Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/zT_IZA4Gj_a3EP7MtJwnKaKKK5w.roa
File: zT_IZA4Gj_a3EP7MtJwnKaKKK5w.roa (raw, json)
Hash identifier: uUa0sHFRQrT5s5VTh2zUpY2EPqa2Gb9wO2kh40XG6Ys=
Subject key identifier: CD:3F:C8:64:0E:06:8F:F6:B7:10:FE:CC:B4:9C:27:29:A2:8A:2B:9C
Certificate issuer: /CN=ffbe256565e1c27c4b26560190e9978286a82b52
Certificate serial: 018CC6B8A138D2AC1C7C5AF2173AE9052F93
Authority key identifier: FF:BE:25:65:65:E1:C2:7C:4B:26:56:01:90:E9:97:82:86:A8:2B:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/zT_IZA4Gj_a3EP7MtJwnKaKKK5w.roa
Signing time: Mon 01 Jan 2024 20:30:37 +0000
ROA not before: Mon 01 Jan 2024 20:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201080
IP address blocks: 194.146.205.0/24 maxlen: 24
194.146.206.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:a1:38:d2:ac:1c:7c:5a:f2:17:3a:e9:05:2f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbe256565e1c27c4b26560190e9978286a82b52
Validity
Not Before: Jan 1 20:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd3fc8640e068ff6b710feccb49c2729a28a2b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:67:36:db:ac:74:15:d8:3a:f5:9a:3b:b7:ff:
54:87:08:a0:dd:fb:28:80:86:bb:ef:43:57:de:93:
73:4c:65:a7:f8:c9:58:06:69:75:36:1c:64:0d:bd:
72:dc:5e:91:3f:ae:c3:a4:33:ae:78:9f:41:cb:bd:
a8:d5:06:a4:ae:fe:27:44:4a:8f:3d:24:46:e0:91:
8f:4f:48:6f:cf:32:40:63:ac:1a:fa:1a:ae:b8:31:
bb:14:23:79:52:5c:64:7f:3b:ea:48:41:61:bb:b3:
02:dc:4e:4e:f1:3d:c3:46:23:8f:cc:6c:ee:a3:a7:
b8:8b:a1:b5:9d:eb:d8:21:d9:cf:3c:25:39:7d:0f:
e1:1c:18:33:b8:f7:50:02:77:4f:2b:37:06:36:84:
9e:30:f2:4f:bb:a6:2b:fa:36:f7:00:22:b0:2b:cc:
5d:fa:59:69:74:47:86:a0:e5:cb:50:4f:81:54:bf:
f4:34:e3:5a:f3:e3:09:57:c0:12:89:b9:65:de:73:
61:47:bc:49:9e:c8:11:21:dd:9c:ab:07:c7:d1:d2:
4d:bb:23:a5:35:58:05:2f:a6:b0:00:57:5e:03:7b:
77:f0:82:bb:0e:7f:7a:03:fa:2f:fb:44:7d:14:68:
67:ee:e6:3b:40:1d:40:81:7c:ce:91:f1:d4:b2:45:
0c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3F:C8:64:0E:06:8F:F6:B7:10:FE:CC:B4:9C:27:29:A2:8A:2B:9C
X509v3 Authority Key Identifier:
keyid:FF:BE:25:65:65:E1:C2:7C:4B:26:56:01:90:E9:97:82:86:A8:2B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/zT_IZA4Gj_a3EP7MtJwnKaKKK5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.205.0-194.146.207.255
Signature Algorithm: sha256WithRSAEncryption
bc:a8:50:2a:15:76:ba:b1:e9:a8:da:bc:0e:9e:dd:57:77:08:
7f:2e:57:fb:c1:d1:e3:2d:68:3a:8f:b2:81:8a:3f:33:de:e9:
d2:9f:c8:6f:dc:fa:85:b1:09:7c:c8:a7:48:69:fd:13:11:47:
58:bd:15:67:64:30:32:41:0a:50:29:ba:b8:1f:5b:a5:cc:79:
d9:c7:4b:ef:b4:fe:a3:b7:1d:59:36:89:68:fd:be:e2:2d:52:
b1:fe:64:e9:1c:bb:58:f2:6d:ff:8d:1c:e5:74:12:ae:26:d1:
41:85:fd:b7:56:ed:80:e3:60:94:92:78:19:f5:dc:f9:80:c3:
40:0e:28:59:04:8f:40:e5:1d:6b:55:95:3b:57:4c:e9:65:06:
7e:68:b0:02:88:33:c7:72:10:aa:0d:e1:a5:ca:7a:06:34:36:
2c:95:34:31:e7:d7:73:17:60:85:32:99:27:83:e6:90:9d:4d:
6f:40:87:97:32:70:bf:ed:ee:c2:1e:73:ab:77:24:ff:d6:cb:
e4:41:7b:2f:48:db:50:82:f8:46:ff:4c:5b:7e:cb:08:4a:c0:
eb:6c:10:e2:5b:4c:4d:f7:eb:f8:10:e7:96:0a:5e:82:39:bb:
87:0a:9a:74:90:74:5b:7c:24:e8:b9:b4:37:ad:91:12:5a:bb:
45:9d:6d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:28:12 2024 by rpki-client on console-ams.rpki-client.org