Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/zAbHrslGGNqNGvtnYizbEb2pb5w.roa
File: zAbHrslGGNqNGvtnYizbEb2pb5w.roa (raw, json)
Hash identifier: HAdOTlC42z8dQkjVQhm3ZkUxmm1CYzj39DMqqprmTi8=
Subject key identifier: CC:06:C7:AE:C9:46:18:DA:8D:1A:FB:67:62:2C:DB:11:BD:A9:6F:9C
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018CC8DE8636142AD87EFBA91D7A20ED1506
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/zAbHrslGGNqNGvtnYizbEb2pb5w.roa
Signing time: Tue 02 Jan 2024 06:31:15 +0000
ROA not before: Tue 02 Jan 2024 06:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60721
IP address blocks: 45.8.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 02:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:86:36:14:2a:d8:7e:fb:a9:1d:7a:20:ed:15:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 2 06:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc06c7aec94618da8d1afb67622cdb11bda96f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5f:c4:f7:00:9a:01:a4:4d:8a:6b:38:f2:bb:
5f:31:e4:d1:f8:09:ce:dc:75:ce:25:4f:c4:e6:6e:
b8:df:a7:29:2a:8d:11:c1:0a:af:19:b6:1a:b2:33:
57:4d:40:ce:4d:31:12:73:9a:18:a0:17:81:be:f4:
dd:d3:af:b7:d1:3d:2a:fe:57:1f:93:b7:d3:cc:37:
5a:75:6d:b9:4a:0d:5b:9e:03:a2:2c:99:24:41:5e:
ad:65:98:0a:76:e7:5f:2a:cc:fc:05:23:7d:52:05:
01:d9:86:24:cf:34:d7:81:ca:43:d6:24:0d:4e:95:
27:55:06:5a:10:74:0a:cb:22:ac:63:1e:6d:b9:1c:
56:97:97:19:4c:ff:41:6f:31:41:6c:9f:ab:cd:2a:
1e:96:4c:d4:ce:af:05:23:5b:f3:9b:8b:b4:6e:c0:
33:45:13:9a:78:eb:55:bb:88:52:32:ea:43:a8:db:
cc:75:e0:2c:c4:be:c7:b7:13:a5:65:e1:69:9c:36:
a9:9b:7b:d8:4f:af:14:d1:ee:16:09:25:55:3a:f4:
ce:f7:50:fa:e2:37:7b:14:0a:79:48:0b:03:0b:4c:
97:ba:d5:af:bb:5a:77:7a:37:2e:7e:77:3d:69:93:
c3:79:b0:9f:e0:a4:15:e9:18:a7:63:ab:05:fc:b7:
14:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:06:C7:AE:C9:46:18:DA:8D:1A:FB:67:62:2C:DB:11:BD:A9:6F:9C
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/zAbHrslGGNqNGvtnYizbEb2pb5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.196.0/24
Signature Algorithm: sha256WithRSAEncryption
65:7a:50:12:43:5c:81:3c:a2:51:3b:7b:a0:8c:71:ad:0b:43:
06:94:2e:a4:b7:28:08:94:67:ce:ba:bc:eb:54:d7:20:2f:49:
11:5f:f0:6f:35:a5:cb:33:dc:e4:c8:9f:fe:11:cc:76:d6:30:
b0:23:b2:34:af:3d:df:77:2a:7a:0f:1a:59:8b:ed:8c:4d:05:
fd:4a:da:a8:16:ce:8f:01:07:06:55:fb:f0:0e:88:68:a6:1d:
7e:80:1f:42:0d:88:8e:e8:1f:3b:d5:a7:75:46:49:3a:9f:da:
a5:72:e8:5d:eb:e6:c7:48:76:e1:2e:d5:38:49:72:6f:80:7f:
27:92:d0:6a:54:34:fa:aa:cd:90:59:25:ea:a9:b0:3c:5f:20:
71:c1:c9:b5:f3:9f:10:c4:c8:6d:9e:0e:33:8c:ad:0f:52:8b:
99:87:5a:4c:9e:c4:ec:07:07:41:5e:93:d3:4d:be:84:0b:c6:
88:ee:98:80:1e:6b:fb:e8:ac:55:a0:12:b5:cf:78:a8:86:b6:
b9:62:ad:16:d6:df:18:ba:36:cb:38:a0:8b:29:35:a2:62:5c:
09:9b:0e:01:08:3a:1b:ce:d8:29:38:4f:93:17:c6:7f:44:44:
a4:73:97:d8:c4:93:2e:b6:74:3b:84:09:d8:ea:5f:0c:e3:03:
fb:a4:d0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 10:12:37 2024 by rpki-client on console-fra.rpki-client.org