Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/ZR0rlzC3Gdd-AU-2Vb6T26jWj8E.roa
File: ZR0rlzC3Gdd-AU-2Vb6T26jWj8E.roa (raw, json)
Hash identifier: xSdvkcWqn3Ka56wzHlHTHWhcFTCEkIHiS2YPAyIroaM=
Subject key identifier: 65:1D:2B:97:30:B7:19:D7:7E:01:4F:B6:55:BE:93:DB:A8:D6:8F:C1
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 018CCA2BB3C428E05535BE7E8C45095C6C4F
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/ZR0rlzC3Gdd-AU-2Vb6T26jWj8E.roa
Signing time: Tue 02 Jan 2024 12:35:10 +0000
ROA not before: Tue 02 Jan 2024 12:35:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34443
IP address blocks: 85.248.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:b3:c4:28:e0:55:35:be:7e:8c:45:09:5c:6c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 2 12:35:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=651d2b9730b719d77e014fb655be93dba8d68fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ee:0c:61:33:6f:da:5e:c5:a6:34:61:d5:91:
b8:96:1b:49:33:bb:36:2a:48:dd:02:7f:f6:da:ab:
cf:a2:14:13:dc:9d:31:14:df:8b:2f:88:7e:44:39:
78:6f:38:61:b1:bf:3f:7c:41:57:05:69:1f:e8:50:
27:96:cd:d5:52:5f:be:65:2a:63:98:88:c4:5f:b5:
46:7f:01:83:23:22:87:a2:b6:ee:14:6d:bb:58:67:
a8:d4:3a:14:e8:34:2a:ed:ba:2c:f3:a5:96:29:a8:
c7:96:2b:06:6f:b2:42:94:4a:61:67:b6:e2:24:12:
a7:56:74:bb:b8:38:9c:a2:5e:7e:9e:fa:8c:fc:29:
3d:96:ed:62:73:2d:ae:6b:59:c0:79:8a:9d:fe:0f:
86:32:9d:4b:7f:31:7e:4a:52:28:d5:42:a9:6a:3e:
7e:da:56:58:ea:97:a3:1e:d5:b5:51:e4:76:fb:af:
6c:3c:2c:bf:86:ad:ff:af:d9:96:31:5a:7e:b1:1b:
e9:e8:92:1a:60:07:3a:14:b4:8f:dc:10:42:2b:c4:
32:5c:92:a4:04:2c:9b:75:85:b2:47:2f:79:67:00:
7e:e5:08:ae:91:cf:99:15:25:6a:55:28:78:da:f0:
30:6e:8b:50:ab:98:97:ac:43:95:5f:de:09:9c:d0:
1b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:1D:2B:97:30:B7:19:D7:7E:01:4F:B6:55:BE:93:DB:A8:D6:8F:C1
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/ZR0rlzC3Gdd-AU-2Vb6T26jWj8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.248.235.0/24
Signature Algorithm: sha256WithRSAEncryption
15:01:37:2a:5d:ae:ac:a8:d9:86:60:61:a8:3c:8b:58:e7:0a:
ca:a5:e2:c7:ed:1a:b9:a3:e1:34:67:cc:41:b7:ef:3f:a8:8c:
6d:3b:ee:a5:0f:cf:d8:99:f0:15:06:40:37:dd:0b:4e:0e:79:
99:f4:9b:62:a8:34:fd:54:a6:aa:52:c6:e3:d1:13:13:67:0d:
ad:4c:88:d2:c0:cd:6d:6a:b8:4c:15:89:3e:f0:37:65:6d:62:
0b:91:46:7e:7a:7e:69:b2:56:7c:c1:e3:a0:d5:9e:40:8e:dd:
b5:3c:af:61:5a:6c:52:fa:18:67:87:84:43:cc:40:57:3e:01:
42:8a:9c:0c:ef:70:da:b8:58:c7:e4:85:2a:ae:b2:2a:e3:99:
d1:94:f9:4c:f9:f2:42:7c:08:99:25:43:8f:fc:e0:9a:09:20:
57:f5:ad:85:17:c9:58:e0:b9:14:b1:57:d4:59:12:28:9a:0f:
72:b0:bc:35:33:b6:c8:49:e7:de:90:a2:e0:cc:b2:aa:51:d8:
51:b0:ab:0f:03:f5:7d:76:85:b5:5d:ba:94:19:94:31:a9:7c:
a2:7f:e2:6a:82:1f:99:56:43:19:1d:d1:d0:15:dd:70:0b:d1:
0d:63:4d:0d:40:a5:11:6d:38:39:95:5c:55:65:a9:10:f1:3f:
fe:da:6a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:09:30 2024 by rpki-client on console-fra.rpki-client.org