Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/ZkjTnH9bzJAeEEmFMpSZkdrS_nU.roa
File: ZkjTnH9bzJAeEEmFMpSZkdrS_nU.roa (raw, json)
Hash identifier: SSTHtwgd5HleW54wSTaEsUWSjqdtdToKKXkxVmuxWRw=
Subject key identifier: 66:48:D3:9C:7F:5B:CC:90:1E:10:49:85:32:94:99:91:DA:D2:FE:75
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 018CC7946C73683F9BF0D005F0E67E735CD4
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/ZkjTnH9bzJAeEEmFMpSZkdrS_nU.roa
Signing time: Tue 02 Jan 2024 00:30:42 +0000
ROA not before: Tue 02 Jan 2024 00:30:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136523
IP address blocks: 168.199.20.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:6c:73:68:3f:9b:f0:d0:05:f0:e6:7e:73:5c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Jan 2 00:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6648d39c7f5bcc901e10498532949991dad2fe75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:40:bc:75:6f:63:83:e1:57:1b:a0:f9:01:ab:
fb:15:0a:2d:4f:e4:77:a8:f7:e6:41:8a:3a:08:5d:
cc:30:aa:6e:d9:29:ea:7d:ea:c5:c4:86:87:39:4c:
0d:9b:1a:fb:39:8b:31:c2:f6:88:72:ac:04:9b:32:
89:bf:10:f2:9a:d3:1d:97:ef:48:b6:79:49:21:f5:
b1:22:a9:4a:9b:a6:82:a7:a2:89:ea:f9:25:ff:50:
46:bb:66:0d:7b:d7:ab:4d:b2:61:a5:cc:3b:c6:9f:
bf:67:0d:76:b9:67:fe:ab:24:c2:bb:e1:76:50:58:
35:1a:6b:c7:0d:3e:d7:03:8d:c3:1c:81:b8:8d:7c:
06:9d:52:a9:57:ad:bc:96:77:d9:2b:77:f7:f9:1b:
cf:43:e8:35:63:03:45:05:9e:b9:c2:61:3a:2e:2c:
c2:ac:a6:af:ab:73:bd:5b:10:56:ae:31:c7:52:15:
c4:0f:41:fa:82:e6:70:49:47:f0:6d:2b:54:f2:3d:
40:05:6a:fb:f0:3e:02:27:09:c9:a5:e0:90:fa:c3:
4a:3a:66:a0:3b:27:e1:ac:bf:d7:f9:ca:23:3b:09:
3e:b1:bf:e5:ab:f5:a2:61:42:d8:c1:75:33:d3:e7:
f6:ff:a9:18:15:ad:5a:cb:a7:3b:55:63:11:20:ba:
c0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:48:D3:9C:7F:5B:CC:90:1E:10:49:85:32:94:99:91:DA:D2:FE:75
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/ZkjTnH9bzJAeEEmFMpSZkdrS_nU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.199.20.0/23
Signature Algorithm: sha256WithRSAEncryption
62:ec:1f:0d:72:16:f9:ea:ca:7f:f7:58:96:f2:c9:7e:f3:b9:
58:8c:5f:3f:42:17:d0:0b:9e:11:26:69:67:e8:4a:b4:86:e0:
02:af:e2:92:36:ba:56:0c:7c:0c:aa:80:15:a8:71:2e:96:a7:
dc:fc:c3:e9:02:3d:ef:47:37:31:72:2e:48:08:5c:f4:5a:f1:
ac:f0:28:0b:3a:b2:a0:57:42:2d:00:63:1b:b2:30:5b:b0:20:
d4:8f:aa:76:ae:67:da:a2:4e:95:8a:13:3a:d9:92:ce:32:f7:
98:83:5c:dd:01:22:a8:c5:fa:53:67:f9:be:38:34:89:9d:a6:
83:7e:cb:0d:78:15:3f:42:d3:84:3e:e2:09:48:34:1b:d3:05:
ed:99:bd:04:1c:6d:c0:fa:51:78:72:9c:b8:62:bd:58:b3:f8:
1f:df:2a:0e:b3:6a:9b:90:2a:a9:1a:35:3b:ff:c5:0b:20:6e:
d8:d8:a2:2c:31:8d:85:41:9e:6e:a9:5a:bd:d6:2e:6e:e9:3e:
10:96:ec:43:75:97:99:6e:21:40:61:a7:cb:39:a7:c2:fd:53:
28:da:f5:4b:9e:ac:52:f9:a2:bf:dd:38:44:20:85:60:47:fe:
98:cb:2d:1e:ac:61:7d:eb:68:44:2e:a5:fa:87:f5:12:f6:12:
06:dd:54:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 13:52:42 2024 by rpki-client on console-fra.rpki-client.org