Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/ZnU01CkXVpAV1FzgLXKzDB2FmKA.roa
File: ZnU01CkXVpAV1FzgLXKzDB2FmKA.roa (raw, json)
Hash identifier: wGtaQwUJEd7kX5jRYn9o+Pkk46Bt5oNwCNeRZBnHSBQ=
Subject key identifier: 66:75:34:D4:29:17:56:90:15:D4:5C:E0:2D:72:B3:0C:1D:85:98:A0
Certificate issuer: /CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Certificate serial: 018CC50026295A09D37DBB2E2A25DA8127C4
Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/ZnU01CkXVpAV1FzgLXKzDB2FmKA.roa
Signing time: Mon 01 Jan 2024 12:29:30 +0000
ROA not before: Mon 01 Jan 2024 12:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36351
IP address blocks: 95.142.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:26:29:5a:09:d3:7d:bb:2e:2a:25:da:81:27:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Validity
Not Before: Jan 1 12:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=667534d42917569015d45ce02d72b30c1d8598a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:21:24:0c:d5:38:f2:6a:5a:a0:16:9a:c6:83:
98:37:4e:31:0b:19:cf:0d:e9:ec:3b:9a:25:54:86:
dd:c5:a7:35:0f:b8:5f:8b:61:1f:8c:b4:3e:21:b2:
29:d9:1c:71:49:80:4e:d5:11:b7:83:3b:b5:0d:b3:
b3:dc:31:13:bc:84:4f:f0:62:83:77:60:a2:4b:29:
37:ff:cc:b4:78:1d:b6:5d:e6:2e:45:7f:d5:7e:26:
b4:6b:bf:23:32:a6:d1:d3:03:da:a6:c0:af:78:a6:
84:0a:13:50:26:16:ad:d6:a1:e3:b2:91:42:7d:cc:
21:31:ca:58:c6:a1:d6:35:6a:9c:a3:ae:05:38:15:
a0:dd:6f:21:95:1e:ea:45:fe:d9:ee:a5:cc:ff:8c:
64:50:ce:cb:6a:98:6c:81:59:c5:02:3f:c5:0b:19:
7d:3c:2f:ae:63:95:00:9d:cd:99:20:45:06:e3:76:
ea:e5:2c:c2:fc:88:a9:2e:0d:8d:04:05:96:05:5d:
0b:aa:26:47:17:17:f5:4a:aa:95:e4:db:9c:45:0e:
21:fc:c5:c2:31:e4:2c:67:7e:86:c8:4d:a5:40:c2:
ef:ef:8f:5b:ec:53:1c:03:ab:c0:04:1e:ae:4c:11:
a9:12:81:0f:e6:23:68:0e:ad:22:8e:9a:01:b2:44:
8f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:75:34:D4:29:17:56:90:15:D4:5C:E0:2D:72:B3:0C:1D:85:98:A0
X509v3 Authority Key Identifier:
keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/ZnU01CkXVpAV1FzgLXKzDB2FmKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.142.120.0/24
Signature Algorithm: sha256WithRSAEncryption
34:6f:e9:7b:74:6b:7d:3f:dd:6a:57:8c:38:cc:18:68:55:a2:
1a:a4:d2:b2:f6:f4:e5:cf:b4:4b:cb:f2:a5:37:87:e6:57:96:
ae:42:bf:b7:43:c3:28:e4:8f:6e:7c:d8:8c:fd:14:6e:5a:dc:
4e:03:4f:1d:37:d4:74:5d:60:bf:28:b6:d1:e7:4b:7c:6e:1f:
53:a5:e4:d2:34:05:16:48:a2:b7:dd:16:aa:95:fa:1d:86:9c:
33:7e:93:2b:55:27:6e:96:dc:4f:aa:3a:02:df:58:aa:26:8b:
57:58:d0:9c:70:ae:3e:57:92:f2:df:fc:db:19:a1:2a:37:95:
ed:3f:05:89:85:20:bf:c5:50:73:9e:68:e3:dd:c7:f9:fc:54:
11:01:10:aa:66:48:c9:ba:d7:1a:7a:d4:58:29:f6:af:d0:d3:
3f:02:33:bb:95:e7:d6:dd:47:ac:76:f1:07:cf:77:9a:7f:e9:
36:11:55:2e:ee:75:92:6d:43:7d:47:a0:7c:f4:f2:30:63:1c:
99:12:1e:72:58:d5:c9:98:c5:80:6b:6d:d6:73:1a:c0:1b:e5:
e6:c2:6e:b1:30:7f:cb:a9:d8:59:fc:ea:7e:b6:d9:dc:71:d3:
fd:c3:2c:47:a6:66:6b:d4:b9:6b:c2:b3:dc:c6:ac:9c:e0:46:
8f:9d:c8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:39:51 2024 by rpki-client on console-fra.rpki-client.org