Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/CMZjGcXgzb5XfN7a3tikJxjVQQc.roa
File: CMZjGcXgzb5XfN7a3tikJxjVQQc.roa (raw, json)
Hash identifier: T008GEva0pu8+91tVEhSOGj6h0vPJ7ksXJwX0XNOWkM=
Subject key identifier: 08:C6:63:19:C5:E0:CD:BE:57:7C:DE:DA:DE:D8:A4:27:18:D5:41:07
Certificate issuer: /CN=e74d3e5d994becd3f258c41df39f1f63ec563e1d
Certificate serial: 018CC26D4DE4661163BC7F43319181032845
Authority key identifier: E7:4D:3E:5D:99:4B:EC:D3:F2:58:C4:1D:F3:9F:1F:63:EC:56:3E:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/500-XZlL7NPyWMQd858fY-xWPh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/CMZjGcXgzb5XfN7a3tikJxjVQQc.roa
Signing time: Mon 01 Jan 2024 00:29:52 +0000
ROA not before: Mon 01 Jan 2024 00:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49553
IP address blocks: 130.193.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/500-XZlL7NPyWMQd858fY-xWPh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:4d:e4:66:11:63:bc:7f:43:31:91:81:03:28:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e74d3e5d994becd3f258c41df39f1f63ec563e1d
Validity
Not Before: Jan 1 00:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08c66319c5e0cdbe577cdedaded8a42718d54107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d3:12:26:60:37:fe:65:71:ae:dc:f7:cd:3a:
5f:9b:ca:23:73:b1:2d:22:f3:17:a9:ef:44:72:94:
fb:d8:4e:49:82:77:c3:fc:99:1b:df:1e:40:8e:c8:
f4:80:13:06:fd:35:d8:8b:c1:18:4e:73:5c:6e:39:
3b:44:8a:c3:1f:44:66:39:5f:ed:b2:85:6f:c4:8e:
91:a3:f1:d6:0c:6f:d8:71:15:f7:d8:8f:78:47:34:
e6:3a:ff:0a:2b:fd:e6:f8:66:41:ea:b0:dc:5d:c5:
28:04:64:ab:17:a3:e3:e7:a7:70:42:95:a5:59:43:
e0:fc:48:df:41:d8:b4:13:a3:e6:0f:e2:fc:c1:f2:
10:c6:15:e7:23:e2:7e:8f:10:77:00:5f:a6:05:bf:
6b:72:60:2c:d6:3d:1e:90:c5:ce:43:55:22:d1:af:
6d:e0:6b:7a:15:28:7a:7e:d0:2b:b3:81:9b:60:c8:
f2:15:89:9e:82:5f:51:74:5d:a9:a9:eb:91:88:65:
8c:19:8c:d9:67:d0:83:40:42:c3:d9:24:20:40:fd:
7a:5b:14:00:ee:d2:b1:0b:0a:1d:b4:6f:da:a6:ff:
e4:7c:24:a6:35:81:d4:10:ad:a0:49:69:5d:6d:ae:
12:51:47:cd:ed:15:c7:31:9b:dd:fd:6b:27:46:e2:
e5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C6:63:19:C5:E0:CD:BE:57:7C:DE:DA:DE:D8:A4:27:18:D5:41:07
X509v3 Authority Key Identifier:
keyid:E7:4D:3E:5D:99:4B:EC:D3:F2:58:C4:1D:F3:9F:1F:63:EC:56:3E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/500-XZlL7NPyWMQd858fY-xWPh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/CMZjGcXgzb5XfN7a3tikJxjVQQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.72.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:2b:f5:6a:8a:95:a9:e6:14:45:8f:82:59:38:b8:2a:be:ab:
0b:32:b1:c7:78:81:45:85:50:01:5f:6c:3e:f3:26:82:56:18:
77:c2:d4:7e:5d:d2:d7:34:33:5b:a4:6b:dc:8e:fb:49:ca:21:
21:21:64:cf:a5:fc:d4:ef:50:52:52:98:e3:82:20:b8:be:9d:
40:90:b0:a7:49:5f:6c:da:ee:1f:39:97:c6:6e:43:cc:d2:c5:
b5:b8:30:12:75:cc:76:03:5f:25:8b:cb:ef:4c:d3:87:d5:47:
cd:28:1c:6f:97:e6:8c:28:6b:8f:d1:9b:4e:b5:d4:18:32:d7:
0e:af:27:d2:ce:83:a5:16:1a:fd:f7:68:cb:2c:ab:9e:b6:77:
08:30:81:7d:d3:86:fc:5e:98:c2:bf:54:9d:08:25:d6:de:68:
93:71:1e:03:b6:9e:cd:58:80:0b:b1:7e:ad:36:95:c6:c2:1b:
e2:99:0e:92:3f:fe:48:93:3d:dc:a7:8e:6e:a0:b0:39:1d:54:
cf:0b:e9:01:7c:8f:2d:82:a4:8e:ad:92:c0:95:e8:86:82:82:
c6:64:0c:3a:5c:21:d2:b3:ae:f5:7d:28:0f:c7:02:5c:7e:e8:
a3:6f:83:42:43:a1:c0:ea:73:9f:7e:2e:ad:b7:0d:1d:6d:76:
45:1d:2b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 16:03:06 2024 by rpki-client on console-fra.rpki-client.org