Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/zkQ8Yq5VC6h46JFKXW5jf0Xzses.roa
File: zkQ8Yq5VC6h46JFKXW5jf0Xzses.roa (raw, json)
Hash identifier: PDMilvIIr9o0ZBn7RhwsfuCnpHOersLhK9yG9VT48Zg=
Subject key identifier: CE:44:3C:62:AE:55:0B:A8:78:E8:91:4A:5D:6E:63:7F:45:F3:B1:EB
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 019277C462A2143F0908BB68325A18EBED7E
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/zkQ8Yq5VC6h46JFKXW5jf0Xzses.roa
Signing time: Thu 10 Oct 2024 18:50:11 +0000
ROA not before: Thu 10 Oct 2024 18:50:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 171.33.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 16:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:77:c4:62:a2:14:3f:09:08:bb:68:32:5a:18:eb:ed:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Oct 10 18:50:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce443c62ae550ba878e8914a5d6e637f45f3b1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:35:07:06:40:00:3d:7b:bf:b5:17:6e:b0:ac:
b9:1b:1a:cb:dc:6f:54:3e:33:70:f5:56:9b:55:ba:
ae:44:70:aa:9a:d8:9a:fe:f6:5c:1f:d4:4b:90:a3:
a8:b0:84:05:17:e8:08:33:f9:bb:13:42:9d:76:08:
47:61:84:a6:04:68:3d:45:4e:39:6f:d0:40:36:07:
21:fb:ce:6a:8e:80:e7:86:69:f2:bb:f5:d2:5d:66:
a9:d8:f8:e0:e6:c6:99:00:d3:27:fb:5d:1b:00:79:
33:db:8d:80:a8:97:f1:5b:cd:f9:73:b8:47:59:a9:
81:13:9a:10:63:65:4f:83:8d:a7:6e:6d:bf:98:a3:
67:6f:a9:c8:db:53:6a:09:c5:6d:ed:b5:fa:ae:b6:
4a:8c:cd:3a:f8:ed:55:97:7d:24:de:8b:bb:07:a0:
76:9b:29:11:3a:e3:ad:51:cb:d5:dc:4f:44:7e:46:
53:0c:78:60:92:d8:a4:bb:0c:fc:90:57:cc:44:a8:
4e:b6:87:2a:26:ef:20:95:e1:27:80:67:d2:13:81:
83:c8:36:23:68:4b:d0:bb:52:60:35:1e:0e:36:4a:
8e:dd:a6:c4:c0:df:91:f1:b6:4d:0d:89:6b:70:70:
28:6e:6d:7d:79:ff:ba:c0:a1:9a:0e:64:85:b3:c7:
be:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:44:3C:62:AE:55:0B:A8:78:E8:91:4A:5D:6E:63:7F:45:F3:B1:EB
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/zkQ8Yq5VC6h46JFKXW5jf0Xzses.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.33.240.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:ef:9e:34:9f:1d:88:1d:de:7f:52:16:05:40:a4:36:a7:92:
91:a8:b4:a7:ef:09:92:c4:6d:1c:23:da:aa:ab:7f:1e:e9:0b:
56:85:86:2d:26:4a:be:52:1c:50:61:d9:6e:e7:31:a2:d9:51:
7d:f8:9d:f2:57:66:f6:44:89:0a:4e:03:fc:bc:33:df:47:06:
42:62:70:6c:5c:f4:50:b4:d7:3e:2a:99:80:db:a2:b8:5f:7a:
10:b3:7f:e0:10:df:f6:44:52:4f:3d:65:07:d3:0d:91:e6:6d:
c1:1b:72:bc:4d:98:18:46:fe:a4:a5:a8:4e:5b:64:32:70:28:
b3:27:d8:b0:36:ed:dd:1b:9e:f5:1c:88:ec:23:f4:df:a2:2c:
2c:ad:09:d1:49:81:c7:6a:a3:de:ef:d1:99:57:40:ac:a5:85:
d7:9c:78:fc:b1:1f:36:f4:b2:1e:a3:83:0b:fb:f3:e2:16:a2:
47:8e:26:f5:6f:31:d1:8b:4e:79:bf:23:f4:e3:1a:61:9c:73:
c8:63:8f:ae:63:83:44:97:89:8d:ce:e8:81:5b:f6:7e:96:c6:
6b:5d:26:92:53:69:35:a7:59:cd:70:6d:22:0c:4b:08:7c:8d:
ac:78:85:13:94:e6:33:69:00:a9:f8:2e:cf:d8:bf:98:87:39:
ed:8f:64:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:51:18 2024 by rpki-client on console-fra.rpki-client.org