Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/ZH2ODpHZqCQNpn035Ob1UnRP36o.roa
File: ZH2ODpHZqCQNpn035Ob1UnRP36o.roa (raw, json)
Hash identifier: Gkj9EPobnWa4yS3G5dus3vjrgubq6gszUKpXz4V6+zc=
Subject key identifier: 64:7D:8E:0E:91:D9:A8:24:0D:A6:7D:37:E4:E6:F5:52:74:4F:DF:AA
Certificate issuer: /CN=eee573084100b41d7cc1e447295ba71d019d5192
Certificate serial: 01904981FED5450A285E153847EE1B76EA4C
Authority key identifier: EE:E5:73:08:41:00:B4:1D:7C:C1:E4:47:29:5B:A7:1D:01:9D:51:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7uVzCEEAtB18weRHKVunHQGdUZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/ZH2ODpHZqCQNpn035Ob1UnRP36o.roa
Signing time: Mon 24 Jun 2024 09:09:34 +0000
ROA not before: Mon 24 Jun 2024 09:09:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8262
IP address blocks: 217.168.232.0/24 maxlen: 24
2a05:b6c2::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/7uVzCEEAtB18weRHKVunHQGdUZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/7uVzCEEAtB18weRHKVunHQGdUZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7uVzCEEAtB18weRHKVunHQGdUZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:49:81:fe:d5:45:0a:28:5e:15:38:47:ee:1b:76:ea:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eee573084100b41d7cc1e447295ba71d019d5192
Validity
Not Before: Jun 24 09:09:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=647d8e0e91d9a8240da67d37e4e6f552744fdfaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:14:dd:69:4d:1c:68:b5:50:af:95:04:9b:f6:
db:88:d3:e3:88:82:60:b5:73:57:3b:23:a2:3e:02:
70:30:05:1d:8c:52:02:4c:63:35:e0:9f:7b:33:18:
f9:dd:1b:cb:18:df:4e:6c:f5:9f:ce:18:3e:3c:39:
ff:b7:fe:b9:ac:ee:f3:4a:23:9d:eb:75:e1:04:ba:
eb:e2:54:5a:8f:43:6f:29:fd:d0:ae:2f:d7:7e:7b:
13:f5:4d:22:ea:90:23:3e:52:19:f3:f0:f3:6b:1c:
70:d2:31:91:02:b1:b6:36:2e:4c:a7:d2:b0:93:d6:
7d:96:7c:25:8b:cd:0f:b7:c7:1c:55:2f:15:e1:ba:
e6:6c:35:5a:fd:d2:76:f1:f4:34:81:46:51:c7:70:
e1:2a:d9:67:ad:e1:9e:c7:fe:26:70:a4:23:a1:16:
4e:59:a3:ea:48:e6:5a:fe:b5:a7:51:01:f3:4f:86:
7d:cb:8d:92:7c:00:7c:51:c2:55:98:0e:a3:08:ad:
e6:b0:12:2f:59:e7:f9:92:b0:d5:6e:a7:f3:35:cf:
bf:17:c5:82:77:06:88:41:59:e1:6c:48:70:2e:2b:
e9:c9:a3:43:9f:c9:7e:24:8e:0f:5b:8d:4b:e8:3e:
6d:86:72:fd:93:2d:25:a9:fd:cf:05:b1:71:c4:bd:
be:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7D:8E:0E:91:D9:A8:24:0D:A6:7D:37:E4:E6:F5:52:74:4F:DF:AA
X509v3 Authority Key Identifier:
keyid:EE:E5:73:08:41:00:B4:1D:7C:C1:E4:47:29:5B:A7:1D:01:9D:51:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uVzCEEAtB18weRHKVunHQGdUZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/ZH2ODpHZqCQNpn035Ob1UnRP36o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/7uVzCEEAtB18weRHKVunHQGdUZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.168.232.0/24
IPv6:
2a05:b6c2::/32
Signature Algorithm: sha256WithRSAEncryption
59:82:7a:c0:06:be:6b:c7:41:75:f7:78:cc:49:16:9f:37:08:
02:5e:7e:58:55:19:e9:bf:c5:f9:ba:fa:42:42:e0:d8:7e:67:
0e:ee:43:9f:5a:8d:63:6c:8d:41:46:1b:4d:55:b1:d3:2e:8e:
95:08:c3:dd:4d:d7:85:21:9a:b4:e5:08:5c:39:50:86:ef:76:
42:e7:f0:28:af:71:c8:56:5f:f2:63:9b:9d:ca:e1:1b:48:0a:
97:ac:24:22:ed:18:b3:41:c5:4a:4a:17:6c:58:9d:67:94:6e:
26:64:f6:de:50:f1:9c:76:c7:1e:f9:c4:08:49:3c:be:b6:9e:
d6:57:f5:26:84:fa:b7:a7:a5:47:3d:c0:2c:2c:e5:12:63:71:
96:0a:ad:82:63:b3:bd:f2:0e:a4:e7:fe:f8:b8:c0:91:46:de:
c2:53:c2:07:91:f9:a7:ff:83:b6:77:a2:f6:d4:ab:f7:a2:ff:
5f:d9:ac:08:de:34:77:8d:d4:02:10:9b:be:2a:9c:10:7b:ab:
41:43:76:ff:b7:1d:11:54:a2:b9:4a:65:bb:8a:82:6c:ed:3c:
4b:96:2b:c6:6c:b7:40:c9:10:aa:4d:2b:a7:ed:03:52:32:37:
1a:91:4a:e0:24:8e:b7:83:e1:3c:a0:96:10:89:1d:91:ea:69:
7c:2c:50:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:26:32 2024 by rpki-client on console-fra.rpki-client.org