Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/ZIn96X5OvK-g4P0h-1dlUB5coaw.roa
File: ZIn96X5OvK-g4P0h-1dlUB5coaw.roa (raw, json)
Hash identifier: rI5UuZ0o2bUkkTyQ9sMOnKVDt6bMLQvz0fya4XOB7zA=
Subject key identifier: 64:89:FD:E9:7E:4E:BC:AF:A0:E0:FD:21:FB:57:65:50:1E:5C:A1:AC
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 018CC501093B4B01071C8B62CA437864D8EE
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/ZIn96X5OvK-g4P0h-1dlUB5coaw.roa
Signing time: Mon 01 Jan 2024 12:30:28 +0000
ROA not before: Mon 01 Jan 2024 12:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35123
IP address blocks: 195.225.52.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:09:3b:4b:01:07:1c:8b:62:ca:43:78:64:d8:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: Jan 1 12:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6489fde97e4ebcafa0e0fd21fb5765501e5ca1ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:99:77:5a:53:ed:a8:4d:ec:64:a8:65:38:46:
ba:1a:50:ce:a8:8e:80:06:e6:7c:7f:af:58:f6:75:
0a:92:15:f5:8e:5d:0f:0f:b0:6a:c5:fa:32:87:c5:
bf:44:0b:3d:61:69:d5:f9:3a:94:47:03:fc:48:2c:
97:9e:66:22:e8:c6:9b:be:ea:36:40:90:27:a1:76:
87:20:b8:7b:d5:e5:c9:fc:d9:9f:ae:cb:9d:a1:f5:
13:9d:19:cb:ef:6f:bd:c6:7a:2e:04:2a:c8:d9:8c:
56:7b:d3:f8:d4:9e:3f:aa:34:d0:24:ad:27:3a:77:
36:1e:02:4a:2b:70:33:f3:12:29:09:b0:ba:79:30:
3a:c1:e0:c4:57:3d:c9:ea:d6:20:f9:11:93:64:12:
6e:96:c9:3d:cb:d1:8e:da:a5:3b:6d:cf:78:f9:70:
51:95:11:5e:a9:ac:94:15:0d:60:f2:26:2c:7d:21:
ed:a4:95:ff:29:68:61:23:6e:7a:3a:91:eb:fa:20:
c8:25:bf:29:e9:18:8f:e9:08:ba:15:bb:dc:9c:b9:
68:c5:14:43:a5:e8:f8:67:02:ab:62:2e:51:29:87:
3b:48:6f:d8:af:51:d9:47:c4:c5:40:3d:9e:09:a0:
0f:e6:55:33:10:47:59:57:d9:98:aa:83:76:b0:90:
00:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:89:FD:E9:7E:4E:BC:AF:A0:E0:FD:21:FB:57:65:50:1E:5C:A1:AC
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/ZIn96X5OvK-g4P0h-1dlUB5coaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.225.52.0/23
Signature Algorithm: sha256WithRSAEncryption
53:6b:29:62:7e:d9:21:f5:c9:ea:67:60:ff:85:92:63:fc:9f:
17:5d:93:44:76:20:bb:73:39:94:33:41:b2:f0:bd:c3:7f:06:
de:c2:fa:63:ad:18:4f:a2:b9:63:ae:55:e8:f7:28:22:43:8c:
5d:a5:84:90:ea:25:4f:eb:99:ba:71:fb:06:e8:c9:6b:cc:58:
96:5d:6d:a2:72:22:e5:ac:25:44:29:17:9f:97:e6:67:d3:8c:
04:13:e2:19:d4:c3:ee:db:4d:25:7a:36:86:f3:ca:9f:a4:3a:
1d:b8:81:9f:5b:07:db:5a:62:8b:0f:15:6f:97:d3:83:b9:19:
3e:ad:ba:78:8c:ae:78:7e:68:41:96:60:91:7e:ba:4b:b0:6a:
e0:f2:6d:f6:94:69:30:fc:a8:43:a8:5d:76:51:c9:87:ed:8a:
f8:54:b5:66:34:86:bd:f4:3f:91:57:2b:75:6e:60:b3:64:d1:
86:f9:83:12:62:b4:5b:dd:d8:f0:09:79:a2:e4:d7:d9:40:c2:
a0:d1:c7:f8:b6:95:07:62:0c:5d:04:d6:22:25:31:96:7f:c4:
90:36:0a:64:45:0a:85:19:55:f1:1e:5f:36:65:f9:b7:4a:07:
ba:02:29:00:78:f3:b1:3e:60:78:aa:7c:6b:ad:c7:00:4e:20:
7b:10:5b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:42:06 2024 by rpki-client on console-fra.rpki-client.org