Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/zMdGV8ZWFSGl8gUbe4MMOhhqZZk.roa
File: zMdGV8ZWFSGl8gUbe4MMOhhqZZk.roa (raw, json)
Hash identifier: yJw7MbY5WkKTUg/Rf9elpLAKIT1ZgkA8DoMSYGb5m+A=
Subject key identifier: CC:C7:46:57:C6:56:15:21:A5:F2:05:1B:7B:83:0C:3A:18:6A:65:99
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 018CC56E8AB810917120FB718840FC701F38
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/zMdGV8ZWFSGl8gUbe4MMOhhqZZk.roa
Signing time: Mon 01 Jan 2024 14:30:05 +0000
ROA not before: Mon 01 Jan 2024 14:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40999
IP address blocks: 83.125.8.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:8a:b8:10:91:71:20:fb:71:88:40:fc:70:1f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 14:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ccc74657c6561521a5f2051b7b830c3a186a6599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:54:9b:0e:96:be:b8:81:95:c3:a8:d1:59:86:
12:37:94:c5:28:23:f8:03:19:fb:57:17:d9:3c:5c:
8e:e9:1c:0a:b4:6e:88:dd:3b:09:71:27:95:fb:f3:
ee:25:30:13:f2:0f:01:30:31:06:1e:c6:4f:b2:7f:
8f:68:b6:b5:c6:1e:3e:72:b7:54:cc:ea:d7:14:3d:
ff:00:3e:22:3c:9c:e6:35:c2:df:ee:d1:f8:af:7d:
fc:41:cf:92:5d:27:da:a3:af:cc:52:a6:87:8b:42:
bc:03:54:96:57:16:85:2a:69:a3:8d:9d:fd:61:5e:
9a:76:d9:d0:91:3c:51:9c:8b:a0:59:64:94:c9:97:
e5:42:fd:84:72:33:80:42:6f:ed:af:b1:0e:72:09:
a9:6d:4e:1c:06:c3:37:9e:6c:88:b0:28:36:77:2b:
69:c2:dd:a2:84:01:c5:28:35:89:dc:d7:b6:7c:5d:
44:bf:93:6f:69:e4:0b:ba:c0:2a:8f:9d:ca:2a:d4:
6e:ca:87:14:d4:78:c7:4a:d2:97:1d:d8:bf:34:d1:
38:73:97:b4:d0:d5:4b:1e:27:fa:21:83:8f:7b:5b:
23:8c:6b:8f:80:69:ae:9c:92:00:57:c7:97:fb:63:
bd:6f:66:1c:f8:52:67:b7:6e:8f:51:04:b9:57:41:
02:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C7:46:57:C6:56:15:21:A5:F2:05:1B:7B:83:0C:3A:18:6A:65:99
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/zMdGV8ZWFSGl8gUbe4MMOhhqZZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.125.8.0/22
Signature Algorithm: sha256WithRSAEncryption
86:55:2b:b1:6f:39:38:7f:5f:cd:52:8e:de:5a:4e:de:c3:be:
b7:3b:da:10:62:28:e6:f6:30:0e:63:da:c3:f3:53:a2:e1:8b:
0c:81:3d:93:58:fc:c8:03:bb:03:3c:86:02:40:e3:86:f9:6d:
a6:9e:d4:6f:c1:67:1e:00:14:ba:fe:03:1e:0f:2a:e6:1f:0f:
05:ab:ae:6d:3f:6e:b0:33:de:5b:69:03:94:1a:ca:05:f1:b3:
16:67:bd:17:ef:69:a0:ba:7b:f0:f7:f3:9f:d8:aa:0e:f2:dc:
3e:43:c5:b9:d3:e7:30:37:c5:12:27:e2:b0:3b:26:f0:83:de:
e2:76:4f:70:f5:72:bf:57:f5:4d:87:a6:e1:eb:2f:31:31:27:
c3:02:d6:69:b1:1b:4b:e9:2b:95:c1:8a:79:ad:2f:c7:33:ac:
23:81:8f:32:cb:41:48:c7:db:82:60:22:97:53:37:40:3c:4c:
4d:99:ab:5d:e3:b7:b4:93:4b:e1:85:23:f3:e4:61:ba:9a:83:
67:80:21:77:97:11:a9:de:4c:4c:39:58:65:d5:a5:ab:bf:9f:
32:f4:07:f2:bc:8c:a9:16:4b:23:17:96:f1:f7:f5:ed:d5:9a:
88:a1:53:c7:68:00:87:9c:86:a3:52:30:2a:f8:3f:c8:19:07:
48:8e:1c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 07:26:39 2024 by rpki-client on console-fra.rpki-client.org