Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/zXexW7hDk083FuEZSst1ifyHoCk.roa
File: zXexW7hDk083FuEZSst1ifyHoCk.roa (raw, json)
Hash identifier: xu2CKv0uKbt+VPpNYfbDDtt4mkspIrc6AHHAj3Z4Qxo=
Subject key identifier: CD:77:B1:5B:B8:43:93:4F:37:16:E1:19:4A:CB:75:89:FC:87:A0:29
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 018CC6B819E90DB57A57CD06A1E18865674D
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/zXexW7hDk083FuEZSst1ifyHoCk.roa
Signing time: Mon 01 Jan 2024 20:30:03 +0000
ROA not before: Mon 01 Jan 2024 20:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49665
IP address blocks: 178.155.52.0/24 maxlen: 24
85.140.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:19:e9:0d:b5:7a:57:cd:06:a1:e1:88:65:67:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: Jan 1 20:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd77b15bb843934f3716e1194acb7589fc87a029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6e:26:1a:0b:af:be:87:6d:56:2a:42:c4:37:
e5:69:3e:b1:fd:10:6a:2d:e2:27:de:60:28:de:c4:
ed:fb:73:7f:c0:bd:50:80:e1:33:71:0c:b8:d5:64:
b5:9c:77:6f:ed:93:58:5b:5a:4f:b8:9c:49:8b:25:
04:23:80:f9:03:72:c0:1a:6b:eb:44:11:d2:ce:18:
ad:54:1e:7c:ef:cd:04:2e:7f:60:6b:90:bc:53:77:
a9:4c:00:95:61:a9:7e:f3:27:b2:64:69:e3:b4:a2:
46:92:57:9e:bf:d6:38:24:7e:cc:b6:77:13:3e:fe:
68:c7:a9:b7:3f:1a:85:74:47:54:59:d7:5e:42:e0:
6c:e7:a5:b7:6d:ee:75:51:d6:94:90:71:e3:e5:fb:
73:2d:02:4f:98:d0:ef:50:de:c9:a3:89:9b:5a:a6:
ba:38:02:f8:cb:d7:9b:c7:fc:44:7e:c3:7b:a4:04:
ed:a5:68:23:73:9d:0c:50:de:ac:97:5b:c3:bd:76:
4c:86:40:c3:f1:5f:9a:93:b7:b0:80:44:cf:30:cd:
34:07:73:02:68:0a:5a:84:76:d4:9e:fe:c0:0b:7b:
d6:81:60:43:2c:39:27:e7:1f:6c:d4:d0:b1:6e:5d:
c2:aa:64:b9:e8:ae:ce:60:27:c2:56:13:b4:57:f4:
c4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:77:B1:5B:B8:43:93:4F:37:16:E1:19:4A:CB:75:89:FC:87:A0:29
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/zXexW7hDk083FuEZSst1ifyHoCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.140.95.0/24
178.155.52.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:6e:4a:57:35:98:27:ef:09:29:92:09:c3:a2:dd:ae:db:f0:
0f:a3:55:f9:04:aa:ce:4c:74:2b:dc:65:40:e1:f1:4c:ef:e0:
53:3b:20:3a:c8:ae:7d:87:90:b4:7d:49:fa:80:9b:40:08:d8:
91:4a:03:0f:e2:4e:1e:ee:17:3a:c4:48:3b:bf:4e:42:d2:56:
2a:0f:1f:bf:b3:ef:9f:25:f2:84:70:be:2e:ff:11:6d:1a:7c:
4a:b7:d3:d7:ce:01:f8:25:2d:e7:d2:58:44:da:18:21:86:6d:
60:91:0b:25:90:6d:0c:0b:94:19:db:3b:20:84:47:7e:3b:ca:
3f:a4:47:6c:fe:67:60:b9:8e:20:96:ba:3e:e3:82:4f:70:ea:
d0:b9:62:73:23:d7:71:bd:57:be:ec:0e:7c:57:3a:45:ac:9f:
c4:ec:0c:27:9a:c5:6a:78:6f:75:15:f3:2c:fc:39:bd:e1:0d:
bf:f2:42:4f:8d:54:7f:d2:0c:c2:44:fd:63:ba:a2:e3:64:29:
97:f8:de:98:4c:cb:06:36:be:e6:20:e2:c0:e3:a2:72:97:6c:
b9:44:28:aa:fb:92:c1:41:8f:71:f3:5c:5a:52:79:f8:64:e6:
6b:f5:5f:a0:5b:76:95:30:02:07:7b:1e:d2:16:9d:69:f8:43:
64:b6:e9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:46:19 2024 by rpki-client on console-fra.rpki-client.org