Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/ZORDXhUfYgaOAGzATVgANiivAR4.roa
File: ZORDXhUfYgaOAGzATVgANiivAR4.roa (raw, json)
Hash identifier: BvgPJSmPvI+9VoT73FFG+/UGTvBnafgMDQ0tMz3aqxU=
Subject key identifier: 64:E4:43:5E:15:1F:62:06:8E:00:6C:C0:4D:58:00:36:28:AF:01:1E
Certificate issuer: /CN=ecccc2b909c7c815caccb5fce531c32526fadd5a
Certificate serial: 018CCA2910A024B0A43A6491AC27FD9475FF
Authority key identifier: EC:CC:C2:B9:09:C7:C8:15:CA:CC:B5:FC:E5:31:C3:25:26:FA:DD:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/ZORDXhUfYgaOAGzATVgANiivAR4.roa
Signing time: Tue 02 Jan 2024 12:32:18 +0000
ROA not before: Tue 02 Jan 2024 12:32:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29044
IP address blocks: 195.68.196.0/24 maxlen: 24
195.68.196.0/23 maxlen: 23
195.68.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:10:a0:24:b0:a4:3a:64:91:ac:27:fd:94:75:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecccc2b909c7c815caccb5fce531c32526fadd5a
Validity
Not Before: Jan 2 12:32:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64e4435e151f62068e006cc04d58003628af011e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:03:12:72:c4:63:09:b3:a1:b6:d3:92:fa:4c:
b4:66:c3:60:c5:e8:5c:e7:55:bf:ac:ad:3f:8e:fa:
d8:1f:0d:df:a8:f3:0d:bc:8e:ce:3c:44:7e:83:37:
0e:08:04:e0:b1:61:14:40:d4:d2:b8:a8:60:af:a2:
5e:1a:7b:a4:e5:f3:e4:4c:a3:64:68:e5:10:ad:66:
05:f4:16:a6:f0:d3:5f:7c:c3:1e:cb:ae:c5:2e:5e:
58:b0:12:fc:19:0c:96:fe:d3:8e:e2:f0:ed:6a:1a:
e5:16:54:b1:2f:f3:70:5f:ee:bf:cc:8d:0f:86:e4:
ae:b3:a0:e9:9a:1a:43:7f:b6:86:19:7e:4d:ca:73:
ba:94:90:86:77:0f:7d:62:f6:c8:ce:b4:53:06:da:
cd:46:d7:50:3a:d7:2a:51:07:88:32:af:13:d8:5a:
cb:88:47:4b:78:93:e7:45:f6:cb:ee:2f:32:7e:0d:
0f:32:ce:4a:9a:94:fa:32:a2:49:92:01:a8:47:38:
e3:de:e8:46:72:76:cb:d8:53:de:6f:f9:ae:96:68:
8e:58:ff:84:85:6b:32:cb:32:b9:a1:10:de:2c:96:
e2:12:82:43:f5:3e:e7:96:38:10:5b:ac:a1:fd:07:
2e:de:60:5d:e5:0a:5e:1d:d6:4a:fc:41:be:a5:7c:
a0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E4:43:5E:15:1F:62:06:8E:00:6C:C0:4D:58:00:36:28:AF:01:1E
X509v3 Authority Key Identifier:
keyid:EC:CC:C2:B9:09:C7:C8:15:CA:CC:B5:FC:E5:31:C3:25:26:FA:DD:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/ZORDXhUfYgaOAGzATVgANiivAR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.68.196.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:56:df:d7:9d:0f:8d:b4:c3:31:01:a1:92:ba:48:ce:fb:47:
79:57:c4:b8:27:76:22:47:7d:a9:61:82:8f:bb:c1:43:45:f9:
a4:74:34:e0:6e:1c:3d:da:57:07:49:50:99:77:de:1f:95:7f:
14:cb:a9:3e:c8:9e:c1:71:c2:bd:c5:86:e1:d6:d2:d4:1d:fd:
0e:85:b9:99:a8:c5:39:34:01:e5:d8:2c:4d:b0:83:e3:e5:ea:
e4:b8:9e:08:06:96:1b:83:b4:37:14:9b:18:ee:0b:60:ad:bd:
0a:c4:e7:24:9e:24:62:1d:fe:15:d1:97:17:9c:61:97:15:7c:
15:bf:75:51:73:8b:bb:74:af:09:03:b6:4d:c8:b5:35:2a:1f:
59:9a:fc:e7:cc:45:28:dd:5d:8f:d5:2d:46:22:f1:e7:4d:9f:
7b:4b:76:42:dd:1a:ae:ea:2c:52:f3:4f:90:c9:18:4b:46:81:
3a:35:9b:13:da:65:eb:22:e9:3c:cd:74:42:a6:c9:67:d1:12:
bc:cb:a8:8b:b4:ab:31:b3:81:12:76:7a:2a:3c:1f:d0:c7:d4:
57:11:ed:84:54:34:b3:a2:d0:e6:bd:8b:eb:96:41:bf:ac:7a:
13:30:16:ba:d8:b5:6f:c3:e7:a3:b5:11:68:7e:bf:39:14:c3:
1a:af:04:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:38:24 2024 by rpki-client on console-ams.rpki-client.org