Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/zKouc1qDpkT3Wy6J8hx7mTRnNOQ.roa
File: zKouc1qDpkT3Wy6J8hx7mTRnNOQ.roa (raw, json)
Hash identifier: rchlTn1YFN5tSEWxeRIFy2VJOt8suZvcKJpVWcwGx6Y=
Subject key identifier: CC:AA:2E:73:5A:83:A6:44:F7:5B:2E:89:F2:1C:7B:99:34:67:34:E4
Certificate issuer: /CN=10a9650d7217ddb99f3bc00ebddd6bb2028512e7
Certificate serial: 018CC5DC9638F70016B5404A8065B3317F58
Authority key identifier: 10:A9:65:0D:72:17:DD:B9:9F:3B:C0:0E:BD:DD:6B:B2:02:85:12:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/zKouc1qDpkT3Wy6J8hx7mTRnNOQ.roa
Signing time: Mon 01 Jan 2024 16:30:17 +0000
ROA not before: Mon 01 Jan 2024 16:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58027
IP address blocks: 192.94.233.0/24 maxlen: 24
2001:67c:1b00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 14:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:96:38:f7:00:16:b5:40:4a:80:65:b3:31:7f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10a9650d7217ddb99f3bc00ebddd6bb2028512e7
Validity
Not Before: Jan 1 16:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ccaa2e735a83a644f75b2e89f21c7b99346734e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5b:ab:53:89:b5:7c:54:47:28:bf:f4:d5:39:
d0:22:c3:14:4a:85:47:46:24:07:05:c7:0f:50:7c:
08:6b:2a:e1:1e:46:18:d1:6f:6a:41:3e:38:77:67:
84:be:25:b7:13:57:2e:1d:c0:9d:75:af:14:75:f3:
8e:7d:21:f3:11:d8:93:22:03:a7:05:f7:4a:ee:57:
49:37:fd:8d:d5:d6:da:c8:d2:03:82:b2:a8:34:2f:
a1:1c:ec:c9:6b:5d:9f:86:c0:3c:37:67:71:59:9a:
d2:3d:ff:6f:91:40:17:93:db:ee:69:48:55:ce:dc:
88:18:32:74:69:70:44:31:5e:b9:b1:1a:f6:91:2a:
13:e7:f8:19:a9:41:30:18:9f:92:70:d9:4d:20:5b:
ea:4b:cd:8f:21:9c:24:0c:12:f1:83:02:91:a7:43:
9d:6a:3b:a5:a5:8d:59:8b:71:cf:74:56:b0:4e:64:
61:f2:4c:52:07:f5:c4:5e:76:dd:97:d1:4a:6f:b9:
6e:9f:a1:36:4f:ed:40:bb:16:d3:09:75:4f:56:d9:
fd:f9:cd:27:74:ad:24:38:56:0a:55:ce:8f:32:71:
9b:74:5f:34:d9:89:27:6f:25:87:55:e5:45:22:17:
e5:8c:f0:df:84:ad:6d:57:9c:3d:74:f4:4b:8b:84:
ba:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AA:2E:73:5A:83:A6:44:F7:5B:2E:89:F2:1C:7B:99:34:67:34:E4
X509v3 Authority Key Identifier:
keyid:10:A9:65:0D:72:17:DD:B9:9F:3B:C0:0E:BD:DD:6B:B2:02:85:12:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/zKouc1qDpkT3Wy6J8hx7mTRnNOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.94.233.0/24
IPv6:
2001:67c:1b00::/48
Signature Algorithm: sha256WithRSAEncryption
63:76:9e:d7:e2:66:46:b4:a9:53:4a:fc:9d:bd:ee:4d:4a:46:
95:e7:29:6c:1e:19:75:a4:10:7f:6e:db:76:52:47:4d:a4:22:
de:fb:48:b6:14:81:a3:75:2f:43:b3:4e:80:f2:d4:9a:dc:05:
4a:75:8e:dd:82:8a:f3:2b:eb:e3:d8:56:57:d1:a4:dc:dc:04:
eb:7c:2d:7c:d2:fa:e7:6f:f9:52:41:0b:f3:b8:9d:3e:13:95:
2c:7d:66:97:6b:4c:5c:61:1c:f7:f5:61:40:86:43:bf:1f:a9:
f6:3a:65:a0:82:8e:8b:84:ff:aa:36:5c:29:c1:c2:fd:43:0c:
40:23:e5:72:78:e4:00:86:d4:03:d2:96:8f:9e:3c:6e:f4:60:
e6:d2:e8:11:fb:1e:24:cb:ea:99:82:51:c1:1c:fe:6b:42:32:
c6:b5:db:b5:b3:73:3f:53:8c:ef:f4:e8:f4:81:e8:45:2c:a9:
af:0c:69:6b:6e:80:41:22:2e:1e:b5:56:84:d3:9b:9f:b3:06:
e7:33:2e:73:f6:22:8b:c5:a9:02:58:ea:8f:e2:5f:d6:dd:aa:
26:2d:04:41:c6:c5:df:2f:66:c5:09:fe:93:24:c2:47:7b:4d:
1a:b3:07:0a:6b:30:1e:9c:ac:29:1f:56:97:66:fd:75:26:ea:
a3:80:d2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 17:47:26 2024 by rpki-client on console-fra.rpki-client.org