Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ZOyhl-CzE3eZJsNhve0XfTxvKYs.roa
File: ZOyhl-CzE3eZJsNhve0XfTxvKYs.roa (raw, json)
Hash identifier: 6xdxTMhkkMBZmQWNw6l4svs8amXT9rQFhtuVqZaOqEs=
Subject key identifier: 64:EC:A1:97:E0:B3:13:77:99:26:C3:61:BD:ED:17:7D:3C:6F:29:8B
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC5010D73EBC20B53E10338814C774505
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ZOyhl-CzE3eZJsNhve0XfTxvKYs.roa
Signing time: Mon 01 Jan 2024 12:30:29 +0000
ROA not before: Mon 01 Jan 2024 12:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36113
IP address blocks: 188.240.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 01:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:0d:73:eb:c2:0b:53:e1:03:38:81:4c:77:45:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64eca197e0b313779926c361bded177d3c6f298b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:59:ec:26:39:b7:4a:0a:d5:8a:0f:09:c9:77:
0a:5b:f8:87:72:39:f9:f5:07:3a:94:cf:3f:25:69:
06:e4:d6:b4:15:77:ac:d2:b2:1d:b7:f1:74:17:90:
56:ac:c0:99:b9:8f:84:bd:b1:7b:b7:90:cf:e6:28:
11:34:f8:b3:34:fd:bb:0a:14:eb:e3:2b:d7:ca:19:
06:5b:38:23:94:aa:fd:8b:f0:35:3d:55:b4:aa:98:
da:df:ae:f9:bc:c0:f0:24:5d:4d:ae:1f:cf:f0:dd:
eb:da:f6:eb:25:b8:41:fe:a1:b1:98:7b:a1:56:fd:
c8:71:cc:d0:7e:ae:1a:96:a2:b4:65:96:b8:10:75:
da:3c:4e:9a:9e:43:eb:5f:a1:57:a4:35:27:46:d1:
1a:1e:fb:4d:07:b2:e9:8e:a4:ab:2b:3f:af:f6:02:
35:2b:98:d1:07:6c:87:29:96:63:46:7e:d7:00:ae:
7e:a5:5c:28:45:82:11:f9:31:f3:a4:df:42:a4:6f:
c0:c7:6e:99:72:f7:bd:45:6b:20:e1:36:68:76:14:
a7:49:37:4f:2d:8a:26:82:6b:91:d0:95:63:28:74:
e4:b0:5b:75:0a:d0:55:89:25:ea:74:93:50:ab:de:
00:b8:a0:1c:da:a2:0d:c1:9a:1d:e5:b5:46:53:91:
12:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:EC:A1:97:E0:B3:13:77:99:26:C3:61:BD:ED:17:7D:3C:6F:29:8B
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ZOyhl-CzE3eZJsNhve0XfTxvKYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.240.233.0/24
Signature Algorithm: sha256WithRSAEncryption
05:17:06:21:6a:d2:07:8c:4e:cc:51:cd:13:f4:88:da:64:de:
b5:aa:bd:9e:1f:02:32:de:a0:44:d6:98:92:bb:34:e1:be:e3:
72:77:82:19:bc:43:18:ed:06:c1:5a:a6:17:77:e3:e7:44:aa:
ed:23:8d:b4:9c:63:ce:e1:2c:94:8f:d1:c5:d5:14:41:35:6d:
31:c3:54:7e:e8:f8:66:72:65:22:b8:9a:e1:49:e6:ca:a3:2c:
6f:d5:9f:52:20:38:ce:f7:01:77:6a:48:d3:1b:34:26:24:37:
b7:50:e7:9b:c8:a7:93:d4:1f:40:aa:e4:c1:e0:63:93:89:6a:
6b:53:9e:6b:68:0a:98:0e:19:7d:45:c3:5a:f9:82:82:bd:63:
0c:ba:90:56:91:5d:d4:2b:c7:02:95:27:b1:13:a5:70:52:d2:
05:9e:75:c4:af:b8:b0:5c:35:d8:6c:91:92:d3:77:00:75:a5:
da:fa:cb:22:69:09:95:a2:28:f2:e8:e1:da:32:49:db:a2:a2:
d0:c7:59:4d:81:75:a9:52:b6:15:d4:9c:86:3c:9f:66:82:bb:
4d:17:e0:2d:1e:af:de:bd:14:33:c9:8b:8c:52:21:e5:06:93:
18:3e:5c:5d:15:27:7e:0b:0e:76:46:43:8b:68:19:87:2d:e7:
5e:5f:fa:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:03:56 2024 by rpki-client on console-ams.rpki-client.org