Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/790e87-201a-4543-b46c-7298c47454fe/1/zZbd-1jfQsNubbbRUj1Hbls-QMU.roa
File: zZbd-1jfQsNubbbRUj1Hbls-QMU.roa (raw, json)
Hash identifier: ZLk7QLbHIpe4KxrJEksWJReUq9Br07FXK99E63s1+Hs=
Subject key identifier: CD:96:DD:FB:58:DF:42:C3:6E:6D:B6:D1:52:3D:47:6E:5B:3E:40:C5
Certificate issuer: /CN=1ee51ed90c49cae92fca2e8238114c7638380483
Certificate serial: 0191BCE00108CA5A38F3F58A46223664FFBC
Authority key identifier: 1E:E5:1E:D9:0C:49:CA:E9:2F:CA:2E:82:38:11:4C:76:38:38:04:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HuUe2QxJyukvyi6COBFMdjg4BIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/790e87-201a-4543-b46c-7298c47454fe/1/zZbd-1jfQsNubbbRUj1Hbls-QMU.roa
Signing time: Wed 04 Sep 2024 11:51:22 +0000
ROA not before: Wed 04 Sep 2024 11:51:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58323
IP address blocks: 146.19.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/790e87-201a-4543-b46c-7298c47454fe/1/HuUe2QxJyukvyi6COBFMdjg4BIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/790e87-201a-4543-b46c-7298c47454fe/1/HuUe2QxJyukvyi6COBFMdjg4BIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HuUe2QxJyukvyi6COBFMdjg4BIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 17:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bc:e0:01:08:ca:5a:38:f3:f5:8a:46:22:36:64:ff:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ee51ed90c49cae92fca2e8238114c7638380483
Validity
Not Before: Sep 4 11:51:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd96ddfb58df42c36e6db6d1523d476e5b3e40c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a4:34:2a:6f:50:66:f3:75:77:e9:64:57:2b:
b6:cd:1b:fb:a8:8c:b0:5c:bb:13:ee:15:ec:8a:55:
6f:8e:e3:a4:46:4a:25:cb:4f:68:db:a1:6c:7f:80:
2f:16:20:2b:0f:16:44:77:74:c8:6f:2d:40:f4:ca:
04:85:1a:a4:a0:64:66:cc:2a:f5:89:68:06:0f:74:
d1:b7:2f:3d:a5:06:2c:a4:5a:bd:63:63:19:82:23:
94:1a:b4:2f:bc:ad:c3:15:87:04:59:b4:c2:42:f3:
b3:fc:b8:8c:ca:e5:a9:a0:60:41:24:06:a8:59:ed:
b4:d7:53:5f:a9:88:bf:7f:69:ee:c9:ea:d5:98:34:
c5:97:27:0e:ec:7e:e7:4d:08:f5:81:de:6e:41:8c:
5a:49:d2:64:b9:24:d3:29:6a:75:cb:c8:72:2a:b3:
27:29:15:8b:90:c8:a5:48:9d:f5:c2:57:8b:49:27:
73:52:a7:60:b6:d3:8b:e1:69:5b:59:b6:b5:69:7f:
03:5a:41:77:cc:79:c8:42:b7:5e:56:5a:d7:4a:da:
23:a4:0c:d7:78:82:45:0f:e1:b8:8a:60:e1:a9:32:
04:f2:af:40:c9:84:f8:1f:ab:b5:79:08:90:0c:7e:
2c:54:d5:dd:42:60:d1:62:e5:7f:4c:3d:e9:2e:a8:
53:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:96:DD:FB:58:DF:42:C3:6E:6D:B6:D1:52:3D:47:6E:5B:3E:40:C5
X509v3 Authority Key Identifier:
keyid:1E:E5:1E:D9:0C:49:CA:E9:2F:CA:2E:82:38:11:4C:76:38:38:04:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HuUe2QxJyukvyi6COBFMdjg4BIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/790e87-201a-4543-b46c-7298c47454fe/1/zZbd-1jfQsNubbbRUj1Hbls-QMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/790e87-201a-4543-b46c-7298c47454fe/1/HuUe2QxJyukvyi6COBFMdjg4BIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.146.0/24
Signature Algorithm: sha256WithRSAEncryption
43:17:80:85:60:43:d3:8e:e8:9a:99:97:18:85:6c:2f:6f:6f:
b9:c6:7e:4f:bd:0f:89:2c:93:de:5f:02:c3:1d:f2:bf:b9:90:
da:52:02:19:c6:d5:fe:60:08:3e:df:1b:4e:75:a7:da:71:e7:
74:39:a8:01:9c:42:30:cb:28:b8:c8:14:de:b4:f4:33:a6:57:
c6:43:69:30:14:11:3a:d3:b7:25:2a:88:87:3d:5c:80:a6:a4:
65:a1:75:d0:86:46:0a:d1:39:c1:b6:4d:dd:6b:f9:ec:a6:9d:
d9:f7:6c:c4:1b:09:49:cb:0b:c6:7d:09:66:f6:8d:06:94:fc:
53:a5:22:33:11:03:c3:3c:ae:ba:24:79:d6:06:05:4e:42:b3:
e0:7e:13:18:f3:93:86:99:86:08:d1:df:41:9f:3f:e5:b0:ee:
93:30:93:05:18:9c:45:f5:80:3c:9c:94:32:ce:a4:ea:a0:51:
80:b1:73:46:f0:d0:d1:f5:d2:70:f6:72:dd:ca:53:7b:54:38:
0c:eb:d9:9b:f7:d6:77:62:9e:cf:cd:c3:92:7f:2e:76:02:4b:
30:e6:e1:f0:3e:34:56:8a:a0:98:cf:53:9b:80:87:c1:a2:39:
63:29:c0:ee:c1:1a:12:e6:6e:a4:56:72:55:88:42:24:69:95:
cf:ed:f8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:59:01 2024 by rpki-client on console-fra.rpki-client.org