Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/zCOlWUMuqpm1_YsPxl34G6R0zK8.roa
File: zCOlWUMuqpm1_YsPxl34G6R0zK8.roa (raw, json)
Hash identifier: SggsEQqGoU2P9uiGf4NXjcpm7oUBlS+P61sfRF6pmfk=
Subject key identifier: CC:23:A5:59:43:2E:AA:99:B5:FD:8B:0F:C6:5D:F8:1B:A4:74:CC:AF
Certificate issuer: /CN=598fa4201344d4107f792eee2566c62d65714e2d
Certificate serial: 018CC86EF893EF1D4B8704A32925ADF273BD
Authority key identifier: 59:8F:A4:20:13:44:D4:10:7F:79:2E:EE:25:66:C6:2D:65:71:4E:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/zCOlWUMuqpm1_YsPxl34G6R0zK8.roa
Signing time: Tue 02 Jan 2024 04:29:24 +0000
ROA not before: Tue 02 Jan 2024 04:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207174
IP address blocks: 217.61.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6e:f8:93:ef:1d:4b:87:04:a3:29:25:ad:f2:73:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=598fa4201344d4107f792eee2566c62d65714e2d
Validity
Not Before: Jan 2 04:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc23a559432eaa99b5fd8b0fc65df81ba474ccaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:17:50:14:01:78:8e:16:36:7a:7f:9c:d8:2b:
50:86:4b:08:4f:fb:25:d1:0e:93:1b:43:d2:04:79:
84:c5:da:4a:46:4a:df:3a:09:4b:29:78:c2:85:db:
35:41:d1:7e:81:1b:48:6f:07:86:f8:8a:d6:2c:f5:
69:3c:ed:8d:1b:4b:d0:de:4b:c7:b1:04:b9:7d:fa:
e9:32:8a:ee:ac:58:87:85:4d:5d:ec:df:8e:c6:86:
38:df:27:03:cc:04:3b:f4:5f:cb:af:0f:46:bd:e5:
2c:40:29:ea:77:f1:94:ec:6a:8d:4d:02:69:ef:3d:
ae:73:4b:27:ca:4f:8f:c0:a0:b8:23:d9:3b:3e:bf:
fd:1b:3f:c3:3d:5f:f1:6a:77:44:b6:5c:69:44:f7:
ff:37:a7:26:7c:77:00:e5:38:39:dd:b1:ef:e4:04:
03:ec:53:17:f6:45:0f:9d:aa:df:31:9d:33:57:81:
88:8a:56:ac:dc:f8:e4:9a:9c:0c:38:84:28:c9:c4:
0c:75:e4:1e:cd:cb:ff:40:a0:ec:90:10:a1:97:98:
ed:fa:a2:46:6c:71:cf:22:53:b8:37:64:bb:19:b2:
67:f2:5c:4d:f4:d6:ec:80:df:29:cf:b1:7b:4c:27:
56:65:41:98:58:d4:06:ac:4c:63:1e:6a:85:f2:d9:
c2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:23:A5:59:43:2E:AA:99:B5:FD:8B:0F:C6:5D:F8:1B:A4:74:CC:AF
X509v3 Authority Key Identifier:
keyid:59:8F:A4:20:13:44:D4:10:7F:79:2E:EE:25:66:C6:2D:65:71:4E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/zCOlWUMuqpm1_YsPxl34G6R0zK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.61.132.0/24
Signature Algorithm: sha256WithRSAEncryption
88:43:9a:19:01:69:71:02:bd:45:81:37:95:ac:6f:76:c4:63:
f5:78:f8:ba:75:7d:71:a5:09:7b:35:d1:ce:1f:0b:6c:95:3d:
d4:14:49:c0:8d:0e:d2:89:94:9f:e8:ed:f6:0b:81:f1:4e:40:
67:b6:d8:8f:63:90:71:a8:49:9c:b0:a0:4e:8d:87:74:c7:14:
27:1f:00:18:ad:69:61:66:1f:5e:73:91:c2:d2:75:7f:55:31:
69:ce:35:96:29:b0:60:20:88:39:49:84:97:27:a2:4c:3d:26:
eb:36:3d:96:de:d7:c5:b0:c3:b9:4b:57:80:4d:7f:d5:bf:82:
b0:9a:87:62:11:cd:2a:bf:9e:55:c4:50:bd:ab:9d:98:43:fc:
f8:63:c8:bf:d5:7f:18:6b:ef:49:62:ea:3e:c4:72:ae:ce:71:
f2:f7:db:77:68:e0:a2:c8:dd:ab:97:72:b7:c5:37:80:4d:7b:
43:c5:ab:2c:de:88:1c:9d:81:9a:6a:64:9b:af:2d:76:98:bc:
9f:6c:1b:19:0c:99:00:bc:3e:07:d8:2b:90:61:1b:35:23:2e:
44:e0:a8:d8:6b:ed:09:20:68:dd:5b:35:4e:c2:15:aa:d7:68:
a3:1f:57:45:48:da:3e:f1:5e:0a:6c:f7:f7:af:6d:b5:80:6d:
c8:f8:7f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:15:38 2024 by rpki-client on console-fra.rpki-client.org