Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/Zd13l7OEdiOW1CPf4FB58BJDvIc.roa
File: Zd13l7OEdiOW1CPf4FB58BJDvIc.roa (raw, json)
Hash identifier: IS3oYOOjb5cOZx7MmufVpCCIqw75HHSunxbXGrJSlQg=
Subject key identifier: 65:DD:77:97:B3:84:76:23:96:D4:23:DF:E0:50:79:F0:12:43:BC:87
Certificate issuer: /CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Certificate serial: 018F76EB089CCFA8C83900692D4E5FC8C7BE
Authority key identifier: 7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/Zd13l7OEdiOW1CPf4FB58BJDvIc.roa
Signing time: Tue 14 May 2024 11:44:25 +0000
ROA not before: Tue 14 May 2024 11:44:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29119
IP address blocks: 5.252.8.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 00:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:76:eb:08:9c:cf:a8:c8:39:00:69:2d:4e:5f:c8:c7:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Validity
Not Before: May 14 11:44:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65dd7797b384762396d423dfe05079f01243bc87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7a:48:43:ce:0e:db:ee:93:9e:6d:8d:05:2e:
df:05:03:9a:e6:ae:5d:37:0a:4c:a5:97:17:dd:3e:
85:fa:92:28:a3:33:d6:d9:a9:33:0b:2b:fe:46:ba:
cc:21:7b:c4:f7:64:79:cf:1e:fd:71:46:54:ec:30:
b9:41:18:1c:cd:8a:67:ed:2e:6d:b4:66:69:42:8e:
db:40:72:34:e1:fd:4c:c7:82:c0:60:4a:2e:e7:8f:
ce:1d:90:f7:2f:0d:7a:33:bf:c6:32:18:a1:f9:1c:
2d:71:0c:80:c1:af:7a:61:af:b7:6a:7a:82:0d:5d:
36:9f:f5:61:a3:67:4b:f1:f6:7d:bc:ba:ba:d5:1e:
92:ef:18:70:fe:ba:cb:87:6c:e3:9d:e3:d5:f3:3c:
7c:33:e4:6b:34:fc:d7:4d:c5:58:ff:74:51:09:4f:
09:bd:43:8e:ec:c7:b8:28:c6:77:3f:60:32:25:99:
c8:bb:2f:67:cb:06:16:49:dd:2b:d8:58:10:94:c4:
62:d3:af:a2:07:a6:9c:7f:92:71:d1:18:7e:7b:1d:
d8:f7:4e:3b:48:09:f5:28:ab:9e:6e:66:89:9a:8b:
a1:fd:69:9e:e5:c5:55:10:b4:6c:49:e8:4a:59:fc:
26:73:55:97:78:72:3e:e1:04:cb:d3:b4:da:cc:96:
ce:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DD:77:97:B3:84:76:23:96:D4:23:DF:E0:50:79:F0:12:43:BC:87
X509v3 Authority Key Identifier:
keyid:7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/Zd13l7OEdiOW1CPf4FB58BJDvIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.8.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:86:b8:6a:58:58:10:47:b9:bf:30:0a:f2:2f:04:3b:ae:0b:
44:2a:7e:f0:40:05:58:ca:1c:5b:4a:88:c5:aa:b6:a7:53:ff:
7f:04:05:92:f9:dc:8a:bc:de:94:0d:03:d3:3d:cf:ae:4b:ec:
c4:ac:d5:0e:65:7d:c6:11:70:30:04:53:0e:29:99:14:11:68:
07:71:53:74:a7:a5:5c:6a:5f:53:de:a0:d4:ce:f7:04:6c:f0:
af:0c:ab:19:6b:79:12:a2:46:83:41:97:c8:5d:19:dc:e3:e8:
db:06:04:2d:34:3b:d0:01:b3:73:29:1d:14:9e:1a:d3:ae:ae:
ee:3a:61:3b:55:43:b6:95:c3:64:7f:e9:8e:b4:f6:8d:7a:42:
da:fc:42:8e:3b:59:5c:7f:4e:29:46:27:36:23:a3:93:b4:d1:
3c:35:25:df:8a:7f:49:58:78:70:f2:5e:8c:56:1e:4f:ea:10:
53:ec:6c:50:24:88:14:b6:0e:2c:7c:d3:b1:37:30:24:d8:7c:
bd:25:4b:7d:d8:a7:56:1f:b3:02:82:57:35:e8:85:d3:38:f1:
56:a4:c7:83:0e:3a:36:6d:bc:c5:c0:cd:33:2c:1d:47:01:a0:
f1:3f:3e:95:f5:b3:b6:25:6a:fa:ac:8f:32:10:df:20:c6:1f:
c1:88:dc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:40:14 2024 by rpki-client on console-fra.rpki-client.org