Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/ZZ8PBH6JNLiEolXt16SzBFI8Xs8.roa
File: ZZ8PBH6JNLiEolXt16SzBFI8Xs8.roa (raw, json)
Hash identifier: aySapnqgltPNGuus1So6HBrPu7WL8t0BZfsFysqCI9s=
Subject key identifier: 65:9F:0F:04:7E:89:34:B8:84:A2:55:ED:D7:A4:B3:04:52:3C:5E:CF
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 018CC424932B0F8F0483C8622ECFDF8985E2
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/ZZ8PBH6JNLiEolXt16SzBFI8Xs8.roa
Signing time: Mon 01 Jan 2024 08:29:40 +0000
ROA not before: Mon 01 Jan 2024 08:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199565
IP address blocks: 178.254.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:93:2b:0f:8f:04:83:c8:62:2e:cf:df:89:85:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Jan 1 08:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=659f0f047e8934b884a255edd7a4b304523c5ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f6:25:2f:e6:3a:1d:8c:5e:02:3b:87:b7:99:
1a:58:4a:19:5d:d2:56:7f:a8:34:fd:4a:fc:b1:32:
99:a2:17:5c:49:1d:85:83:87:62:a0:c7:1e:1c:0f:
67:c8:67:68:4c:25:06:00:6b:10:5b:c2:9b:fa:f5:
bc:d5:8a:95:c8:f5:89:6e:2a:c0:1f:88:71:16:61:
ca:85:9f:f2:d5:1f:49:47:64:e4:f4:e3:ba:03:fd:
ba:ef:1b:38:6d:d2:77:06:6c:f5:71:f9:78:6b:0b:
e8:be:4b:06:19:3e:35:4f:ed:d4:fb:f5:34:c5:0f:
d7:15:f0:4b:c3:31:7e:0d:71:45:0a:95:78:35:99:
de:db:3b:9a:9a:96:20:ad:9e:16:bb:6d:6d:2d:1b:
80:e1:08:6c:e7:9c:65:c1:48:02:44:da:c3:6c:6e:
04:8c:f7:29:e1:27:82:5e:e8:3e:3a:a6:ac:04:4d:
11:74:6a:bd:c9:19:cc:32:ae:c8:ec:bb:69:f9:14:
11:34:fd:45:9b:e5:8d:17:54:ca:01:de:20:ee:94:
49:d8:d1:5f:3f:cb:9e:31:b8:b3:19:0a:ea:71:61:
ae:05:bc:2d:c3:22:5a:97:25:27:c6:09:52:34:0b:
90:81:87:12:a5:1d:4a:b2:7e:ad:74:4f:b6:3f:0b:
6a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:9F:0F:04:7E:89:34:B8:84:A2:55:ED:D7:A4:B3:04:52:3C:5E:CF
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/ZZ8PBH6JNLiEolXt16SzBFI8Xs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.186.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:3e:90:26:89:74:8c:e2:3c:53:93:5a:37:64:db:8d:05:bb:
17:d1:77:ae:db:46:e9:91:48:bd:e5:83:ed:42:9e:2f:2c:b0:
01:f3:ee:1a:39:0c:4f:ad:df:54:8f:00:d6:9a:be:44:5f:ca:
5f:5f:57:2a:5d:8d:79:e3:53:3d:f7:e0:80:41:c1:a8:b5:7d:
8a:8c:5a:89:c3:4d:fc:dc:69:ee:e8:ca:e3:07:09:dc:d9:8a:
9a:b5:5a:ce:76:68:09:73:e0:01:9b:e6:65:70:18:0f:44:23:
83:d3:18:6a:ed:dc:57:1f:73:6a:61:a4:ec:62:eb:cd:5e:bf:
32:8d:5f:22:97:ab:60:e7:eb:1c:0d:cf:b3:ce:0b:bd:3f:5b:
cb:76:f6:c7:bf:6b:63:f1:60:42:7b:04:76:0c:44:4d:14:80:
73:af:82:d0:cf:d1:8d:05:4e:12:4a:8a:46:45:9c:1e:be:be:
0d:88:26:98:c9:7e:6a:e7:d8:c5:84:07:d4:cd:73:a0:70:f0:
5f:1a:f9:ec:74:4e:c7:ca:08:96:81:03:28:af:f0:45:be:98:
32:38:13:31:7e:bc:cb:85:94:f3:57:90:36:7f:5b:65:26:bb:
27:7c:dd:c7:1b:ae:6b:3e:c5:72:8c:5e:ac:1a:ac:34:b4:3b:
ee:f5:0c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 07:27:14 2024 by rpki-client on console-fra.rpki-client.org