Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/06eab0-6c6e-4c95-bbdc-916047062a22/1/Z_PWIiLpTxj_PchWQoCOxVCeKHw.roa
File: Z_PWIiLpTxj_PchWQoCOxVCeKHw.roa (raw, json)
Hash identifier: 7YdVHqj70hyseQtR2kAYWvb++lq31LrSnkvOWUwdxvc=
Subject key identifier: 67:F3:D6:22:22:E9:4F:18:FF:3D:C8:56:42:80:8E:C5:50:9E:28:7C
Certificate issuer: /CN=9c1cd1b3c8772956fa85535a8464b4ca19663ade
Certificate serial: 018CC64B05389847452D0B5EF948378E275E
Authority key identifier: 9C:1C:D1:B3:C8:77:29:56:FA:85:53:5A:84:64:B4:CA:19:66:3A:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBzRs8h3KVb6hVNahGS0yhlmOt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/06eab0-6c6e-4c95-bbdc-916047062a22/1/Z_PWIiLpTxj_PchWQoCOxVCeKHw.roa
Signing time: Mon 01 Jan 2024 18:30:54 +0000
ROA not before: Mon 01 Jan 2024 18:30:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203374
IP address blocks: 185.136.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/06eab0-6c6e-4c95-bbdc-916047062a22/1/nBzRs8h3KVb6hVNahGS0yhlmOt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/06eab0-6c6e-4c95-bbdc-916047062a22/1/nBzRs8h3KVb6hVNahGS0yhlmOt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBzRs8h3KVb6hVNahGS0yhlmOt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:05:38:98:47:45:2d:0b:5e:f9:48:37:8e:27:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1cd1b3c8772956fa85535a8464b4ca19663ade
Validity
Not Before: Jan 1 18:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67f3d62222e94f18ff3dc85642808ec5509e287c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:66:19:a6:e6:eb:43:d9:e3:e8:9e:e7:df:19:
52:4c:9e:a6:6f:4a:c8:14:d4:e0:d4:23:9a:63:1d:
bb:74:9a:f2:6f:71:6c:8b:33:dd:81:ee:8e:53:63:
c5:ce:fd:a5:26:bd:9c:aa:58:30:6f:81:9e:9a:cf:
d1:c4:08:61:cc:ff:38:ab:c8:23:58:e7:01:1f:b4:
6d:3e:51:24:95:62:89:3f:38:89:70:47:67:a7:5b:
04:c9:e8:81:3e:d5:55:54:e6:90:84:72:85:19:3a:
1b:e9:fe:34:04:1f:65:c7:56:bc:56:c7:88:74:29:
ea:57:57:0d:f2:1f:e5:42:04:b1:5f:16:eb:fd:9c:
3b:16:ee:99:62:10:ac:c3:f0:58:c7:92:ac:d5:65:
f6:87:2a:16:fa:ff:4c:90:a7:a1:93:dd:c7:16:aa:
27:48:ca:c8:5b:40:e1:bd:b4:ed:ba:a6:f8:6f:84:
75:24:c4:14:23:8d:5b:b7:09:75:77:ac:ef:9b:7d:
53:27:c2:7c:c9:df:c6:59:f7:1e:6e:7d:34:db:1e:
8f:df:28:44:05:cb:ce:0f:52:80:d3:97:88:21:a5:
45:68:e4:73:e2:14:33:9a:cb:67:9e:c8:b4:6d:9a:
56:12:b5:f7:c7:b5:8e:33:1a:70:e9:bf:5b:26:7e:
90:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F3:D6:22:22:E9:4F:18:FF:3D:C8:56:42:80:8E:C5:50:9E:28:7C
X509v3 Authority Key Identifier:
keyid:9C:1C:D1:B3:C8:77:29:56:FA:85:53:5A:84:64:B4:CA:19:66:3A:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBzRs8h3KVb6hVNahGS0yhlmOt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/06eab0-6c6e-4c95-bbdc-916047062a22/1/Z_PWIiLpTxj_PchWQoCOxVCeKHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/06eab0-6c6e-4c95-bbdc-916047062a22/1/nBzRs8h3KVb6hVNahGS0yhlmOt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.243.0/24
Signature Algorithm: sha256WithRSAEncryption
20:d1:d3:23:e2:45:78:9f:2d:d0:31:00:4e:88:7f:14:9c:44:
46:7b:8a:73:18:30:43:df:62:db:9e:61:89:90:3a:0e:9f:02:
49:03:54:89:80:e0:59:d7:b8:1c:15:d5:cb:82:c8:c5:5e:99:
44:a6:80:c4:c6:81:eb:20:d8:a4:66:1f:2f:f5:49:c1:e5:9f:
2f:86:f5:28:18:9d:27:d4:5a:7f:47:8c:ad:cb:e8:8f:e5:f7:
2b:80:70:cc:cf:5f:6f:c8:f7:e0:d8:34:eb:43:6a:24:51:20:
9f:e7:dd:41:63:4c:80:2f:69:4a:39:01:b5:d3:90:f3:3c:4c:
d4:fa:4e:75:8f:91:f7:7b:81:00:70:35:47:e8:c2:4e:c6:81:
e9:a3:e6:c9:b4:96:1e:90:a0:79:51:05:dc:9e:d8:d4:f3:80:
71:d8:08:c6:28:ef:9e:d9:ae:23:07:0e:8a:31:7b:12:26:23:
63:16:04:da:44:76:4b:dd:60:ab:e3:5a:d8:05:14:e0:aa:0b:
22:a4:0f:01:87:bb:7c:2d:74:f9:37:e8:2a:30:18:cb:bf:75:
58:3a:48:15:1f:13:49:36:d9:33:8b:8c:a7:8b:a4:d7:f6:f4:
98:f1:35:9f:1e:71:dd:5c:79:9b:3e:a0:e8:70:6d:fd:26:b0:
41:9a:db:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 21:58:36 2024 by rpki-client on console-fra.rpki-client.org