Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/zPUEpYMC7jcCvm2LJ1d56robTAU.roa
File: zPUEpYMC7jcCvm2LJ1d56robTAU.roa (raw, json)
Hash identifier: og4c1crQpGf0buhf4zJ5UB2A/v0eQ8myqxeYYikdXb8=
Subject key identifier: CC:F5:04:A5:83:02:EE:37:02:BE:6D:8B:27:57:79:EA:BA:1B:4C:05
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 01935F9303B5AA6DDCC1132699EF42C13AE2
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/zPUEpYMC7jcCvm2LJ1d56robTAU.roa
Signing time: Sun 24 Nov 2024 19:08:10 +0000
ROA not before: Sun 24 Nov 2024 19:08:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 178.253.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5f:93:03:b5:aa:6d:dc:c1:13:26:99:ef:42:c1:3a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Nov 24 19:08:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ccf504a58302ee3702be6d8b275779eaba1b4c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:74:2f:79:1a:a9:74:6a:72:e9:ef:d4:a6:8c:
7e:f0:96:ef:e7:b8:2f:e3:af:21:58:7b:cb:73:91:
5c:30:c9:87:df:a5:68:4e:6a:7e:b3:7a:6a:a3:2b:
f3:9a:69:33:e8:0b:84:8e:6c:f8:be:e5:3d:f3:44:
67:7b:75:02:9f:20:2d:03:d6:d9:c2:68:f1:34:26:
4d:b8:d1:fc:ba:ee:63:cc:a9:32:e2:3d:c4:44:54:
e8:eb:ab:1b:6e:36:ed:d8:9c:10:99:8c:18:7e:69:
33:7f:05:a8:1f:2d:20:6d:c6:e9:4c:4d:c7:0c:22:
3f:9d:c9:d2:a4:d7:49:bc:52:fa:77:f9:c8:16:2f:
94:56:78:0f:2a:7e:35:3c:99:23:b4:b9:03:a0:a4:
0e:f2:36:31:87:c9:82:3a:ff:aa:56:ff:3e:7b:56:
e2:89:96:f1:12:09:28:a8:35:91:5b:1c:e8:35:ee:
ae:88:66:fe:51:d1:5c:8a:fc:62:14:a3:7a:00:56:
75:0b:fc:e9:34:04:03:7b:24:d4:55:68:0d:4d:fe:
8f:65:58:3e:2c:31:15:4d:66:37:6c:42:b4:e0:1b:
c7:44:6a:a8:af:c3:32:4c:37:94:7d:5f:7d:94:42:
a1:ad:92:7c:c3:a8:9a:60:c0:ca:18:1e:ae:16:98:
a7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F5:04:A5:83:02:EE:37:02:BE:6D:8B:27:57:79:EA:BA:1B:4C:05
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/zPUEpYMC7jcCvm2LJ1d56robTAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.55.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:60:49:51:00:00:ec:03:61:62:08:f8:7d:b5:47:ef:4a:f0:
79:06:bd:c6:97:6b:6e:9a:f2:75:e2:ad:ef:df:ce:3e:cb:1c:
59:62:91:d4:8c:51:7a:43:c2:d9:97:fd:6c:71:1a:df:6b:a6:
7a:e1:60:f0:0a:b4:33:6a:8f:14:31:df:e7:e3:1e:1f:89:3d:
54:63:b9:54:f4:7a:ad:49:41:94:d2:da:5e:c1:0f:dc:bf:1a:
64:a1:b6:f9:f0:70:ee:45:d3:06:07:24:89:d9:ba:54:cf:80:
1f:d3:08:71:10:0e:0d:e5:2b:69:a1:21:db:d8:c7:02:6a:85:
a7:eb:ed:7a:90:70:ea:9e:59:28:ed:e4:8d:03:31:56:bc:3b:
c6:16:bb:17:f1:56:11:f1:28:f9:30:e4:73:6c:3e:46:59:77:
77:54:b4:76:62:d8:a7:de:e4:e8:ac:9f:c5:66:02:91:54:14:
5b:68:14:eb:9c:20:b5:39:d8:9c:96:55:bc:ae:b5:cb:14:31:
de:17:a3:c0:90:8e:79:a8:c3:9b:6a:45:7b:19:4c:22:df:22:
50:97:c7:13:fe:08:07:fc:a0:dc:69:d2:7f:16:76:01:dc:d4:
d6:90:e7:00:ee:ce:31:a5:49:e6:c9:c5:5f:34:ab:03:85:79:
f0:77:1f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:47:30 2024 by rpki-client on console-ams.rpki-client.org