Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/Z3nf2cPl4SWEZMtHwUX5WMUR3SI.roa
File: Z3nf2cPl4SWEZMtHwUX5WMUR3SI.roa (raw, json)
Hash identifier: cgLqVMJ0lawDVO6ynODraHsWuPo1S9munT1YfQObjHU=
Subject key identifier: 67:79:DF:D9:C3:E5:E1:25:84:64:CB:47:C1:45:F9:58:C5:11:DD:22
Certificate issuer: /CN=0f521d269526c7aee38e4fb2454b2f087f69feb7
Certificate serial: 018CE0219C055FC543CF95D6D402570A74F7
Authority key identifier: 0F:52:1D:26:95:26:C7:AE:E3:8E:4F:B2:45:4B:2F:08:7F:69:FE:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/Z3nf2cPl4SWEZMtHwUX5WMUR3SI.roa
Signing time: Sat 06 Jan 2024 18:55:48 +0000
ROA not before: Sat 06 Jan 2024 18:55:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16371
IP address blocks: 193.3.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e0:21:9c:05:5f:c5:43:cf:95:d6:d4:02:57:0a:74:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f521d269526c7aee38e4fb2454b2f087f69feb7
Validity
Not Before: Jan 6 18:55:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6779dfd9c3e5e1258464cb47c145f958c511dd22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3d:16:11:f1:a5:88:8f:22:1e:fa:61:69:e5:
34:56:6b:a0:3b:7d:14:97:b4:56:80:4b:b6:08:85:
ae:e5:ac:0a:b3:c6:d4:19:73:0f:5a:c5:6e:91:42:
93:21:02:8e:1a:b6:ea:a8:1d:9b:74:e7:a2:14:2b:
7c:23:68:c7:74:f7:9e:6b:ee:b5:94:6c:32:de:10:
8e:3c:36:de:df:8d:ea:5e:53:28:f0:36:00:be:b5:
4f:d6:2f:cf:ec:ac:57:5e:51:81:b0:ba:2f:b5:e6:
4c:3e:6e:a2:df:6d:1f:3f:b5:1f:47:55:19:93:85:
fe:e3:d9:23:94:5b:dc:56:15:6e:4f:a5:36:43:f3:
a0:bb:a9:f7:e8:5a:37:fd:4a:fe:89:5a:6a:e4:45:
92:b1:4e:8a:c3:ea:05:43:09:92:41:2e:0b:e9:9b:
46:b4:73:eb:dd:ea:a9:63:4c:f5:a6:f0:38:8c:cc:
d0:a0:69:a2:5f:fd:e1:7c:e9:2d:14:cb:3e:c9:cf:
5a:0f:8a:f3:2e:06:3d:1a:29:e7:09:50:87:3d:5f:
0a:55:23:24:13:0e:08:1f:76:c1:6d:3d:fd:e4:05:
a6:9f:ed:71:77:c2:74:5d:a4:54:40:cc:ea:51:e1:
64:cf:90:ed:55:3b:18:e3:a6:12:57:a4:da:2f:bd:
68:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:79:DF:D9:C3:E5:E1:25:84:64:CB:47:C1:45:F9:58:C5:11:DD:22
X509v3 Authority Key Identifier:
keyid:0F:52:1D:26:95:26:C7:AE:E3:8E:4F:B2:45:4B:2F:08:7F:69:FE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/Z3nf2cPl4SWEZMtHwUX5WMUR3SI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.48.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:f7:ff:ed:eb:0e:ee:c5:39:b5:12:c4:b3:c2:69:16:68:fb:
13:60:d6:7b:79:8a:d5:db:25:0d:66:ad:7a:75:0c:c5:b3:19:
e0:f1:8a:5e:03:d0:42:cd:8f:0a:8a:04:a5:6c:e3:86:12:1b:
18:19:ec:25:fa:12:95:8b:5f:95:d0:d9:e1:eb:c2:98:f2:7e:
d8:86:de:23:f9:3d:e8:d2:a3:81:d3:46:4e:8b:0d:43:9f:ad:
3b:8f:3a:d2:87:68:d1:67:6f:3f:9b:97:dd:fa:27:a1:9a:a7:
c7:7f:2c:0e:39:a9:84:7a:27:82:5b:7e:04:82:75:3f:b6:f8:
22:c5:9c:38:c0:81:01:2e:31:33:4b:61:d0:c6:d8:5d:ea:94:
bb:a3:0e:9d:4e:e6:8b:ca:c6:48:ac:7a:97:28:bb:6d:06:2d:
a0:73:2c:02:dd:43:35:4a:bc:d3:28:b1:71:e9:a0:7d:49:ef:
b5:15:e5:e9:27:e6:b8:43:c2:41:ff:d5:67:e5:b5:de:fe:87:
ff:a5:7b:82:8a:11:db:d5:2c:42:8a:28:c5:90:aa:03:71:01:
7f:c0:eb:c4:ab:96:7e:b6:09:f0:18:53:68:5f:79:53:33:83:
73:f3:fa:42:09:48:bc:38:cd:aa:12:86:ed:f3:9d:a3:12:f3:
77:10:d9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:56:11 2024 by rpki-client on console-fra.rpki-client.org