Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/zH2Q7cyAUKm-TAaAFlLIMbuCnvo.roa
File: zH2Q7cyAUKm-TAaAFlLIMbuCnvo.roa (raw, json)
Hash identifier: YJUyK1s4n47dl/J1sHUOBX39kSgAUMIQkd83AKk2utU=
Subject key identifier: CC:7D:90:ED:CC:80:50:A9:BE:4C:06:80:16:52:C8:31:BB:82:9E:FA
Certificate issuer: /CN=78fd0b69777bd05dcdfc98942eedefbb0681282f
Certificate serial: 018CC8DE736CF5BB2E6C3A7C4A676649E609
Authority key identifier: 78:FD:0B:69:77:7B:D0:5D:CD:FC:98:94:2E:ED:EF:BB:06:81:28:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP0LaXd70F3N_JiULu3vuwaBKC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/zH2Q7cyAUKm-TAaAFlLIMbuCnvo.roa
Signing time: Tue 02 Jan 2024 06:31:10 +0000
ROA not before: Tue 02 Jan 2024 06:31:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51614
IP address blocks: 83.143.176.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eP0LaXd70F3N_JiULu3vuwaBKC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:73:6c:f5:bb:2e:6c:3a:7c:4a:67:66:49:e6:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78fd0b69777bd05dcdfc98942eedefbb0681282f
Validity
Not Before: Jan 2 06:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc7d90edcc8050a9be4c06801652c831bb829efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d4:3f:19:8d:f1:f5:41:0a:22:c0:75:75:b9:
82:44:9e:04:79:19:eb:20:91:29:62:b3:10:25:bf:
be:30:54:e3:f4:cb:f9:e1:ca:87:05:f8:c7:c8:aa:
2f:90:ae:8a:67:34:de:56:e6:0e:33:81:4f:1a:61:
1d:70:51:2a:b0:e4:f8:d6:a0:b3:9f:51:0e:4e:33:
56:31:e6:a3:64:18:5b:3c:91:90:59:21:b0:1d:61:
f3:5e:77:b4:0d:e8:65:50:3b:8b:2d:be:8a:ea:1e:
7a:16:92:e3:53:06:4f:b6:b0:65:28:42:9d:ec:16:
d3:1c:51:eb:0a:a9:9c:a3:76:21:72:ba:a5:a5:5f:
94:15:12:57:a8:7b:ba:ae:59:86:21:43:7f:52:d1:
9f:84:ef:61:c8:2a:4a:95:c1:af:9b:c6:d0:49:c4:
9c:de:54:c8:03:d6:05:80:6c:48:44:33:13:00:b3:
64:4b:3d:dd:91:da:92:09:01:73:f2:70:05:1d:fa:
47:6c:4d:46:7d:9d:1b:72:3b:76:4b:a4:63:53:8e:
fe:a4:f8:8d:40:54:49:67:7c:36:4c:3b:d0:8b:91:
f4:df:2f:e1:d1:68:70:0c:ea:39:5e:5d:e5:ff:f7:
a1:35:7f:3f:ca:96:0b:58:a1:02:41:1c:dd:4c:15:
28:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7D:90:ED:CC:80:50:A9:BE:4C:06:80:16:52:C8:31:BB:82:9E:FA
X509v3 Authority Key Identifier:
keyid:78:FD:0B:69:77:7B:D0:5D:CD:FC:98:94:2E:ED:EF:BB:06:81:28:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP0LaXd70F3N_JiULu3vuwaBKC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/zH2Q7cyAUKm-TAaAFlLIMbuCnvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.143.176.0/21
Signature Algorithm: sha256WithRSAEncryption
28:e9:dc:a2:53:a5:9f:e3:00:bb:9e:7b:5e:e4:2f:8c:14:8b:
33:eb:9e:3e:bf:d5:6c:48:ed:63:20:51:c7:1e:d6:d0:be:3d:
90:cf:d2:65:96:6c:b0:ca:76:dd:52:4d:39:90:cd:3d:74:28:
1e:c4:ef:fc:96:53:8f:f7:75:3b:ba:c9:88:51:fa:4c:75:41:
54:64:d3:58:76:77:5f:44:74:c4:f0:a6:51:57:22:ff:62:f0:
07:88:7e:8e:db:5e:cd:2c:f7:99:e4:01:f7:6c:e6:ee:91:67:
92:11:fe:8e:d7:0f:6f:07:08:3a:e5:a9:7a:cd:b5:e0:b1:09:
0c:69:dd:00:50:25:7a:43:33:ba:27:90:5a:1b:bd:8a:a7:d4:
1b:55:0b:19:40:d1:78:9b:8c:3d:6d:b3:00:28:bd:92:56:e1:
9e:e3:45:59:f2:6b:44:db:82:eb:1e:a8:cc:80:9d:92:37:51:
8c:3e:4f:e0:33:f1:cf:4b:e1:b9:7b:ed:76:6e:71:0c:ee:30:
41:31:86:c1:78:c7:f2:4e:17:46:43:86:d2:bc:bc:8a:24:98:
6b:1a:10:ea:3c:5e:e4:2c:70:72:55:58:a5:dd:8d:91:c7:d3:
6b:44:0e:85:05:0b:a7:75:29:c4:c9:02:67:c5:fd:aa:7f:b5:
bc:59:44:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 12:53:05 2024 by rpki-client on console-fra.rpki-client.org