Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/zxACZcT6gLmh7whpLgtc9Ao8ZaU.roa
File: zxACZcT6gLmh7whpLgtc9Ao8ZaU.roa (raw, json)
Hash identifier: wqoL92B18F55xZ2aWHnibDKPuzlJgTMWhad+orgp0l0=
Subject key identifier: CF:10:02:65:C4:FA:80:B9:A1:EF:08:69:2E:0B:5C:F4:0A:3C:65:A5
Certificate issuer: /CN=af60346d081b1c5c810b394c66e10512bbf4d8c9
Certificate serial: 019251262ACD6F83CCE67B304FB61282A41E
Authority key identifier: AF:60:34:6D:08:1B:1C:5C:81:0B:39:4C:66:E1:05:12:BB:F4:D8:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2A0bQgbHFyBCzlMZuEFErv02Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/zxACZcT6gLmh7whpLgtc9Ao8ZaU.roa
Signing time: Thu 03 Oct 2024 06:51:48 +0000
ROA not before: Thu 03 Oct 2024 06:51:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42525
IP address blocks: 193.27.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/r2A0bQgbHFyBCzlMZuEFErv02Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:51:26:2a:cd:6f:83:cc:e6:7b:30:4f:b6:12:82:a4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af60346d081b1c5c810b394c66e10512bbf4d8c9
Validity
Not Before: Oct 3 06:51:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf100265c4fa80b9a1ef08692e0b5cf40a3c65a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c9:60:79:0d:2a:0f:6b:02:e3:2b:6e:b7:a1:
ec:fe:90:d5:85:b0:56:8c:9f:2f:52:88:9a:2d:d0:
67:c1:f8:e5:10:38:ef:dd:c7:81:51:34:62:0e:20:
d5:0f:9f:1c:14:a2:82:d3:22:95:3d:e4:f1:9c:47:
c4:fe:4f:d0:47:9a:a6:85:3e:79:20:bf:11:87:69:
f8:99:44:72:ca:d0:67:87:71:55:44:9b:a0:29:60:
36:8b:f7:58:3f:e5:99:2c:49:72:5a:db:54:a8:5c:
3d:67:5c:e6:11:a0:70:9a:0b:02:cf:9b:b4:55:fb:
bd:f5:6d:4f:f6:4a:9f:8a:4c:ab:eb:d9:e3:98:d9:
ea:5c:21:ea:b3:78:d3:0b:a8:3a:15:28:64:07:fb:
0e:57:8a:0c:20:12:bf:19:15:10:00:2c:d8:37:94:
e6:25:ab:80:37:68:db:cc:05:03:9e:65:2a:58:5f:
ca:a3:28:ab:8b:3d:9f:02:7c:94:23:6b:43:56:9e:
21:14:df:cf:78:ad:62:6e:50:7d:ea:3b:eb:14:8b:
d8:0e:16:85:89:88:b0:a3:d8:5e:7f:7e:f5:df:b6:
8c:b1:e4:94:ea:32:0e:d0:af:d6:c3:3a:0f:80:ea:
1b:3b:6a:60:26:38:f1:90:96:e7:f4:58:dc:a5:c4:
3f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:10:02:65:C4:FA:80:B9:A1:EF:08:69:2E:0B:5C:F4:0A:3C:65:A5
X509v3 Authority Key Identifier:
keyid:AF:60:34:6D:08:1B:1C:5C:81:0B:39:4C:66:E1:05:12:BB:F4:D8:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2A0bQgbHFyBCzlMZuEFErv02Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/zxACZcT6gLmh7whpLgtc9Ao8ZaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.27.3.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:48:14:2e:69:bd:37:af:f5:fd:e2:78:86:aa:c5:41:fc:43:
e5:86:25:fe:af:0a:92:e8:94:6e:e1:df:82:17:a0:7e:96:86:
d0:c9:f6:2e:12:d2:d7:16:7b:75:9d:d8:7c:23:ea:bd:af:23:
b4:35:e9:d6:c6:e1:0f:df:1a:a5:65:e1:ab:fa:89:5a:e6:11:
62:98:0f:1c:04:3a:6d:a3:21:14:a3:d0:68:f3:2f:2c:87:e0:
29:f5:64:33:b3:6e:79:06:0e:a6:2e:df:9b:9c:70:54:0d:60:
cf:2a:62:7b:e8:c6:f6:b8:cb:48:65:75:3e:e2:d1:c5:a6:9f:
15:7b:02:95:14:a6:4c:66:a3:a2:e2:50:3c:b2:b4:35:66:3c:
ff:79:91:15:f5:09:1e:26:ad:ce:63:94:2c:15:96:a6:ce:b5:
7a:3d:d4:f4:33:28:14:d4:92:1b:a5:d5:00:b9:4e:05:8f:ad:
a3:24:64:05:e9:33:28:14:56:36:fa:80:dd:0d:f0:cb:d0:cc:
a6:6d:8f:15:cb:78:00:b2:32:5a:ea:52:05:08:40:aa:f8:6d:
14:22:08:ad:42:f1:cf:2e:a1:ec:02:38:fc:56:64:e5:1f:62:
5c:22:82:55:b2:45:7e:c1:bb:0e:2e:01:36:d7:c4:c8:8f:12:
2d:d8:68:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:12:54 2024 by rpki-client on console-fra.rpki-client.org