Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/ZcL6xI3YHgb2tIqk_9YeqdfLsZw.roa
File: ZcL6xI3YHgb2tIqk_9YeqdfLsZw.roa (raw, json)
Hash identifier: w3r8UixAmrvrBgjJKe+lqSu5hTqBwV91E0KdybCFHQk=
Subject key identifier: 65:C2:FA:C4:8D:D8:1E:06:F6:B4:8A:A4:FF:D6:1E:A9:D7:CB:B1:9C
Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Certificate serial: 018DD5B5F4F0233513B74EC1323BAB202D5E
Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/ZcL6xI3YHgb2tIqk_9YeqdfLsZw.roa
Signing time: Fri 23 Feb 2024 11:24:48 +0000
ROA not before: Fri 23 Feb 2024 11:24:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 92.60.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d5:b5:f4:f0:23:35:13:b7:4e:c1:32:3b:ab:20:2d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Validity
Not Before: Feb 23 11:24:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65c2fac48dd81e06f6b48aa4ffd61ea9d7cbb19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:05:34:49:cd:d5:59:bc:1c:1e:60:3f:75:5d:
62:b6:40:80:e2:f9:ed:97:37:72:56:b1:ba:c8:6a:
2e:f4:e2:00:5d:0b:05:58:37:54:27:1c:b4:e0:3c:
c5:8b:db:81:2a:ca:1b:ac:34:32:81:8e:a9:08:d2:
f7:50:69:9a:55:4d:0e:71:d5:a0:fc:28:79:a4:2e:
bb:a0:a3:fa:da:71:24:b8:81:62:4a:a4:c5:08:93:
53:71:2a:b0:ca:ed:96:11:a9:5f:2d:e3:f1:d7:f9:
ed:8c:be:43:5c:0b:1c:84:dd:0c:8b:2f:f5:30:a3:
15:82:da:ca:58:ff:28:01:c8:3e:18:01:28:5e:bb:
63:e6:d7:ab:ee:33:74:fd:b6:7c:d8:90:ef:0b:e6:
6a:36:a4:09:aa:66:30:7d:c7:4c:72:86:5a:da:cd:
16:2d:15:ff:2a:32:46:3b:72:97:a2:87:ef:23:a7:
60:04:48:7f:54:fe:65:4b:ae:94:c7:61:07:c2:08:
8d:e2:18:8e:7e:a8:d3:01:80:35:a1:8a:46:d0:b8:
b1:b1:9a:f1:d0:09:f2:76:41:d5:d5:87:ad:ac:e2:
04:e5:a4:fd:5b:5c:fb:d8:a7:d4:46:46:69:92:6d:
11:b7:e1:f3:45:29:8e:3f:8e:52:7c:77:93:b7:c5:
79:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C2:FA:C4:8D:D8:1E:06:F6:B4:8A:A4:FF:D6:1E:A9:D7:CB:B1:9C
X509v3 Authority Key Identifier:
keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/ZcL6xI3YHgb2tIqk_9YeqdfLsZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.79.0/24
Signature Algorithm: sha256WithRSAEncryption
97:d0:c3:a8:04:44:8c:5a:ef:49:8a:64:81:1f:4c:cb:7b:d6:
59:bd:db:e8:00:a9:06:e6:4d:23:a3:69:49:0b:b4:5f:18:9c:
d8:d2:78:e0:96:f8:3d:7e:30:8f:38:e6:53:81:db:d7:e4:7a:
4e:93:bd:83:95:17:ea:a8:bb:94:01:9e:e3:f3:47:0b:a4:2b:
de:1f:19:71:57:64:30:68:4a:09:79:df:a1:ea:a9:62:16:30:
a4:e8:7c:f5:e5:00:b5:84:65:3c:3b:a8:c3:7c:1c:32:16:de:
c1:01:fd:8f:1f:4d:5a:bb:67:59:3b:17:6d:a3:c2:e4:b3:55:
07:83:8c:44:7b:76:97:6d:fd:c9:7e:cf:d8:2c:8c:0f:21:fd:
59:18:8e:a3:58:34:23:44:f5:d9:fd:8d:f4:12:c6:0c:2d:b5:
b0:ef:15:b8:b6:be:d1:71:67:f9:27:e8:d5:a1:a3:a2:0a:3c:
59:e1:ae:44:cb:73:da:70:fa:df:83:91:b3:17:57:33:f9:53:
da:40:4b:58:65:d8:72:c5:87:d8:69:80:a3:83:2b:3f:da:a5:
cb:27:09:87:2c:02:ba:67:a6:a0:e2:7f:42:e4:26:3d:b4:35:
2b:34:b4:a8:4c:e4:5c:b1:7e:a5:33:0f:5b:e6:65:31:d1:cc:
5e:cd:54:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 07:44:34 2024 by rpki-client on console-fra.rpki-client.org