Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/zLY-AfgdrHPAam1xZCPfGVge0NM.roa
File: zLY-AfgdrHPAam1xZCPfGVge0NM.roa (raw, json)
Hash identifier: i0AW06DQFdhcwngoWj7OToR6gOmyHhKbqlSSnVzo41w=
Subject key identifier: CC:B6:3E:01:F8:1D:AC:73:C0:6A:6D:71:64:23:DF:19:58:1E:D0:D3
Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial: 018CC5DC83A93F0E60B49868E6F355A2B3AC
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/zLY-AfgdrHPAam1xZCPfGVge0NM.roa
Signing time: Mon 01 Jan 2024 16:30:12 +0000
ROA not before: Mon 01 Jan 2024 16:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6315
IP address blocks: 185.127.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 16:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:83:a9:3f:0e:60:b4:98:68:e6:f3:55:a2:b3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Validity
Not Before: Jan 1 16:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ccb63e01f81dac73c06a6d716423df19581ed0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d6:e6:1f:1c:de:4b:88:e6:7e:1c:40:7a:31:
2b:73:78:33:44:9c:1f:02:18:6a:93:3f:92:20:bf:
5d:81:42:3d:78:cc:f7:6e:fd:95:f5:7c:0c:94:d4:
47:67:1d:95:d7:41:25:01:14:87:f7:56:c6:a7:65:
94:84:c7:bf:50:b5:4c:98:1f:d3:f6:63:6f:36:6b:
f2:b5:b0:12:0a:4b:22:83:c5:06:9d:36:a3:09:22:
be:5f:00:82:1b:e1:e5:2e:bd:38:1f:d9:04:90:69:
75:4c:b5:fe:bb:89:02:9d:cd:e6:6c:39:63:3b:67:
07:0b:16:c4:eb:7f:49:3b:9e:67:ed:b4:2f:17:a0:
ab:97:46:b5:d9:8c:61:43:3b:6d:a1:65:72:80:d3:
e7:07:26:ba:65:7b:5d:0e:51:b9:eb:64:6d:7d:8f:
08:0a:7c:40:ae:39:b6:06:f0:b2:8a:e1:2f:3a:b0:
43:c4:78:2f:45:43:94:f9:ee:62:b0:a5:ac:e5:39:
eb:24:2e:d8:2a:0b:3d:dc:0b:61:dd:f5:09:5d:7c:
db:14:8f:ce:e5:15:7f:69:6a:f6:e8:3b:57:3d:5b:
6a:26:73:be:d5:67:6f:5b:9a:ec:2c:f9:05:3e:86:
bc:95:43:8e:71:b6:69:f4:7f:a8:68:b1:ff:59:dc:
8f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B6:3E:01:F8:1D:AC:73:C0:6A:6D:71:64:23:DF:19:58:1E:D0:D3
X509v3 Authority Key Identifier:
keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/zLY-AfgdrHPAam1xZCPfGVge0NM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.92.0/24
Signature Algorithm: sha256WithRSAEncryption
52:80:fd:9e:db:b0:28:02:da:06:b7:4b:c5:96:95:01:83:48:
fa:7c:c9:18:c1:34:a6:4b:61:8d:1d:b6:48:c3:69:36:e7:c2:
8c:45:87:a7:86:0d:a8:01:8c:76:3c:69:62:34:d7:43:fc:0d:
a2:10:df:0e:48:69:e4:7d:7e:c4:ed:f5:a6:f5:a2:99:d7:a1:
9f:5f:7a:a1:52:1d:eb:46:67:f1:26:1d:e6:ec:9d:3d:79:76:
b0:2f:74:72:cf:80:0b:7b:1e:bc:d9:15:ea:92:c4:1e:c1:37:
5b:fa:89:45:d2:aa:b9:c8:62:f3:07:72:30:37:3e:b1:f1:c6:
ee:f8:3a:4d:ed:ff:53:7e:5b:bc:2d:52:9e:b8:f1:f0:6e:f9:
0d:f8:c7:3a:2d:f5:96:81:29:98:de:d9:52:e5:9c:14:0e:32:
69:eb:6d:bc:4d:0f:00:ca:fa:f1:72:83:1b:f8:06:49:69:e7:
5f:67:58:86:a7:17:f2:bb:1a:89:01:10:06:ba:f4:f5:54:8f:
db:cb:3b:76:b6:b3:5f:b4:20:3d:c1:00:df:c6:01:6e:d7:00:
ee:23:cd:7d:35:10:b7:29:81:86:5c:04:b5:3d:9a:33:ec:d6:
17:04:f8:cb:47:68:f8:3a:4a:81:8b:5c:93:01:ae:fe:eb:7f:
94:79:45:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 00:23:14 2024 by rpki-client on console-ams.rpki-client.org