Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/Zo54NqPZtCsUeZYEAVenh0WW_9E.roa
File: Zo54NqPZtCsUeZYEAVenh0WW_9E.roa (raw, json)
Hash identifier: qrcsd35TMYW5pZTiWzEUR5imx/zLLvrQL9Dl3GDrkmk=
Subject key identifier: 66:8E:78:36:A3:D9:B4:2B:14:79:96:04:01:57:A7:87:45:96:FF:D1
Certificate issuer: /CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca
Certificate serial: 018CC94BEAAA6FA28BC331986BFFE4656622
Authority key identifier: 42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/Zo54NqPZtCsUeZYEAVenh0WW_9E.roa
Signing time: Tue 02 Jan 2024 08:30:44 +0000
ROA not before: Tue 02 Jan 2024 08:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6730
IP address blocks: 193.8.58.0/23 maxlen: 23
193.8.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4b:ea:aa:6f:a2:8b:c3:31:98:6b:ff:e4:65:66:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca
Validity
Not Before: Jan 2 08:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=668e7836a3d9b42b147996040157a7874596ffd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:51:e6:90:74:a3:a3:1e:c0:e0:33:62:ed:4b:
d8:0b:5e:1a:39:b5:4b:84:41:cc:07:78:e1:92:84:
5c:e9:56:c8:80:5c:96:9b:73:82:0e:9e:db:b8:3d:
a9:74:51:73:67:a3:32:40:31:6d:21:c4:e8:b1:4a:
16:6a:a5:12:df:47:8c:ef:fc:26:3c:b8:8d:fd:46:
29:f0:e9:5a:8a:65:96:fc:a4:3e:8c:d5:bf:87:f7:
e8:48:6e:39:ad:4b:ab:90:7d:2b:c0:41:e5:10:e9:
1e:7b:7c:b8:51:f5:60:96:62:02:04:2d:d6:c6:91:
28:d9:53:b1:a1:f0:4e:91:f9:6a:0f:90:76:e3:bc:
0d:19:de:a5:bb:9e:c3:92:1d:8f:23:0e:73:62:b3:
62:66:22:c3:e8:cc:dc:25:06:d8:65:07:7a:46:f6:
4b:4d:41:4c:b1:69:e1:db:ac:dc:8d:7f:f3:36:be:
9a:03:4d:77:33:36:96:37:42:16:44:e0:cd:ad:5f:
6e:6a:8b:38:12:af:0f:15:99:49:02:18:14:c2:f7:
8b:a5:d2:67:c1:77:00:cb:d0:c5:67:fe:0f:89:2d:
c1:dc:f4:1f:39:8d:a2:9f:a3:84:89:77:3a:fc:3e:
22:6c:9f:ed:cb:1e:b3:fa:c1:ad:5b:19:03:1f:87:
94:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8E:78:36:A3:D9:B4:2B:14:79:96:04:01:57:A7:87:45:96:FF:D1
X509v3 Authority Key Identifier:
keyid:42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/Zo54NqPZtCsUeZYEAVenh0WW_9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.58.0-193.8.60.255
Signature Algorithm: sha256WithRSAEncryption
1b:27:eb:c7:6e:5b:71:09:72:dc:22:81:4a:ef:b9:d3:fb:a2:
52:17:67:cc:4d:e6:69:86:80:54:86:59:e0:de:fc:9e:eb:22:
74:87:d7:41:32:11:8f:58:a1:12:ba:61:e5:da:87:83:10:58:
c8:cb:fe:a0:4f:c8:f8:7a:69:51:88:d0:c8:8c:db:39:86:16:
a8:f7:a7:ea:87:74:1d:3a:6d:b5:c2:4b:6a:39:b5:c0:9d:96:
c7:7b:d0:26:97:82:eb:d2:24:ab:1e:44:e2:9c:8f:81:4e:80:
4f:51:c5:09:97:03:3e:c8:c6:5e:5f:a8:fc:13:56:54:f8:01:
65:37:65:ba:e6:37:c3:71:ab:4d:98:c1:b0:3c:80:43:1e:c7:
ce:bf:16:b4:ab:3d:f6:c4:a5:0d:03:61:e0:8e:c6:e0:0b:8f:
79:0e:97:6b:32:10:96:5f:43:f0:f2:3e:47:da:33:fa:8c:02:
7d:04:26:db:ce:87:e4:10:81:bb:ca:86:47:62:73:76:dd:d6:
3c:de:dd:9f:cc:82:f1:d5:f6:de:20:f1:07:b3:63:6f:a8:75:
cb:28:62:f6:52:f7:9c:18:60:f1:23:e2:e1:5a:b0:3e:f8:be:
23:fd:c9:c9:66:3b:3f:a1:57:5c:e9:e6:28:5d:e4:91:6e:3e:
99:56:87:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:17:29 2024 by rpki-client on console-fra.rpki-client.org