Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/zatuypQvthJHhNCBmhzb6Q_JHCA.roa
File: zatuypQvthJHhNCBmhzb6Q_JHCA.roa (raw, json)
Hash identifier: 4rM8/gabJYA7ijP+NBTYP2ide8/3d/6yreUeVAc/3KE=
Subject key identifier: CD:AB:6E:CA:94:2F:B6:12:47:84:D0:81:9A:1C:DB:E9:0F:C9:1C:20
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 018CC492510824F12A2C9BFE6CE6C57F1C3C
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/zatuypQvthJHhNCBmhzb6Q_JHCA.roa
Signing time: Mon 01 Jan 2024 10:29:32 +0000
ROA not before: Mon 01 Jan 2024 10:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62386
IP address blocks: 95.158.136.0/22 maxlen: 24
95.158.140.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:51:08:24:f1:2a:2c:9b:fe:6c:e6:c5:7f:1c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 1 10:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cdab6eca942fb6124784d0819a1cdbe90fc91c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a3:6a:92:2b:22:2b:38:0d:bd:19:08:c6:09:
c9:63:e2:11:22:9f:de:43:f7:d7:af:27:d4:38:4e:
fb:30:c9:9d:1d:13:ad:d4:c7:44:f5:2d:a8:c0:46:
be:ae:bb:6e:5e:1d:f6:b4:f2:9f:de:46:f3:30:35:
9d:59:b2:e3:e8:20:90:bc:11:f6:35:68:db:18:8b:
5f:d9:f1:52:a3:0b:59:23:01:ba:d2:78:9f:cd:13:
42:9e:fc:87:67:c5:71:78:b4:d9:61:cc:0d:9c:af:
cf:15:74:44:9a:ab:39:9d:44:ec:d5:3c:51:59:19:
62:e3:85:08:34:9c:1d:1a:2c:02:c3:56:2b:6f:f2:
4a:08:d0:49:25:80:93:5f:a6:da:36:0a:62:b6:2a:
8c:cd:0f:98:83:97:1e:01:07:a0:90:fb:c3:64:ab:
84:7c:f1:c6:da:7b:1e:8a:56:68:eb:ec:12:d5:a2:
9b:09:9a:2f:d2:37:9b:dd:ea:1b:e8:1c:6a:16:97:
62:f9:c0:50:6c:dd:8d:90:47:28:17:93:05:bc:5d:
45:a8:63:c3:99:42:ea:11:2c:fb:33:cc:50:6e:31:
b2:00:2d:d5:bf:b2:24:5d:bd:af:88:3d:d3:6f:8b:
76:69:f0:4b:7e:c5:fb:a7:96:c0:7f:4e:34:61:c2:
f7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AB:6E:CA:94:2F:B6:12:47:84:D0:81:9A:1C:DB:E9:0F:C9:1C:20
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/zatuypQvthJHhNCBmhzb6Q_JHCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.158.136.0-95.158.141.255
Signature Algorithm: sha256WithRSAEncryption
52:e4:c6:af:1d:3f:98:4c:8c:ff:ac:79:b8:df:3a:53:90:ca:
12:d9:ba:93:ba:e0:47:bf:df:2b:56:34:ff:c1:3d:a6:d4:63:
24:cb:95:cc:fa:e6:45:09:75:fe:62:4e:c7:8a:f6:8b:f2:fb:
5d:9c:f3:63:1d:90:ab:26:2a:01:59:ba:32:d1:ed:c6:86:73:
93:5a:36:2e:17:12:d7:31:31:a5:ee:f7:44:4d:29:af:ac:4d:
ef:d5:0e:4e:16:6c:ce:f3:44:fd:08:22:d3:68:95:61:41:68:
1d:e4:c7:3d:9c:fd:96:ba:ec:a2:88:10:28:12:96:c3:72:6e:
d6:11:bb:94:6b:93:e6:2a:19:44:4e:c9:f6:df:9a:13:df:a1:
f2:d6:7c:c5:53:8d:2c:42:79:cf:5c:ff:61:2e:14:6c:a3:b8:
2c:05:69:bb:87:a2:df:95:21:a6:9f:84:4a:8d:19:81:5b:ec:
d5:c1:9d:d6:fe:39:2f:35:6c:e6:25:18:83:b6:d3:2f:c4:c4:
e3:c4:34:3a:36:2a:33:41:63:cd:7c:b5:ba:3b:3c:9d:ef:18:
05:32:1e:51:ed:d1:63:8b:11:e2:b0:e8:3b:66:f8:a5:c4:f0:
b4:87:b4:2c:6d:ce:8d:eb:df:35:33:81:6b:68:8a:fe:47:7c:
c3:62:09:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 05:44:34 2024 by rpki-client on console-ams.rpki-client.org