Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/0zhPQ--MZEuA68J7Kx3GeoZfBSU.roa
File: 0zhPQ--MZEuA68J7Kx3GeoZfBSU.roa (raw, json)
Hash identifier: YfjddPQndLHMVNZP7iUgEdrvw3cpveMGyVgFH0H/Ly8=
Subject key identifier: D3:38:4F:43:EF:8C:64:4B:80:EB:C2:7B:2B:1D:C6:7A:86:5F:05:25
Certificate issuer: /CN=f7742725862b90bda4510a02e804fef3ad1142dc
Certificate serial: 018CC6B7BC17EF6D1A945DE37064491AA42E
Authority key identifier: F7:74:27:25:86:2B:90:BD:A4:51:0A:02:E8:04:FE:F3:AD:11:42:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/0zhPQ--MZEuA68J7Kx3GeoZfBSU.roa
Signing time: Mon 01 Jan 2024 20:29:39 +0000
ROA not before: Mon 01 Jan 2024 20:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208671
IP address blocks: 5.32.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:bc:17:ef:6d:1a:94:5d:e3:70:64:49:1a:a4:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7742725862b90bda4510a02e804fef3ad1142dc
Validity
Not Before: Jan 1 20:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3384f43ef8c644b80ebc27b2b1dc67a865f0525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:92:d2:6f:99:92:43:d8:67:6a:50:75:10:d4:
21:f8:08:4e:42:7a:2c:33:b8:dd:5f:9a:68:b3:f4:
3b:e9:50:ad:99:3a:c3:72:34:cc:ff:52:81:25:23:
f8:ad:bf:4b:36:a5:51:25:af:8b:60:0c:08:87:bb:
b9:41:cd:fc:0a:de:7c:de:85:d0:fd:08:1d:27:65:
a8:de:0d:f1:33:3f:39:44:05:a0:b4:e1:bd:a3:b5:
57:34:a8:91:1c:72:ed:f3:32:f9:af:74:49:7b:04:
83:7b:21:7b:96:82:9a:f9:38:95:56:96:08:8a:22:
8e:05:7b:58:48:9a:92:ae:8b:9f:96:ea:76:b6:32:
2e:cb:7b:5d:f7:6e:87:8c:c6:a9:34:c3:b3:c4:0b:
f2:d9:cf:fe:08:c5:1c:cc:d7:86:c4:b5:8a:04:f7:
62:88:71:03:1a:1f:9c:44:ea:72:cd:f3:61:cc:77:
f3:34:ac:f9:3e:29:16:6e:7c:7f:db:03:3a:16:d8:
45:9e:0d:04:eb:a2:83:47:51:d8:72:d3:97:29:06:
91:77:54:83:36:11:c0:93:30:7e:91:9c:d0:75:c1:
fd:07:14:ec:bc:01:45:4d:eb:e9:59:46:a0:a9:dc:
f3:f5:b6:fc:82:f9:81:e0:de:00:b5:69:84:87:02:
de:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:38:4F:43:EF:8C:64:4B:80:EB:C2:7B:2B:1D:C6:7A:86:5F:05:25
X509v3 Authority Key Identifier:
keyid:F7:74:27:25:86:2B:90:BD:A4:51:0A:02:E8:04:FE:F3:AD:11:42:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/0zhPQ--MZEuA68J7Kx3GeoZfBSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.32.174.0/24
Signature Algorithm: sha256WithRSAEncryption
87:d1:cb:0a:7f:08:bf:01:9a:e3:b9:01:2b:0b:df:22:33:a2:
c9:b4:6e:e9:e5:3c:20:fe:f1:c0:f6:a3:f4:0e:24:17:aa:12:
60:29:52:70:70:3a:17:79:78:2e:7c:5e:3a:31:9e:9a:49:e1:
d8:4d:e0:31:46:50:6d:83:90:e7:be:8d:14:67:8b:1c:18:b5:
6f:07:23:7f:41:0c:16:74:e5:2e:fd:41:75:53:33:f8:c3:87:
a8:07:a0:55:00:2c:da:e6:ce:b2:6d:e1:d8:0e:23:80:e7:14:
7d:8f:fd:8a:8f:68:7d:1a:43:ba:fc:ef:98:3a:9d:0c:0b:be:
a7:c5:fc:9e:14:6e:68:cd:d4:bf:ca:97:6b:c5:75:33:0d:ed:
95:d8:10:40:9e:8c:2a:fa:dc:f1:d3:50:96:3d:d0:c3:b0:88:
18:53:2c:1e:ff:d2:61:7b:47:dc:73:69:8a:f4:04:cb:58:c2:
60:3d:25:7a:79:3f:5c:b2:fa:34:71:c1:46:ef:85:2e:8c:bd:
6a:a7:a5:4e:a6:cd:de:d8:4b:0c:68:50:f6:32:27:b5:e3:ce:
0f:d8:d6:45:1a:6e:d9:86:45:55:2e:e1:d9:88:cf:a3:d0:ab:
19:c3:6d:83:89:a6:87:9d:8d:d3:51:81:ba:df:e4:c0:b6:74:
a2:54:f4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 22:40:51 2024 by rpki-client on console-fra.rpki-client.org