Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/zZwbUbolPhPkEYTb2p2eIJNH2TE.roa
File: zZwbUbolPhPkEYTb2p2eIJNH2TE.roa (raw, json)
Hash identifier: 44Q8xT2A7fGdCt9YcTwsIBNEwH07F+EgcgHbti8/Isk=
Subject key identifier: CD:9C:1B:51:BA:25:3E:13:E4:11:84:DB:DA:9D:9E:20:93:47:D9:31
Certificate issuer: /CN=50d4ac320965ab4991108501a0602a6893e63fec
Certificate serial: 018D5976C9C261EAA63585C20242D54F1ACE
Authority key identifier: 50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/zZwbUbolPhPkEYTb2p2eIJNH2TE.roa
Signing time: Tue 30 Jan 2024 08:22:53 +0000
ROA not before: Tue 30 Jan 2024 08:22:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56332
IP address blocks: 91.220.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:59:76:c9:c2:61:ea:a6:35:85:c2:02:42:d5:4f:1a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d4ac320965ab4991108501a0602a6893e63fec
Validity
Not Before: Jan 30 08:22:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd9c1b51ba253e13e41184dbda9d9e209347d931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:52:52:e0:ef:f6:ac:28:39:69:7c:8b:02:6b:
99:be:ee:41:21:01:3d:b1:d3:6a:b0:33:21:7e:5b:
7c:92:93:86:d9:25:91:76:8a:34:b6:9c:7e:05:86:
c9:30:93:4b:62:8c:27:0f:ac:86:ae:eb:a6:64:98:
15:60:bb:72:6d:54:1a:5a:bd:94:2e:fd:fd:37:1e:
a2:12:75:35:63:0c:4c:3f:2f:34:20:78:d7:0a:0c:
4a:37:1a:69:7e:ba:10:ac:59:11:93:6c:97:07:1d:
b6:21:eb:2a:fe:b8:cf:31:99:f9:04:d6:13:87:7f:
0e:ac:04:20:f4:3d:5c:4f:bd:9d:75:7a:9f:fa:01:
88:0e:3e:c2:9f:02:18:73:e6:1c:21:9e:a8:04:21:
5c:c1:03:f9:8c:1d:31:97:10:85:4a:1d:73:35:8f:
06:fe:8b:70:97:c4:64:23:9a:f6:4c:26:1b:01:e8:
ae:7b:a3:e5:6a:34:bf:b1:fa:c6:b4:d8:4d:15:40:
ca:83:d2:ea:3c:d7:7d:d0:1d:18:a6:1f:c6:92:3a:
95:bb:26:70:f3:bb:63:c1:32:40:d4:fb:de:f4:dc:
e5:7b:42:4b:af:4d:0a:29:73:fe:47:96:03:32:c7:
ee:75:64:4c:bb:30:de:2e:ca:b2:9c:e1:bc:c7:31:
52:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:9C:1B:51:BA:25:3E:13:E4:11:84:DB:DA:9D:9E:20:93:47:D9:31
X509v3 Authority Key Identifier:
keyid:50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/zZwbUbolPhPkEYTb2p2eIJNH2TE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.239.0/24
Signature Algorithm: sha256WithRSAEncryption
98:fe:ea:28:aa:ab:1f:a5:4d:d5:e9:fe:c3:e9:2b:41:6d:34:
e4:6a:13:db:74:de:6e:6c:82:6f:f1:c2:b9:b0:de:85:71:e1:
b6:1e:52:16:11:50:9d:5f:87:ff:c6:ec:f3:e2:9c:ab:a7:d7:
75:27:d8:d1:94:df:1a:18:06:dd:f6:a4:22:1b:8a:bf:e6:b5:
15:09:8d:45:9d:03:0c:e4:cf:0a:ea:25:cc:3a:b5:ac:8d:ec:
c9:fd:f8:d0:eb:2f:75:42:ea:bb:4d:91:3e:60:ee:ea:99:87:
e4:95:49:e6:a2:09:43:d9:3c:9e:2b:8e:9b:46:a4:da:95:83:
b2:d8:5d:b4:f4:1e:72:ab:54:75:f7:00:ba:5c:b5:4b:b0:a9:
dc:ea:71:1a:2d:7a:fd:fc:4a:aa:85:94:2e:c9:92:e1:80:37:
71:75:22:96:0f:63:c1:08:70:a9:51:f5:47:af:c6:28:0f:09:
60:58:7f:f7:92:cd:f4:f9:3a:11:63:60:62:fd:86:a9:a3:96:
39:c1:be:ba:c4:bd:56:fc:9c:46:dd:51:bf:d2:92:7e:66:cb:
7d:e3:d2:3d:7d:bd:56:3b:13:34:98:ab:fb:0b:e2:1e:01:b3:
52:42:4d:be:ac:5f:8d:53:93:a2:af:9b:d0:2b:bc:bd:80:d2:
22:02:34:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 06:31:26 2024 by rpki-client on console-ams.rpki-client.org