Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/ZHpO0gt_L08K7b4DcyVWh172Jo4.roa
File: ZHpO0gt_L08K7b4DcyVWh172Jo4.roa (raw, json)
Hash identifier: mWbDJMmrGWX4vW2xqMl4Q7NCGK0Qxfr9h7in1w+q/Zo=
Subject key identifier: 64:7A:4E:D2:0B:7F:2F:4F:0A:ED:BE:03:73:25:56:87:5E:F6:26:8E
Certificate issuer: /CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Certificate serial: 0192743BD7E991D6E5320CBD24FE9962165D
Authority key identifier: 4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/ZHpO0gt_L08K7b4DcyVWh172Jo4.roa
Signing time: Thu 10 Oct 2024 02:22:11 +0000
ROA not before: Thu 10 Oct 2024 02:22:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38107
IP address blocks: 140.150.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:74:3b:d7:e9:91:d6:e5:32:0c:bd:24:fe:99:62:16:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Validity
Not Before: Oct 10 02:22:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=647a4ed20b7f2f4f0aedbe03732556875ef6268e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:01:74:ee:95:42:dc:a3:f3:5f:68:03:f5:d4:
ca:8c:ec:e3:ff:0d:34:83:4a:2c:92:8d:57:4a:10:
c9:42:cd:43:5f:7d:6a:4f:2b:f2:bd:5d:d0:64:81:
c6:76:de:b5:ba:ba:1d:67:79:cf:5e:ed:90:7e:16:
a4:0d:cb:a4:4f:ad:b7:b6:31:6f:b7:bd:63:0b:33:
90:95:69:99:59:26:62:96:76:27:09:e2:8e:de:69:
95:3c:ea:42:88:e7:8a:94:ea:b7:50:ed:30:b0:76:
8d:99:da:2e:98:31:31:ac:c7:0f:46:cc:98:d4:3a:
90:b6:67:17:70:3e:86:d1:1e:cb:a1:a5:43:53:b4:
06:de:f8:98:0b:0a:89:72:1a:47:9b:a3:8f:26:db:
4f:93:35:a5:9c:79:e5:9a:9e:58:43:3e:e3:2b:47:
b3:eb:62:ac:62:d9:3e:92:1a:24:8f:ba:bd:1c:39:
bd:b2:31:4a:3b:c0:9f:e0:4a:86:e8:72:1e:36:11:
1d:72:a8:28:7f:62:f4:55:c0:c0:85:2a:cc:a6:1d:
e5:dc:6c:bf:7f:53:52:88:f8:c5:10:89:1e:44:d5:
0b:14:fc:8c:a2:32:41:48:55:96:3b:5e:37:ea:bb:
ca:6b:66:a7:24:d4:13:ea:80:d3:53:04:95:3c:d7:
09:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7A:4E:D2:0B:7F:2F:4F:0A:ED:BE:03:73:25:56:87:5E:F6:26:8E
X509v3 Authority Key Identifier:
keyid:4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/ZHpO0gt_L08K7b4DcyVWh172Jo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.20.0/24
Signature Algorithm: sha256WithRSAEncryption
80:f9:35:84:d8:01:de:c2:06:f2:9f:54:83:d8:cd:9e:d7:e3:
75:18:b1:af:93:d3:fc:3b:31:83:50:e0:9e:80:5b:fd:7a:40:
e5:61:e3:ed:00:6b:77:ca:7f:4e:fd:f6:33:7c:50:66:e2:d0:
3d:f6:ca:7c:8a:0f:77:e2:f7:b2:c7:ad:4b:42:ee:11:bd:6a:
83:c8:19:f2:4a:8b:ac:cc:e7:b8:3d:1c:f8:22:fc:5b:14:e5:
1a:bd:fd:4c:e1:ad:16:f8:74:4b:9b:8d:cc:f8:11:7d:98:19:
ff:da:24:60:f0:70:77:a2:9c:e2:ae:9d:e5:45:54:04:7a:e2:
b7:ec:aa:c9:e5:b5:74:ea:2d:27:17:cd:d3:1b:5c:87:96:e3:
df:ca:fd:c6:5d:f5:19:69:0f:ed:76:d1:9a:db:0f:9a:8f:90:
5e:8a:84:f4:88:5b:9c:11:36:7f:c4:13:13:e7:c1:ed:9f:6f:
c2:7d:3d:eb:cd:37:39:3a:e5:f4:0e:8e:5e:90:49:ac:7d:63:
f5:be:2c:d2:76:f1:32:37:c9:a6:b4:71:b7:96:f1:80:30:38:
8a:ff:3e:76:32:6d:21:71:85:bd:7b:ff:b1:ec:80:4f:49:11:
a6:71:be:67:d9:9f:a1:f5:6b:4d:2b:99:fa:33:83:d0:ae:d7:
0b:74:31:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:12:40 2024 by rpki-client on console-fra.rpki-client.org