Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/zITW6YxGrwiJv01_mujSvgsfE6Y.roa
File: zITW6YxGrwiJv01_mujSvgsfE6Y.roa (raw, json)
Hash identifier: I4KHvXcdEGXNCK1gyqNeVJL3djX5sq2UOaeO+5Xd2sw=
Subject key identifier: CC:84:D6:E9:8C:46:AF:08:89:BF:4D:7F:9A:E8:D2:BE:0B:1F:13:A6
Certificate issuer: /CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
Certificate serial: 018CC801554E6CD89E132B021885AAE587CA
Authority key identifier: 81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/zITW6YxGrwiJv01_mujSvgsfE6Y.roa
Signing time: Tue 02 Jan 2024 02:29:39 +0000
ROA not before: Tue 02 Jan 2024 02:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41229
IP address blocks: 195.64.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft
rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:55:4e:6c:d8:9e:13:2b:02:18:85:aa:e5:87:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
Validity
Not Before: Jan 2 02:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc84d6e98c46af0889bf4d7f9ae8d2be0b1f13a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3d:f8:1a:af:9a:46:df:e4:e3:94:45:42:e4:
75:21:40:6c:0b:59:c9:4d:c4:6c:e5:e9:d8:51:15:
73:97:c0:f9:d2:2d:cc:4c:2f:72:0a:c8:7a:84:c7:
44:b7:2b:53:a4:3a:3c:0b:9d:5b:46:f2:5d:87:8e:
68:01:42:a2:25:04:cf:ef:ba:3d:95:9a:00:5d:f1:
e3:4b:92:28:69:46:b1:1f:cc:42:58:b3:dd:f0:f7:
6b:21:dc:79:a5:4e:4b:76:ca:79:cb:0a:43:72:91:
db:b3:0e:c3:1f:39:30:72:f1:f6:af:09:41:71:92:
f8:d6:5f:64:ed:82:02:01:f5:51:37:5b:b8:90:5c:
88:20:4c:ac:55:02:42:25:a4:6f:cd:64:74:56:70:
af:8b:d8:fb:21:9d:af:05:cd:fe:0f:50:f6:46:48:
0f:29:3b:3f:9c:58:e5:e7:2a:df:76:0c:a8:2f:7e:
ab:30:4f:18:5e:6f:16:23:05:83:b3:f1:3f:ed:b8:
dd:a6:22:75:fd:b7:29:bb:f3:5d:65:24:e4:85:65:
d1:32:df:e8:81:79:1e:27:26:56:a9:ca:91:c4:86:
da:0e:03:62:36:5f:23:28:66:ac:e2:6e:4d:c3:79:
80:58:a0:58:c3:21:1c:98:0f:e0:d3:6b:d4:d6:f2:
06:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:84:D6:E9:8C:46:AF:08:89:BF:4D:7F:9A:E8:D2:BE:0B:1F:13:A6
X509v3 Authority Key Identifier:
keyid:81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/zITW6YxGrwiJv01_mujSvgsfE6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.252.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:4b:f6:cc:5f:4f:ec:87:5c:04:4e:f9:9a:39:27:40:2d:54:
8f:2e:8d:83:ef:ce:66:ce:f1:b6:bb:f5:36:97:3a:95:6b:13:
07:61:65:9e:69:9b:ba:22:03:29:1f:fc:47:96:ba:bc:ab:f1:
9f:28:0b:e1:db:f5:62:9b:f8:d8:96:72:97:20:f5:09:28:21:
3e:e9:16:dd:83:2e:38:4a:b3:70:e4:0f:29:69:c0:c6:c0:23:
71:8c:9b:67:57:4d:42:cc:11:c7:fb:38:c6:e1:28:9f:fb:12:
52:30:b8:d7:0a:73:13:ce:f9:1e:84:64:3d:87:34:14:2a:11:
93:d8:c5:45:11:3b:0e:18:12:73:c1:f1:8f:5e:ff:d1:6f:eb:
b8:bc:c0:8d:0d:c6:bb:cd:c3:58:06:23:07:8a:53:cb:a5:4a:
15:10:3f:74:4f:0a:1b:43:2d:de:5d:17:94:27:06:e3:d8:ac:
ba:78:2f:34:97:a6:e2:a1:33:89:af:6e:61:75:78:ef:39:f1:
39:a0:85:e3:ad:f6:65:91:16:fc:7d:fc:7d:e2:4e:4d:39:db:
a2:86:24:1e:68:96:65:15:b2:f6:86:1f:f9:31:b7:ec:2c:73:
34:41:14:ed:2a:d3:fe:f8:7c:d4:49:84:ed:02:4b:6e:e1:66:
d4:ec:b3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:00:31 2024 by rpki-client on console-fra.rpki-client.org