Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/zgrnwFwrYqHet0VOTL6GObVqaoI.roa
File: zgrnwFwrYqHet0VOTL6GObVqaoI.roa (raw, json)
Hash identifier: 1GJv1hWWjnySvpXINDXo87s+shmbypQM+oObXHaGOnU=
Subject key identifier: CE:0A:E7:C0:5C:2B:62:A1:DE:B7:45:4E:4C:BE:86:39:B5:6A:6A:82
Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial: 018CC8DF2000FC0409ED3E140418642BD586
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/zgrnwFwrYqHet0VOTL6GObVqaoI.roa
Signing time: Tue 02 Jan 2024 06:31:55 +0000
ROA not before: Tue 02 Jan 2024 06:31:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7155
IP address blocks: 213.209.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:20:00:fc:04:09:ed:3e:14:04:18:64:2b:d5:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
Validity
Not Before: Jan 2 06:31:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce0ae7c05c2b62a1deb7454e4cbe8639b56a6a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:aa:7b:06:3c:27:6e:b6:81:77:ca:40:e5:79:
b3:5b:c7:f9:ef:ce:40:11:6a:a7:b4:c2:ee:70:ef:
48:3a:ac:79:1a:23:ff:9a:22:68:9a:b6:af:49:a1:
c3:b7:62:fc:55:9f:5c:db:55:ae:af:a7:f5:db:df:
40:51:96:c2:99:a8:54:bf:e9:dc:bd:20:4e:92:be:
51:45:77:93:03:e2:9e:5c:dc:a3:47:ad:3d:ba:47:
53:7e:d9:28:d1:a3:de:b0:1f:fd:95:10:23:ad:6f:
18:c3:f6:ba:e1:b8:7b:26:65:12:a6:42:89:95:47:
0a:0d:94:9d:f4:1c:71:d0:dc:62:f0:f1:2e:ca:5b:
a8:ad:72:e2:f2:71:50:f6:fc:08:9a:e7:e6:52:a7:
b7:de:b4:c1:9b:2f:21:56:43:79:80:2f:47:c3:ff:
71:84:e3:83:b2:05:b8:0f:a0:57:76:0e:e8:21:11:
29:46:f7:11:05:de:5f:5f:45:af:4d:84:3d:e7:01:
16:db:64:57:a2:a0:42:32:a5:b8:2e:1d:35:86:9b:
f1:42:2f:7f:5d:dc:0e:39:af:b8:ca:a7:91:32:a3:
13:d9:d3:41:9d:a3:c4:12:c4:be:7d:0d:73:90:ac:
36:b1:01:86:54:4d:42:7c:fd:f9:46:14:9f:ca:98:
0b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0A:E7:C0:5C:2B:62:A1:DE:B7:45:4E:4C:BE:86:39:B5:6A:6A:82
X509v3 Authority Key Identifier:
keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/zgrnwFwrYqHet0VOTL6GObVqaoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.209.176.0/20
Signature Algorithm: sha256WithRSAEncryption
54:30:23:75:0f:b7:03:3e:17:2b:f5:b2:72:4e:ce:d6:ec:fc:
62:73:97:29:53:8a:31:55:5c:3d:1a:58:de:d4:6f:3a:7f:d4:
4c:e1:a9:ad:59:45:c8:6e:e1:ff:56:6e:1e:0b:32:0a:d3:07:
c3:d1:f6:e1:81:53:2f:2f:9d:fc:86:5b:50:74:a9:fa:a7:ea:
6d:bf:fa:a0:b5:c0:31:c2:e5:b5:69:69:56:bf:8d:6e:5d:04:
c0:8f:41:be:2c:48:2c:25:9e:d3:df:c5:fc:94:f2:f3:79:b6:
cc:6d:2d:b4:31:c7:79:e4:97:53:9a:de:6d:35:4d:ae:b2:bd:
58:d2:91:42:ba:b9:95:78:7f:bf:bb:f7:ae:32:34:5a:fb:d3:
e0:e9:cf:8b:a3:f7:f8:0a:4a:6b:1b:8b:8f:aa:75:fd:24:44:
b8:d4:f0:cd:3d:c6:31:b3:24:d5:1e:92:7f:cb:04:8f:4f:b4:
0a:a2:55:7e:b5:f5:b6:3c:11:bd:71:dc:f4:6d:cf:e3:13:ac:
5e:a1:25:b4:1d:5c:1e:0e:4a:80:31:27:cb:30:61:ad:a9:d4:
fd:f1:5a:6c:fa:ef:68:3e:df:b4:ea:b3:61:ce:f5:6a:9d:e1:
d7:91:bd:ba:7d:17:34:77:67:28:77:3e:9f:bb:d5:ff:19:63:
57:a8:44:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 13:48:26 2024 by rpki-client on console-ams.rpki-client.org