Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/zsjHCQuhauPJ_uWjp_YUfznSzkw.roa
File: zsjHCQuhauPJ_uWjp_YUfznSzkw.roa (raw, json)
Hash identifier: G56vF2K5K/chItjqnrVCg78CgMpW6Z2K3wKhXJWbpS8=
Subject key identifier: CE:C8:C7:09:0B:A1:6A:E3:C9:FE:E5:A3:A7:F6:14:7F:39:D2:CE:4C
Certificate issuer: /CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530
Certificate serial: 018CC6B8203DB7F9D6410632842DDDFEF75F
Authority key identifier: 91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/zsjHCQuhauPJ_uWjp_YUfznSzkw.roa
Signing time: Mon 01 Jan 2024 20:30:04 +0000
ROA not before: Mon 01 Jan 2024 20:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198584
IP address blocks: 195.62.32.0/24 maxlen: 24
2a10:ca80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 07:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:20:3d:b7:f9:d6:41:06:32:84:2d:dd:fe:f7:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530
Validity
Not Before: Jan 1 20:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cec8c7090ba16ae3c9fee5a3a7f6147f39d2ce4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a0:5a:3e:b6:34:01:4d:d4:c5:3c:71:f2:76:
8d:53:c2:c2:14:a7:b8:8f:38:24:59:59:8f:47:f8:
df:4f:d7:c2:db:e8:ea:f3:51:1f:48:ce:f7:99:e2:
00:8a:49:11:7c:83:a8:3a:20:26:b9:01:41:39:ac:
91:51:68:cb:0d:91:56:8f:af:63:e1:a8:8a:b2:61:
6a:65:e8:fd:df:0a:50:8d:40:ef:ad:79:27:64:38:
1f:e0:23:44:10:45:7f:f8:55:f4:b4:c7:8f:f5:51:
fe:d6:0a:6c:68:ad:6a:15:c1:f8:b8:9a:1b:3c:2c:
e0:aa:f9:d2:c4:cb:8f:16:80:df:c1:5f:ee:f1:5c:
c0:c5:f5:73:4d:e0:69:65:d0:43:d6:ad:8a:c6:2c:
e0:bd:8f:fd:8e:c5:ac:8b:c1:6d:06:28:18:4e:df:
c7:da:15:92:40:82:f0:36:09:b7:21:73:6e:be:0f:
19:23:71:89:19:99:78:25:e7:ce:e1:47:66:84:47:
bd:89:28:ff:46:f7:43:67:b6:4e:a2:5a:bb:c3:99:
99:59:08:d1:da:40:04:bc:ad:16:3a:e8:17:4a:85:
0f:23:41:81:ab:fa:4d:91:ef:48:a1:f3:17:86:b2:
f0:dc:a4:1c:ad:ae:d7:f7:b3:6a:a9:35:81:70:0a:
0b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C8:C7:09:0B:A1:6A:E3:C9:FE:E5:A3:A7:F6:14:7F:39:D2:CE:4C
X509v3 Authority Key Identifier:
keyid:91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/zsjHCQuhauPJ_uWjp_YUfznSzkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.62.32.0/24
IPv6:
2a10:ca80::/48
Signature Algorithm: sha256WithRSAEncryption
91:6d:8d:69:8b:b4:02:e0:52:c2:ba:4a:ec:d2:6e:b2:f1:2b:
8b:20:4b:38:00:ee:ce:fc:77:d8:14:3c:e1:d4:97:36:71:5e:
89:3d:1b:bf:0e:fe:b2:d5:e8:b8:6a:5a:4e:3d:6c:b9:80:fe:
f0:08:d9:d4:57:5b:ab:4d:bb:fc:35:ba:be:2d:eb:4d:f0:63:
82:84:4d:03:15:eb:1e:4d:8a:c0:38:10:f8:09:7b:1c:e1:21:
a1:2b:8a:45:11:44:89:b5:54:1a:f3:dd:95:d6:1e:32:5e:b9:
9c:bf:e5:3a:7a:29:68:f9:36:b5:f8:cc:85:43:b0:ef:24:0b:
e8:8f:d7:59:73:68:e7:0a:a7:d4:8d:fd:ce:8d:99:91:fb:c3:
57:be:f9:3a:9e:a1:bb:87:07:4f:9f:93:56:2b:78:ba:fc:e3:
25:34:ea:03:d6:ec:ab:49:b3:35:f0:38:c5:6f:cd:b7:a6:d3:
13:73:8e:8e:85:94:7a:73:ad:9c:5b:46:fc:c5:58:d7:9e:4d:
a2:01:5a:78:fd:6c:64:93:a5:ba:31:dc:a7:e9:b2:83:0b:5c:
21:29:cf:6f:97:25:86:6c:b9:bf:25:73:19:68:19:ed:c3:ed:
b6:5f:de:62:61:18:a9:bb:c2:ef:43:de:a2:6f:7a:69:d5:3e:
b4:23:2c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:37:07 2024 by rpki-client on console-ams.rpki-client.org