Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/zWZFZE1EAEARk9ngqqjmUdUgmMo.roa
File: zWZFZE1EAEARk9ngqqjmUdUgmMo.roa (raw, json)
Hash identifier: p2kuY66bxVTgOLY2Sfx+8mK+sEFbwgOmD/Ioh7ehFR0=
Subject key identifier: CD:66:45:64:4D:44:00:40:11:93:D9:E0:AA:A8:E6:51:D5:20:98:CA
Certificate issuer: /CN=fccaed0f81e248daf332b80843d4a29e8d7d51e4
Certificate serial: 018CC72713ACB8B68C935918DDAC2E13857D
Authority key identifier: FC:CA:ED:0F:81:E2:48:DA:F3:32:B8:08:43:D4:A2:9E:8D:7D:51:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/zWZFZE1EAEARk9ngqqjmUdUgmMo.roa
Signing time: Mon 01 Jan 2024 22:31:16 +0000
ROA not before: Mon 01 Jan 2024 22:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35273
IP address blocks: 91.235.196.0/22 maxlen: 22
193.142.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:13:ac:b8:b6:8c:93:59:18:dd:ac:2e:13:85:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fccaed0f81e248daf332b80843d4a29e8d7d51e4
Validity
Not Before: Jan 1 22:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd6645644d4400401193d9e0aaa8e651d52098ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7c:5e:92:4f:26:88:d1:87:e0:29:d3:ff:14:
c2:c5:b2:e4:be:56:d7:b4:42:3c:a5:47:3c:1d:ee:
a3:a8:3a:2b:1d:d1:2f:01:44:db:3b:2e:70:99:bb:
96:78:f5:1f:19:6f:f0:95:1b:27:5e:ce:25:a4:84:
fa:ac:e6:33:5d:bb:75:83:34:f8:ec:33:49:46:69:
49:69:05:bd:d1:00:5a:91:6d:87:d9:76:13:b9:4b:
83:6b:28:c1:d8:de:db:e2:fd:8a:c9:85:48:dd:82:
8c:6a:c1:f9:98:3d:4d:3e:72:45:2e:62:d0:6a:3c:
8f:c7:3f:32:00:a5:2e:ab:a4:8c:3e:6f:cb:f6:93:
d9:3b:07:2e:75:d2:45:cc:93:8d:4a:b5:00:c8:87:
10:15:8d:6a:27:87:a1:ec:31:1d:08:37:2b:d2:90:
16:ce:88:e3:36:c2:6c:04:4b:21:44:61:28:ca:97:
3e:ea:7f:5b:59:05:26:50:ac:c8:0b:88:ef:cb:bb:
0a:4c:12:84:b2:5e:04:ba:ff:31:e0:5b:08:23:5b:
8f:66:2e:a5:ac:22:66:7c:e3:b0:c9:f9:45:37:bf:
4a:72:a2:b7:6f:c5:44:67:c1:7d:db:ef:47:3b:8c:
2d:41:17:c0:2f:78:ab:17:da:92:70:42:5a:b5:db:
c2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:66:45:64:4D:44:00:40:11:93:D9:E0:AA:A8:E6:51:D5:20:98:CA
X509v3 Authority Key Identifier:
keyid:FC:CA:ED:0F:81:E2:48:DA:F3:32:B8:08:43:D4:A2:9E:8D:7D:51:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/zWZFZE1EAEARk9ngqqjmUdUgmMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.196.0/22
193.142.114.0/24
Signature Algorithm: sha256WithRSAEncryption
42:3a:d5:44:e9:0c:b0:ef:ed:3f:d3:a9:ed:67:75:ef:41:14:
1e:49:73:04:a4:95:68:3b:37:69:73:04:d0:28:b4:02:5a:88:
80:1c:7d:3b:dd:7b:84:71:c8:0d:df:40:a9:37:87:56:59:d4:
18:91:6e:44:7a:ab:43:10:aa:e3:61:9c:2c:aa:d6:8c:3f:48:
92:56:4e:ee:f4:93:97:61:dd:ba:b7:ee:34:ed:a5:5d:24:45:
34:b1:ff:4c:af:7c:ea:c8:be:47:11:4c:aa:83:70:f3:d1:cd:
de:65:37:79:fd:fa:90:09:a2:c6:16:c2:d5:4c:f3:db:63:2d:
34:f4:67:46:fd:56:fb:44:fc:e3:8c:43:4c:7b:8b:4e:7b:e2:
33:bf:fc:cf:2e:88:2b:92:90:9c:c2:24:2b:bf:23:23:4b:da:
84:12:bc:51:ad:02:d4:88:48:b0:30:8c:de:09:5f:07:5a:a3:
e7:df:8c:93:a3:c6:8d:31:6c:8b:2f:7d:8a:3b:a4:70:de:f1:
c0:c6:c7:76:dd:5d:3e:cb:9b:18:d4:5b:83:77:31:76:6d:96:
8a:cf:aa:b7:19:d8:f0:73:71:e1:b4:4b:72:ea:2b:06:72:46:
61:44:99:21:fe:9b:98:df:0a:b7:df:64:f1:45:4a:12:14:98:
52:95:82:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:50:10 2024 by rpki-client on console-fra.rpki-client.org