Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Zox3CcofCSvIDHsmA6mGuAZhBhs.roa
File: Zox3CcofCSvIDHsmA6mGuAZhBhs.roa (raw, json)
Hash identifier: KwpaM1ijr8FAxmlA6/EtRpWIxnlXxdG4JHvs2dAO7c0=
Subject key identifier: 66:8C:77:09:CA:1F:09:2B:C8:0C:7B:26:03:A9:86:B8:06:61:06:1B
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01935324A3D3F054A8FE97674F6D252CE731
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Zox3CcofCSvIDHsmA6mGuAZhBhs.roa
Signing time: Fri 22 Nov 2024 09:12:10 +0000
ROA not before: Fri 22 Nov 2024 09:12:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62425
IP address blocks: 195.178.148.0/23 maxlen: 24
195.178.151.0/24 maxlen: 24
212.111.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 18:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:24:a3:d3:f0:54:a8:fe:97:67:4f:6d:25:2c:e7:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Nov 22 09:12:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=668c7709ca1f092bc80c7b2603a986b80661061b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:42:6b:bb:91:40:6b:b5:28:8d:0d:c6:84:e2:
af:68:ea:e1:66:9f:83:af:8f:83:ae:75:2e:60:64:
a7:16:ec:8d:5e:db:fe:c2:eb:02:b9:34:a9:88:3e:
95:8b:cb:b3:bd:a6:38:69:03:e0:b1:19:5e:59:0b:
c5:cb:80:d4:27:c5:a6:8e:a4:6d:83:c3:6b:d5:95:
09:1e:8c:1c:4d:9a:f1:d6:93:8f:e8:e0:cf:c6:a0:
50:39:3a:08:a0:43:09:af:bb:5d:dd:44:5a:90:1f:
a0:6f:4e:9a:99:21:f6:6d:8a:15:ce:0c:2a:43:d3:
84:e8:00:a3:11:80:3a:44:cc:a6:50:e5:5b:4b:18:
28:4f:05:09:1c:89:fe:b7:09:90:e2:d9:12:7d:2f:
bb:88:da:c1:d5:a0:43:49:22:89:ef:f1:27:4a:4c:
b5:2d:58:b3:46:e9:c0:78:42:65:81:19:74:60:e5:
4a:8a:d2:d1:3d:7b:84:62:af:e2:18:aa:a1:24:0f:
93:ee:b7:bd:53:3c:68:3e:3b:00:2c:33:1a:4b:96:
3b:97:90:87:ef:a8:de:c2:69:d6:6e:ad:7b:a0:67:
70:eb:89:40:a0:55:91:ae:f7:6a:2b:5a:b6:bc:56:
ef:0d:d2:3e:42:83:fd:78:aa:b9:e4:38:57:96:f8:
71:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8C:77:09:CA:1F:09:2B:C8:0C:7B:26:03:A9:86:B8:06:61:06:1B
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Zox3CcofCSvIDHsmA6mGuAZhBhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.148.0/23
195.178.151.0/24
212.111.216.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:c1:8e:7e:4a:8b:bb:bb:8f:88:33:32:45:50:a6:8b:ac:8d:
84:c6:ec:9a:53:38:db:04:79:0f:cc:3e:00:59:bf:a0:61:20:
c4:c1:6a:11:5b:c8:a8:51:36:46:d5:78:34:93:91:36:3e:44:
82:4b:26:7d:6f:79:1f:37:23:76:38:18:72:fe:14:42:b2:f5:
96:5f:54:83:f3:ea:25:55:d6:3d:5b:4c:60:68:5f:68:e0:3f:
68:3d:3e:94:88:0e:6b:46:6a:aa:3d:a7:5d:b2:9d:fd:4e:fa:
d9:79:77:56:b2:c9:28:10:03:15:6c:cc:51:0c:4b:47:0c:01:
46:0c:b2:01:96:02:c5:b2:a2:12:51:48:db:c0:27:2b:5f:54:
a5:77:b2:53:01:46:e1:88:36:99:a1:2d:a7:1d:11:50:d5:c5:
bd:e9:d7:da:a9:d7:9e:9f:1e:f4:2d:e2:59:ad:36:05:e9:98:
29:7e:b0:ad:06:6c:54:e2:1e:67:35:9e:1b:25:db:89:62:4e:
0b:a9:67:43:4e:ac:77:24:99:c0:64:0e:25:07:67:ac:56:f6:
9d:a3:7d:ff:15:e3:d3:7a:2f:36:7b:aa:d4:19:61:93:b2:4f:
2c:14:05:72:ee:45:08:74:2b:b6:68:6e:42:3f:46:3f:64:5f:
6a:39:41:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:10:33 2024 by rpki-client on console-ams.rpki-client.org