Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/z7fCvXjYlBIokDAp8O1U0QjdEy8.roa
File: z7fCvXjYlBIokDAp8O1U0QjdEy8.roa (raw, json)
Hash identifier: kXozwJviyQ9oiQ2WIJ/HWailJ58KUXdKdJsUXZ1TLfU=
Subject key identifier: CF:B7:C2:BD:78:D8:94:12:28:90:30:29:F0:ED:54:D1:08:DD:13:2F
Certificate issuer: /CN=c42978d532698fb20840f942b0247c01c8f578b2
Certificate serial: 018CC348DBD25169CB553FD464C91BC964FE
Authority key identifier: C4:29:78:D5:32:69:8F:B2:08:40:F9:42:B0:24:7C:01:C8:F5:78:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/z7fCvXjYlBIokDAp8O1U0QjdEy8.roa
Signing time: Mon 01 Jan 2024 04:29:41 +0000
ROA not before: Mon 01 Jan 2024 04:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209549
IP address blocks: 5.180.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:db:d2:51:69:cb:55:3f:d4:64:c9:1b:c9:64:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42978d532698fb20840f942b0247c01c8f578b2
Validity
Not Before: Jan 1 04:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cfb7c2bd78d8941228903029f0ed54d108dd132f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:aa:a8:1a:7b:3b:85:c8:db:43:11:44:a9:2b:
5e:11:cb:06:57:b4:4e:d4:94:ea:1d:be:66:04:d5:
66:54:ef:cf:53:a6:cc:d4:55:83:5d:0c:9d:48:63:
82:64:a8:1c:9a:de:34:6b:7e:26:c7:46:a4:8a:5a:
fb:cc:e0:19:d4:c2:e5:f6:d6:4b:5d:38:d0:31:08:
76:1f:d4:83:96:1a:8f:26:40:d2:f7:28:e4:3f:bb:
52:53:b7:f1:3a:84:23:ad:a5:09:f7:07:aa:e4:65:
4e:fa:72:bc:ec:0c:3d:14:6f:06:6f:5b:44:db:31:
c5:cb:06:9b:d4:20:64:1b:f0:0e:7a:83:6b:00:9b:
6b:bf:49:7d:dc:e7:8a:d3:08:9b:a1:d8:09:39:06:
58:b8:42:53:5f:8b:1d:38:a2:da:c4:59:82:bc:7b:
c1:a1:6e:5f:97:9a:91:e2:e1:5a:8a:a1:55:e5:e5:
b2:8d:31:9c:fd:d0:3a:b6:e0:46:20:a1:4f:a8:f9:
7f:37:cf:1e:82:4b:ed:ea:87:4a:e5:76:8a:b9:a2:
21:41:f4:df:14:d9:96:b9:f1:7f:81:2b:fc:00:2b:
11:ff:3e:0d:38:3e:ee:b6:af:f2:1a:cf:54:7d:aa:
c9:e3:0f:db:09:94:33:9d:16:7d:a0:fb:53:f3:8f:
3f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B7:C2:BD:78:D8:94:12:28:90:30:29:F0:ED:54:D1:08:DD:13:2F
X509v3 Authority Key Identifier:
keyid:C4:29:78:D5:32:69:8F:B2:08:40:F9:42:B0:24:7C:01:C8:F5:78:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/z7fCvXjYlBIokDAp8O1U0QjdEy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.124.0/24
Signature Algorithm: sha256WithRSAEncryption
81:00:a5:42:bc:c4:da:c2:04:b4:6c:91:71:41:b2:0e:58:49:
48:ef:e8:c3:19:80:58:df:10:ee:07:55:6d:74:f5:3e:41:ba:
09:b3:fa:e4:4b:4a:8a:16:b9:46:25:66:5b:dc:44:ff:55:65:
2e:6c:5f:a2:54:7d:b7:4e:f8:05:da:73:11:34:0e:e3:9f:d0:
b5:2e:46:75:58:88:d5:37:2e:72:b4:cf:18:a2:04:25:78:fd:
ea:c2:56:a1:c2:52:45:76:5d:73:0f:51:65:03:0d:0e:11:8c:
5e:03:78:20:ab:dd:37:fc:88:77:a1:00:59:20:84:06:21:ce:
a2:e7:af:0e:6d:48:a9:23:79:ba:c4:1c:26:30:b7:b8:11:fe:
6e:ce:69:cc:f8:e6:25:a8:14:81:42:86:d4:eb:68:5f:ea:3d:
f7:40:c1:24:3f:4f:d9:5b:e9:05:c2:28:c9:1b:8a:0f:e8:b1:
d4:9d:87:56:6d:8e:36:d7:94:61:ba:e2:25:06:73:c1:cb:fa:
90:f6:52:8e:7f:f0:65:d3:f1:4b:eb:9f:ff:ed:aa:f8:e9:d5:
e6:a2:e1:8b:d9:16:25:9d:1e:75:ba:cf:62:c1:c2:08:86:3d:
0c:6b:c4:e0:d9:46:02:ab:4a:85:ab:9e:a1:43:84:4f:04:19:
2c:22:4a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:15:32 2024 by rpki-client on console-fra.rpki-client.org