 02 Jan 2024 04:30:13 +0000
ROA not before: Tue 02 Jan 2024 04:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211028
IP address blocks: 94.125.98.0/23 maxlen: 24
185.78.232.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:b6:cf:2d:32:f1:bd:fe:30:ea:15:73:60:fa:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 2 04:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce9db20931e5108f49936b2073df588ff1a6fb0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:81:11:3b:97:0e:1e:8d:10:c4:bc:10:f4:24:
1b:17:3c:88:32:76:d6:97:15:9c:61:99:e8:17:e7:
8c:18:25:c1:c5:1e:cd:ac:b4:e4:a4:82:16:e6:fd:
5e:b8:56:f4:e1:24:86:c0:bc:57:34:77:d3:eb:cd:
fc:40:58:f7:14:8f:71:b5:23:f7:8d:01:d3:e9:d5:
9a:34:f0:fc:cb:f2:fa:14:69:8c:6f:90:ae:f8:ce:
99:4b:a0:51:f8:ae:ce:3f:89:9b:d0:f1:e7:3b:16:
86:33:34:c6:61:83:7d:b6:63:bf:40:42:82:32:08:
b5:2d:63:3d:23:b8:56:ca:86:32:4c:64:be:06:3e:
4e:74:45:b4:55:d6:5f:46:81:1a:d6:5d:9a:bb:54:
90:00:85:47:7e:aa:3e:07:2f:f3:42:0b:f6:99:11:
bd:19:fd:f1:2c:2f:15:ed:34:dd:fb:ea:f1:37:12:
2f:a6:34:32:0d:cf:30:3d:df:aa:d0:ef:fa:21:2f:
b8:30:91:8c:1d:94:d6:f5:b0:d8:74:d2:fb:fb:3a:
a7:73:93:79:db:7c:6c:51:b9:3b:cd:d5:5a:84:e1:
53:5c:3d:1b:09:43:ac:e1:15:d3:76:e5:28:27:fb:
cb:f3:d3:95:23:63:0a:b2:73:9d:a1:34:aa:cb:7f:
be:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9D:B2:09:31:E5:10:8F:49:93:6B:20:73:DF:58:8F:F1:A6:FB:0B
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/zp2yCTHlEI9Jk2sgc99Yj_Gm-ws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.125.98.0/23
185.78.232.0/23
Signature Algorithm: sha256WithRSAEncryption
59:38:46:48:13:13:b1:2d:bc:10:1b:bc:2d:d5:33:15:86:d8:
c0:33:cb:d9:09:bd:67:a0:8c:49:3f:9e:5e:11:b6:7a:f4:75:
09:82:cf:92:c4:8d:ea:20:c6:45:ec:81:aa:c6:8c:1b:83:ee:
47:ed:f0:9d:4d:6f:ff:7c:5d:8a:be:81:29:29:bb:0d:f7:41:
a7:68:90:ff:4f:e1:3f:05:9f:62:5b:bf:8d:9c:69:90:0b:58:
b3:54:23:44:43:a9:33:a4:98:ef:b0:f9:3c:05:b6:18:eb:5e:
fc:ea:68:53:dd:2c:8b:38:70:4d:7d:d8:cd:2b:22:25:88:81:
18:42:6c:5c:02:eb:95:c2:e4:08:3b:d8:95:f7:69:5d:ac:a1:
31:05:45:36:13:41:35:08:ed:81:ca:c8:27:91:2a:ed:a9:c9:
cf:ba:35:39:13:a4:3f:39:ab:b0:63:a3:d7:b6:75:89:42:94:
6b:de:30:f3:2a:23:44:c7:6b:24:81:a4:de:68:b4:9f:ad:d9:
5b:ae:49:1f:9f:b1:4f:37:c7:89:d4:32:81:87:a4:30:6c:2c:
32:7e:4a:e6:87:f9:64:44:3b:d4:aa:1d:f5:0a:2e:a5:f6:06:
5f:4d:14:59:50:49:e6:31:68:2a:09:aa:2c:ce:01:73:c5:11:
11:bc:44:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 20:49:37 2024 by rpki-client on console-fra.rpki-client.org