Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/pZnSfwIBnrwYeanSsqMNIeMkwdo.roa
File: pZnSfwIBnrwYeanSsqMNIeMkwdo.roa (raw, json)
Hash identifier: 2zBYrVzyNeBRLy4yjxTU+onxYMd5jeMiRG4UtmbeJdI=
Subject key identifier: A5:99:D2:7F:02:01:9E:BC:18:79:A9:D2:B2:A3:0D:21:E3:24:C1:DA
Certificate issuer: /CN=fb3bb3b4ab6fff588ddb4cf2afe6d5ac46557bb9
Certificate serial: 018CC94DBF0C6C65D208971E095F60DFF9F2
Authority key identifier: FB:3B:B3:B4:AB:6F:FF:58:8D:DB:4C:F2:AF:E6:D5:AC:46:55:7B:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/pZnSfwIBnrwYeanSsqMNIeMkwdo.roa
Signing time: Tue 02 Jan 2024 08:32:44 +0000
ROA not before: Tue 02 Jan 2024 08:32:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203936
IP address blocks: 185.232.36.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:bf:0c:6c:65:d2:08:97:1e:09:5f:60:df:f9:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3bb3b4ab6fff588ddb4cf2afe6d5ac46557bb9
Validity
Not Before: Jan 2 08:32:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a599d27f02019ebc1879a9d2b2a30d21e324c1da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ef:92:d5:69:76:b7:8a:9e:5b:1c:6f:53:b2:
25:d6:f9:76:d5:24:0d:ef:e7:03:8c:c0:1b:ac:ae:
0a:4b:7e:b0:b6:f0:0f:33:3c:76:e6:af:29:91:20:
6b:7b:4a:ab:7f:13:64:d0:d3:9b:d8:c1:43:69:39:
62:79:04:1f:ee:15:f1:2b:a8:14:0e:db:83:c8:19:
c0:7a:d1:e3:b5:ba:9e:e1:c0:02:b5:9c:a0:20:b0:
fa:1d:ca:75:35:56:b6:60:9e:88:0d:de:7c:cb:99:
29:20:d0:a0:22:45:f0:4a:74:72:3e:df:e5:85:bd:
2c:5f:14:b6:0a:95:5f:65:b8:f6:cb:35:a1:61:bd:
e3:6e:b9:ee:6d:c4:d1:3f:6b:dd:cf:73:f6:49:73:
5d:b8:b1:a6:e4:1d:7d:80:98:dc:d5:a4:b3:87:12:
6d:1e:db:98:ea:ed:b9:d0:e1:91:37:c3:6e:a0:34:
70:18:03:e2:6b:8a:50:ac:ec:6e:1f:b1:6f:45:a6:
dc:8e:0d:87:2b:3d:c4:45:14:ee:75:e1:09:27:43:
65:f5:34:54:f8:64:50:4f:9f:16:f7:a4:02:7c:ff:
22:2b:d0:4f:a9:23:23:be:7a:f6:44:72:f0:ea:4e:
fa:42:c6:ba:8e:67:84:50:3e:73:ae:d0:35:50:ed:
e8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:99:D2:7F:02:01:9E:BC:18:79:A9:D2:B2:A3:0D:21:E3:24:C1:DA
X509v3 Authority Key Identifier:
keyid:FB:3B:B3:B4:AB:6F:FF:58:8D:DB:4C:F2:AF:E6:D5:AC:46:55:7B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/pZnSfwIBnrwYeanSsqMNIeMkwdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.36.0/22
Signature Algorithm: sha256WithRSAEncryption
70:49:89:47:83:6b:69:88:eb:5f:9c:a0:57:53:8a:87:cd:d1:
14:4d:fa:d0:64:97:97:bf:62:c5:4d:64:bc:6f:cf:6f:50:0d:
8d:de:86:2a:01:eb:16:41:69:f6:64:e4:e7:be:b6:59:6c:5a:
26:b0:1a:75:56:56:16:a0:4e:82:9f:50:45:c0:b1:6a:55:2d:
cc:d4:cd:37:dd:8f:fa:f2:16:e7:be:3e:0d:61:0b:70:1d:65:
5d:76:b4:df:e0:5e:e0:ab:9f:12:5d:cf:e1:c8:45:13:fd:76:
20:9b:5b:0e:06:a4:e2:31:33:75:07:bc:43:36:ff:5c:e9:34:
5a:28:3a:2b:0d:bc:36:8e:62:3c:d1:e6:2b:9a:6b:61:50:1f:
36:bd:bc:dc:4d:f1:fd:ab:7e:bd:e4:40:3d:f6:45:af:9e:af:
97:87:a1:8a:d8:1b:a3:c5:e5:a4:c6:8b:74:7d:75:98:af:69:
9d:34:c7:99:05:74:3e:e3:27:2c:6a:a7:c6:97:42:2d:28:ae:
10:51:04:09:71:a6:b3:d5:c5:06:af:2c:f9:3e:ac:6a:59:a1:
07:11:ba:a8:bb:75:53:bb:2b:2f:ba:f0:77:ec:52:9a:70:85:
a8:21:6f:6d:5b:2d:6b:2d:18:a0:77:17:c8:3c:28:ae:6a:1b:
79:2b:72:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:33:01 2024 by rpki-client on console-ams.rpki-client.org