Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/zR1Snz9K2dWQ01YjH0XWfNMxPKE.roa
File: zR1Snz9K2dWQ01YjH0XWfNMxPKE.roa (raw, json)
Hash identifier: N3FFnqeKYqCQt6q81IYPY4bOnl9esm6HHbp//VlfWLI=
Subject key identifier: CD:1D:52:9F:3F:4A:D9:D5:90:D3:56:23:1F:45:D6:7C:D3:31:3C:A1
Certificate issuer: /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
Certificate serial: 01931CC236A1880EFE939DBA775CB116B49B
Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/zR1Snz9K2dWQ01YjH0XWfNMxPKE.roa
Signing time: Mon 11 Nov 2024 19:45:10 +0000
ROA not before: Mon 11 Nov 2024 19:45:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215524
IP address blocks: 212.24.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1c:c2:36:a1:88:0e:fe:93:9d:ba:77:5c:b1:16:b4:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
Validity
Not Before: Nov 11 19:45:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd1d529f3f4ad9d590d356231f45d67cd3313ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:36:30:d1:50:99:11:21:11:31:23:19:f4:22:
bb:0f:67:c6:a7:c6:c3:7b:12:cd:28:b6:0d:83:a4:
51:e1:bb:ad:b5:a6:47:bb:db:d5:c8:03:f4:15:6f:
30:82:e9:cf:de:fd:67:1f:56:9d:39:a7:39:dd:55:
9f:ed:37:ed:1e:5e:b1:da:03:26:77:3f:0d:e4:5c:
3f:47:12:c7:21:16:1f:83:81:9b:99:9a:0a:49:05:
56:55:c1:a8:9c:9e:3c:a7:71:f7:61:4d:0a:61:00:
44:66:fa:c0:46:13:40:8a:2e:ab:ec:d0:b5:5e:1e:
bc:74:c9:60:d9:00:99:d8:e0:50:b6:e5:f1:27:dc:
ff:e8:40:47:f4:b9:cc:03:b8:4e:70:ac:bf:b3:da:
32:ed:03:b7:12:8b:7d:e4:86:b8:ea:5e:ac:79:9f:
48:8e:30:55:78:12:20:df:63:56:8e:a4:9b:e3:ce:
76:ac:93:95:a8:cb:07:d8:66:ea:25:af:f7:a8:a0:
16:e6:5e:f5:8c:61:3b:df:83:4b:c8:7e:8f:25:69:
1b:68:e5:88:58:9a:ff:c3:0e:50:5e:03:99:d8:cc:
05:48:15:10:fc:9b:f2:b1:7c:24:9c:2a:5b:d5:f0:
01:93:0d:0c:cf:dd:ca:a8:93:ae:b3:29:76:8c:6e:
f9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1D:52:9F:3F:4A:D9:D5:90:D3:56:23:1F:45:D6:7C:D3:31:3C:A1
X509v3 Authority Key Identifier:
keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/zR1Snz9K2dWQ01YjH0XWfNMxPKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.24.240.0/24
Signature Algorithm: sha256WithRSAEncryption
11:06:bd:6b:de:38:3b:d1:71:38:db:da:67:75:25:af:42:67:
37:e4:0a:8e:03:f3:34:a5:4c:4c:cc:51:ed:c5:a0:75:10:eb:
8f:24:11:8b:9c:00:32:13:12:50:82:5d:18:7f:db:65:e6:0b:
08:cb:38:83:18:36:ea:19:06:f9:bb:d9:aa:cd:cb:22:76:89:
43:86:ac:7f:82:78:9b:49:61:d8:92:05:69:19:3c:bb:dd:0b:
ba:bb:df:6b:61:e0:f0:5e:21:26:64:87:6b:32:3a:d1:01:08:
40:1e:15:83:fc:bb:95:d8:e7:b0:bc:20:73:03:62:55:d0:1f:
93:c1:71:f8:e9:a9:d7:2c:6f:bc:13:68:76:82:72:a1:4b:b2:
5a:53:b8:27:21:7e:a9:44:25:8c:9f:bc:5c:ac:1f:d6:dc:8a:
0d:b4:d6:50:22:73:66:28:0f:5b:14:fe:76:30:a8:43:a8:15:
d6:7b:29:0a:2b:3b:8e:79:6b:79:30:49:3d:55:df:e1:4b:a6:
99:36:f5:f1:ca:5b:fc:f2:c5:b2:4d:e7:f7:c7:43:a9:bb:51:
7f:b9:b4:9b:36:94:b8:15:ac:ef:b3:47:e4:38:78:9e:0a:ab:
d9:b0:de:57:d8:43:02:87:09:53:f9:7c:d7:3d:6d:5d:3e:27:
47:bb:0a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:44:59 2024 by rpki-client on console-fra.rpki-client.org