Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/z7O5CsRGU2CfMtpzSdu18ikUgGs.roa
File: z7O5CsRGU2CfMtpzSdu18ikUgGs.roa (raw, json)
Hash identifier: fABS3pes9UlijsUnbPUeDLJFOyoEX8Q+Af8jjaknMj4=
Subject key identifier: CF:B3:B9:0A:C4:46:53:60:9F:32:DA:73:49:DB:B5:F2:29:14:80:6B
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 018CC4924F645C1934823D0A2D7EBD2961EE
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/z7O5CsRGU2CfMtpzSdu18ikUgGs.roa
Signing time: Mon 01 Jan 2024 10:29:32 +0000
ROA not before: Mon 01 Jan 2024 10:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56856
IP address blocks: 212.21.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:4f:64:5c:19:34:82:3d:0a:2d:7e:bd:29:61:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 1 10:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cfb3b90ac44653609f32da7349dbb5f22914806b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:35:d5:f2:38:1f:37:f2:31:cf:98:ed:84:63:
a7:5b:b5:83:e4:0a:03:11:9f:91:94:bb:8e:01:2f:
3c:2f:8f:2b:59:29:29:e4:21:8e:b6:59:10:f0:98:
8a:d2:5a:1c:3d:68:ef:01:15:67:b6:cc:7d:3b:56:
40:df:a9:ab:23:7a:d9:d8:1b:1c:03:d6:97:d5:c6:
a7:4f:b8:87:e8:f3:cd:67:4d:12:89:ea:36:9c:b9:
19:75:35:4c:42:e5:56:69:50:67:ac:96:39:ab:03:
89:3f:c3:47:84:36:0f:61:fb:78:0d:67:0f:4b:0e:
3a:e3:16:99:17:58:81:e0:70:48:4f:a4:da:8b:2b:
c2:eb:f8:3e:c1:2f:ba:40:45:cd:4d:23:53:18:d5:
fc:ee:60:be:84:84:03:32:06:f5:4f:8b:70:14:9e:
2d:03:41:0c:1d:7a:e4:9e:6d:16:d0:8a:1e:12:07:
f0:ba:83:15:f4:a8:b8:eb:ad:9f:43:72:b4:31:9f:
8a:cf:54:d6:6a:0d:65:71:19:ca:b3:b6:41:40:db:
5a:be:f6:4b:13:4d:ec:51:8d:08:e9:e7:23:ed:64:
8e:45:e6:e2:de:a2:f8:af:72:c4:36:c7:25:04:10:
47:a8:02:f3:54:fd:7c:74:27:0c:64:b0:7b:56:da:
c7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B3:B9:0A:C4:46:53:60:9F:32:DA:73:49:DB:B5:F2:29:14:80:6B
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/z7O5CsRGU2CfMtpzSdu18ikUgGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.21.139.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:28:5f:bd:c4:3b:79:b0:52:57:6b:e3:53:fc:1c:8f:f1:54:
c6:12:8a:48:0d:42:9c:4a:a0:96:98:73:70:e5:f2:dc:5a:15:
8e:9c:42:ca:82:bd:4d:f4:b6:70:c1:35:74:cd:50:d8:d1:6c:
de:b0:19:1e:fb:7c:af:40:63:22:01:e4:68:b7:a3:a2:00:c0:
33:4f:1f:7a:58:0b:c9:0e:82:90:c0:10:ce:0b:e4:da:d2:0e:
0a:83:6d:f6:65:cc:dc:6b:73:31:ee:40:0d:55:52:75:a7:dc:
89:a7:8c:93:ad:1c:d1:b5:8f:b3:c5:ff:9a:d5:26:e8:2c:ae:
f6:f4:99:0f:d4:d0:61:5a:7e:d4:b7:9c:2a:99:be:87:b0:b3:
c4:79:7f:ac:91:ac:fd:72:e1:6b:c1:47:ac:ca:9a:34:73:f6:
f4:be:b9:90:db:04:69:ed:86:e0:06:05:a5:0f:9e:5e:54:3e:
ca:08:57:fb:04:c1:ef:35:53:82:13:dc:79:1a:bb:f3:eb:96:
14:48:bd:8a:54:27:65:cc:9e:bb:46:06:80:53:92:15:ea:23:
09:cc:c2:a3:6c:c9:6e:87:fc:7c:6d:ee:73:22:8d:e5:6f:f4:
5a:5d:7d:ae:da:36:06:59:0a:2f:d9:35:8a:e8:2f:36:18:05:
86:ef:e6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 21:40:53 2024 by rpki-client on console-fra.rpki-client.org