Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/ZYUFRZqGQZcCgDpwUu0uNUDyPj4.roa
File: ZYUFRZqGQZcCgDpwUu0uNUDyPj4.roa (raw, json)
Hash identifier: GvbYRyugy+4UBPO3M3V66v9J1zZNRa+Z21PmAeMvLX8=
Subject key identifier: 65:85:05:45:9A:86:41:97:02:80:3A:70:52:ED:2E:35:40:F2:3E:3E
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 018DD01C3F1DDD4A02D46865C983E45DE5A2
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/ZYUFRZqGQZcCgDpwUu0uNUDyPj4.roa
Signing time: Thu 22 Feb 2024 09:18:48 +0000
ROA not before: Thu 22 Feb 2024 09:18:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59425
IP address blocks: 185.42.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 15:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d0:1c:3f:1d:dd:4a:02:d4:68:65:c9:83:e4:5d:e5:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Feb 22 09:18:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=658505459a86419702803a7052ed2e3540f23e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:55:3b:25:5f:58:f4:53:b3:c5:6f:63:e5:6d:
24:e9:9c:f2:25:8d:eb:2d:4f:e9:4a:04:f9:c1:0e:
69:2e:87:14:f8:5f:fb:a5:8c:9e:f2:af:74:93:bb:
1b:61:dd:2c:9a:69:10:05:fd:4d:21:74:1e:76:3e:
dc:67:53:88:5d:4c:a7:ff:2f:60:25:29:19:13:3b:
20:7c:8e:82:59:c6:c3:3b:38:45:0e:a3:8f:71:d1:
19:73:cb:22:e8:38:5b:fa:11:c3:90:95:34:75:da:
46:98:0b:52:36:cc:71:be:61:ad:55:1c:2d:c4:35:
31:bf:02:bd:5e:4e:24:ae:5d:d1:f2:8f:91:92:2e:
76:bb:40:ae:05:7d:cf:66:63:11:18:d6:a8:78:d0:
b2:5a:78:c5:d0:1a:aa:b4:b6:63:87:a4:73:b3:a1:
75:79:65:3e:5d:e0:d1:fd:59:52:e9:a3:5b:51:50:
bf:1d:da:28:46:7a:98:c1:98:31:c2:8f:af:56:40:
f0:3a:f2:c2:dd:69:5b:93:82:f9:67:50:8c:fc:d8:
9c:c5:cc:2d:aa:7f:a9:e3:c9:3f:27:c6:c6:84:8c:
b1:a2:5b:cc:76:72:f1:8b:4e:9f:e9:ff:c7:b4:03:
65:50:ef:f2:9b:c3:a2:b2:99:1b:16:51:57:62:37:
28:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:85:05:45:9A:86:41:97:02:80:3A:70:52:ED:2E:35:40:F2:3E:3E
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/ZYUFRZqGQZcCgDpwUu0uNUDyPj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.12.0/24
Signature Algorithm: sha256WithRSAEncryption
85:04:0e:cc:86:c8:f2:a3:c8:c0:a9:9b:b3:aa:e8:0e:7a:8b:
0b:fb:f1:07:ef:4f:c2:04:13:7d:b8:24:06:1c:3c:91:be:24:
10:1d:dc:bc:36:7b:85:06:6d:8a:ad:1b:b6:a1:5e:20:2d:3f:
92:36:83:32:98:af:63:dd:67:9a:b3:28:a9:29:b0:05:3d:be:
76:5f:42:bd:37:85:01:bb:7e:4c:16:18:b9:08:ff:d2:6f:79:
94:2e:87:39:6d:a3:0d:1d:45:cc:47:f0:cf:90:87:86:97:0e:
d6:ca:00:e1:e0:5e:74:66:11:6a:2e:a1:b1:76:8f:fc:fd:d9:
ca:68:89:81:49:74:93:3c:21:5b:f2:16:89:b2:67:7f:47:b7:
02:a0:0b:31:28:e9:93:91:3b:13:84:6f:13:92:ff:b6:7f:84:
59:00:84:dd:91:54:f2:bf:30:06:5c:a9:08:cf:1e:9c:58:44:
39:92:46:6f:50:cf:2c:93:54:05:de:77:f4:68:56:9e:1d:a5:
2a:3d:99:5e:f3:8f:b0:ec:f8:ab:19:44:b2:f8:17:59:85:08:
b4:25:bc:03:d5:78:6b:80:20:45:27:db:ef:fc:91:3a:df:7b:
00:bb:d3:db:46:77:34:a8:b1:48:be:31:56:a4:53:a5:be:01:
04:8b:ab:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:56:20 2024 by rpki-client on console-fra.rpki-client.org