Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/ZTYeh_n02iGLzxHzR1gqgtl4aSg.roa
File: ZTYeh_n02iGLzxHzR1gqgtl4aSg.roa (raw, json)
Hash identifier: 2VZrqUCUuHXndsnh/UxFz0/ir3M6s1L7oWIJvXkmu5Q=
Subject key identifier: 65:36:1E:87:F9:F4:DA:21:8B:CF:11:F3:47:58:2A:82:D9:78:69:28
Certificate issuer: /CN=c3fadf44e101e165c87bb4d0efccf94bd67e2a35
Certificate serial: 018CC86FCF87400B73F3024CFA9FD4F42FB1
Authority key identifier: C3:FA:DF:44:E1:01:E1:65:C8:7B:B4:D0:EF:CC:F9:4B:D6:7E:2A:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_rfROEB4WXIe7TQ78z5S9Z-KjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/ZTYeh_n02iGLzxHzR1gqgtl4aSg.roa
Signing time: Tue 02 Jan 2024 04:30:19 +0000
ROA not before: Tue 02 Jan 2024 04:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43237
IP address blocks: 194.8.72.0/23 maxlen: 23
195.114.20.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/w_rfROEB4WXIe7TQ78z5S9Z-KjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/w_rfROEB4WXIe7TQ78z5S9Z-KjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/w_rfROEB4WXIe7TQ78z5S9Z-KjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:cf:87:40:0b:73:f3:02:4c:fa:9f:d4:f4:2f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3fadf44e101e165c87bb4d0efccf94bd67e2a35
Validity
Not Before: Jan 2 04:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65361e87f9f4da218bcf11f347582a82d9786928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:98:0e:92:9e:9d:4e:b0:9f:b6:74:82:43:e7:
eb:10:84:8c:7f:88:c8:3c:42:37:b8:21:6c:49:b9:
84:d9:44:fd:59:b1:50:a8:24:83:50:a3:ff:b9:d2:
ed:50:fb:d3:51:39:d8:3b:96:2d:f7:14:0a:43:f6:
d6:77:99:29:0b:35:25:02:74:d9:14:82:41:fe:94:
0f:2a:d3:9c:80:42:b0:87:53:a0:07:c9:a3:b3:98:
d8:f5:b4:bf:2c:cd:10:27:15:1d:f8:7b:28:4d:99:
31:f4:e7:62:61:6c:66:71:ad:af:42:c4:cd:1c:aa:
dd:49:be:d0:40:9d:ad:a0:72:16:c2:c2:19:bd:b8:
b3:df:e7:46:1d:67:c6:1e:d2:26:e7:43:0e:33:88:
30:05:2e:31:63:da:84:d8:9e:9c:8a:ce:f9:82:3c:
58:81:cd:2c:95:65:1d:a3:b3:35:f0:40:b7:ec:c1:
86:63:bb:e3:d8:92:2e:97:4a:8f:31:04:26:b6:90:
12:9c:bc:37:dd:af:b5:b2:ea:0c:f1:e3:69:a2:79:
01:c2:ea:20:e0:08:50:c9:50:03:28:d2:7d:10:9d:
f9:d9:ab:de:cc:21:82:09:43:6e:2d:73:0d:80:25:
de:cf:27:1f:7a:60:87:ef:b6:c1:e8:74:ee:f6:5e:
c3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:36:1E:87:F9:F4:DA:21:8B:CF:11:F3:47:58:2A:82:D9:78:69:28
X509v3 Authority Key Identifier:
keyid:C3:FA:DF:44:E1:01:E1:65:C8:7B:B4:D0:EF:CC:F9:4B:D6:7E:2A:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_rfROEB4WXIe7TQ78z5S9Z-KjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/ZTYeh_n02iGLzxHzR1gqgtl4aSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/w_rfROEB4WXIe7TQ78z5S9Z-KjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.72.0/23
195.114.20.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:ff:01:70:4d:d5:23:02:da:db:66:51:32:f6:c1:97:f8:b5:
c2:fd:fb:2b:4c:ec:0a:54:4d:5c:6e:9b:9a:e7:62:5a:a4:4c:
c8:c7:24:41:77:be:7b:43:9b:f9:7f:e3:55:24:5a:d8:47:bf:
4e:9c:b7:7f:53:ae:cf:3e:33:fb:cd:9b:c8:20:7d:59:33:52:
f3:6f:14:80:6c:7c:a6:01:7a:ac:f1:7a:e7:61:d4:fd:69:da:
89:e3:2a:60:a5:59:88:38:74:f5:1d:5a:82:30:29:f7:95:cd:
80:5b:16:41:34:5b:ae:b1:83:2e:df:98:a1:d3:4f:6e:c1:d4:
1b:9b:65:08:0c:d8:26:68:bd:f2:ba:5a:c3:ba:d0:68:47:fc:
1b:46:06:1b:df:bf:dc:de:32:33:fc:8a:ce:ce:69:ac:f9:d6:
68:6a:3c:6b:c5:a7:18:7b:d7:bf:33:e1:89:0a:5c:f4:14:04:
cb:9a:e9:12:74:de:6f:91:7e:ca:69:eb:94:3e:c3:54:7b:56:
b4:ca:cd:41:37:2b:90:fe:c5:ef:73:33:58:df:4b:93:09:35:
c4:d4:e3:84:71:6b:be:71:b9:a6:d4:bf:4b:d4:75:6f:c6:c9:
e2:fd:03:12:05:7d:ab:e5:77:48:90:48:f7:db:ae:4b:c4:f1:
bd:03:76:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:39:35 2024 by rpki-client on console-ams.rpki-client.org