Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/zHcQhVbGffYSGy-Odn-d5dlCs64.roa
File: zHcQhVbGffYSGy-Odn-d5dlCs64.roa (raw, json)
Hash identifier: vtTsB7eCfGBw/lZ7chKmNr7lhs1qCmco21hLRcw+QLk=
Subject key identifier: CC:77:10:85:56:C6:7D:F6:12:1B:2F:8E:76:7F:9D:E5:D9:42:B3:AE
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 018CC2DB5A337A5CCAD8001296039CBE6A3B
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/zHcQhVbGffYSGy-Odn-d5dlCs64.roa
Signing time: Mon 01 Jan 2024 02:30:04 +0000
ROA not before: Mon 01 Jan 2024 02:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49036
IP address blocks: 93.191.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:5a:33:7a:5c:ca:d8:00:12:96:03:9c:be:6a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 1 02:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc77108556c67df6121b2f8e767f9de5d942b3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:85:80:fa:9b:a8:93:08:d2:0e:0f:38:60:72:
83:04:46:ca:5e:4c:2b:db:68:92:cd:01:58:f5:06:
4d:90:7f:47:8f:a2:ce:80:d3:47:e9:4f:6b:b9:e7:
8f:58:f9:e8:43:fc:c7:b4:28:34:fc:a8:30:a8:8c:
c7:41:e4:b5:65:ae:d3:02:86:fb:2b:71:8a:a5:18:
cb:ba:45:41:71:27:62:bc:a2:69:e7:b1:aa:da:36:
f9:af:21:f0:d0:8a:55:6a:2b:86:d2:7c:6c:9f:68:
f1:72:aa:62:25:f7:69:bf:95:5c:8a:fb:81:81:c2:
55:30:7f:09:6c:d6:dd:b9:70:ff:5d:a5:36:a1:a5:
1b:0b:b8:dc:65:c0:4d:fb:46:e6:ca:a1:aa:06:80:
65:ff:c6:69:ea:e2:bd:e8:86:40:71:ad:00:01:14:
62:d6:63:67:6e:dd:3d:46:55:9f:96:2f:b0:c9:f0:
1a:08:c6:5d:07:a3:22:cc:7f:9f:c7:b1:e5:73:63:
e5:2e:ba:f5:eb:ee:26:8b:4d:79:56:bf:ba:fe:17:
34:21:16:7d:2b:98:85:d9:31:21:65:57:b5:1a:b0:
73:bd:d9:97:4e:ea:ab:21:9f:bb:de:82:80:a3:89:
8f:e2:18:a9:6b:ab:28:07:e1:30:c6:6e:95:46:20:
71:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:77:10:85:56:C6:7D:F6:12:1B:2F:8E:76:7F:9D:E5:D9:42:B3:AE
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/zHcQhVbGffYSGy-Odn-d5dlCs64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.171.0/24
Signature Algorithm: sha256WithRSAEncryption
24:a3:82:b3:2a:55:71:5b:09:95:cc:93:c2:d3:e2:c4:d2:7b:
1e:61:10:a0:9a:7c:b4:f4:82:2d:a1:d7:8c:04:ca:e2:f6:63:
da:13:57:29:66:ac:c1:a5:a5:35:bf:13:39:6b:ca:71:fe:e5:
5f:01:c1:0c:e1:af:92:32:c5:c0:ea:5f:9a:67:5d:72:94:68:
a6:5a:12:6f:28:6e:0b:77:73:42:21:8c:fb:7c:d5:3c:c1:b3:
ff:62:34:22:b7:4b:cc:dc:f1:41:b0:da:88:2f:0c:5b:60:cc:
4e:9e:47:b5:a3:04:0b:77:ed:06:91:e4:56:ad:05:81:b8:f9:
43:35:fe:26:55:dc:74:df:10:aa:49:76:f6:22:e0:b7:b8:8d:
05:84:b8:9c:f2:0f:7b:4a:2b:4a:ae:97:4d:45:bf:9e:f9:eb:
fc:5f:96:4e:a2:f3:c6:83:88:96:be:32:84:5f:ca:21:f6:c3:
85:be:15:00:f9:e5:8f:30:b6:a7:fa:b0:a9:30:95:01:d8:ec:
03:68:42:d1:18:62:4c:8a:e2:ac:30:20:37:6e:5f:8f:cc:3b:
34:96:96:70:93:d0:1a:02:e1:c2:40:64:c7:04:7e:e9:9a:c4:
d4:79:b6:88:aa:85:ff:fe:34:de:53:79:4b:79:b2:d2:3b:49:
2b:e6:e5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:17:24 2024 by rpki-client on console-fra.rpki-client.org