Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/ZR9Ov9LiAN23ihEek5QeTTbgb8o.roa
File: ZR9Ov9LiAN23ihEek5QeTTbgb8o.roa (raw, json)
Hash identifier: lVGPwtYqeuqPuV57Hnmk/Ulnil72lE0j9QlfgRc9KRI=
Subject key identifier: 65:1F:4E:BF:D2:E2:00:DD:B7:8A:11:1E:93:94:1E:4D:36:E0:6F:CA
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 019301BD4525A4CC2ECD8F96359CBB2C028D
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/ZR9Ov9LiAN23ihEek5QeTTbgb8o.roa
Signing time: Wed 06 Nov 2024 13:50:01 +0000
ROA not before: Wed 06 Nov 2024 13:50:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 89.249.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:01:bd:45:25:a4:cc:2e:cd:8f:96:35:9c:bb:2c:02:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Nov 6 13:50:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=651f4ebfd2e200ddb78a111e93941e4d36e06fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b8:d5:27:4d:3f:44:ae:40:da:64:a8:96:b1:
66:67:01:b5:9b:e9:f4:6d:42:46:b9:26:9f:ef:2a:
13:63:83:f9:37:05:28:f3:a2:5c:8e:f9:73:16:76:
10:68:02:b7:dd:70:ac:5e:c1:11:b6:d8:b0:12:4e:
5d:3b:8a:20:25:62:2e:44:60:c0:55:17:d0:31:29:
e3:9e:3b:d0:31:c2:50:a7:2c:00:69:d9:4c:10:ff:
10:97:b2:d1:6e:1a:c1:06:bf:83:9c:8a:c3:ee:07:
58:33:99:41:22:12:e9:9e:0c:d0:53:e8:11:4c:46:
45:aa:dc:d2:66:b0:e6:9d:fc:d6:84:bd:71:be:a2:
80:aa:8d:4f:47:33:96:47:c8:cd:97:e6:e4:33:e0:
63:7b:c7:72:48:be:26:c5:af:81:9d:2b:53:60:e3:
31:43:52:6d:6d:cd:18:ae:ac:c0:14:94:3b:d1:d2:
2f:69:32:15:fb:a2:71:4b:59:c9:af:29:2c:a9:02:
e0:51:ba:07:1a:07:47:da:48:b9:4f:51:fe:cc:6d:
7b:d4:e7:20:6c:eb:21:2d:94:6b:60:6f:29:b7:aa:
3f:f0:6a:7c:11:5d:3f:94:32:fb:7f:4c:af:56:9e:
e7:25:f7:94:85:d9:d6:4c:7a:f4:01:23:1c:64:99:
ff:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:1F:4E:BF:D2:E2:00:DD:B7:8A:11:1E:93:94:1E:4D:36:E0:6F:CA
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/ZR9Ov9LiAN23ihEek5QeTTbgb8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.201.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:9c:c7:4e:e3:35:9e:78:46:4c:25:5e:81:3f:3b:b2:06:7a:
14:af:47:9f:3b:e2:26:11:b9:0c:e8:bc:f8:c2:a2:09:fc:a7:
0c:1a:f8:fe:ee:a0:75:38:bb:4d:99:54:33:e7:33:be:80:11:
ef:fa:6e:5d:27:53:08:05:90:75:a6:9e:81:ff:92:07:47:30:
b8:bd:93:17:b3:79:ed:8b:ac:e2:b5:b2:a0:ab:b6:28:3a:7b:
1b:19:d0:40:a3:0e:45:2e:24:05:d9:9b:49:d7:27:d2:33:33:
f6:ad:8e:e4:0f:36:7e:62:05:0f:40:cb:10:d9:54:2b:66:60:
1e:d2:62:ea:de:94:cf:13:83:eb:e0:5b:7a:37:e2:3b:64:b1:
d6:f7:90:85:a1:60:8c:83:5e:6d:0c:0e:dc:e3:e3:21:7f:5c:
3a:4d:93:c0:97:e4:02:2c:90:10:c0:bc:de:0e:61:bf:73:3c:
27:d9:56:9c:e1:db:07:66:92:24:24:dc:e0:86:e1:0c:a3:15:
65:2f:d2:ad:7e:2f:0b:98:df:7f:01:67:80:0b:c5:84:ad:54:
9b:e0:68:b1:02:61:93:ca:b1:88:fe:e0:d4:34:60:be:9b:78:
b3:c4:90:4e:24:59:07:a2:dd:fa:e7:b4:ff:4c:32:cc:0c:f6:
f8:a0:e5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:37:34 2024 by rpki-client on console-fra.rpki-client.org