Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/Zs595UAaHhJIpq5PLwsqY-qcGsk.roa
File: Zs595UAaHhJIpq5PLwsqY-qcGsk.roa (raw, json)
Hash identifier: T/qOVbliK2GynOoUtpp1/znVo5Jx2w2H1Xb20n/AtXc=
Subject key identifier: 66:CE:7D:E5:40:1A:1E:12:48:A6:AE:4F:2F:0B:2A:63:EA:9C:1A:C9
Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Certificate serial: 0190BFF357BE0DFA692414D26EC9860EB328
Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/Zs595UAaHhJIpq5PLwsqY-qcGsk.roa
Signing time: Wed 17 Jul 2024 09:08:34 +0000
ROA not before: Wed 17 Jul 2024 09:08:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215762
IP address blocks: 92.60.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:bf:f3:57:be:0d:fa:69:24:14:d2:6e:c9:86:0e:b3:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Validity
Not Before: Jul 17 09:08:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66ce7de5401a1e1248a6ae4f2f0b2a63ea9c1ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e9:f2:c3:3b:53:df:23:50:f6:a9:be:e7:78:
09:2a:2a:5a:78:b1:34:35:38:d2:a6:e3:7f:30:62:
1a:84:e5:53:8f:4f:6f:91:34:38:2b:fa:24:1d:eb:
56:5d:cf:36:d3:e6:19:a4:42:ce:e0:8b:5d:52:61:
c0:12:f7:e0:1f:7e:ed:dd:d5:ea:8a:9d:bf:d9:27:
3b:ec:ac:d0:63:f1:d1:6e:7a:de:ad:e7:12:3b:71:
43:bd:8e:1f:63:73:79:6a:79:f4:7f:d4:0b:ca:e5:
2d:6a:b5:82:9d:2c:b8:bc:43:56:5c:85:e9:e6:de:
c5:f9:34:05:fb:b1:0c:80:2a:f4:e1:72:b2:a8:f1:
13:63:3a:79:53:74:63:3b:8e:b7:9d:81:a2:ea:83:
2b:16:19:1f:4e:9a:bd:e2:4e:72:17:8d:b4:3c:37:
28:2d:6d:e3:10:af:1e:01:a9:af:65:8b:49:1e:ac:
67:9d:d5:f0:04:7f:ca:c6:1a:99:f4:57:d9:fa:4c:
a9:ad:a6:7e:e4:15:0e:75:ed:69:f9:64:4f:b7:ac:
db:2e:cd:89:40:bd:4c:f8:d4:fe:c7:7e:ea:c1:69:
f0:4d:d7:c6:ef:e1:4a:40:35:be:54:b1:1b:9e:78:
33:6b:c1:ea:9c:6b:ef:6a:4c:03:61:5f:aa:5a:23:
6d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CE:7D:E5:40:1A:1E:12:48:A6:AE:4F:2F:0B:2A:63:EA:9C:1A:C9
X509v3 Authority Key Identifier:
keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/Zs595UAaHhJIpq5PLwsqY-qcGsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.79.0/24
Signature Algorithm: sha256WithRSAEncryption
06:a2:23:9c:88:7c:69:05:71:5d:02:58:85:d7:f7:8a:16:c8:
f4:8b:fd:9e:0d:d3:98:48:fd:36:64:40:98:ac:b1:a9:2a:fa:
70:64:73:99:a2:6e:2f:5b:0a:c4:3c:af:72:ab:d9:86:3a:63:
b2:61:41:bb:c8:86:60:62:a8:53:61:ce:bc:e4:96:0f:da:21:
94:8b:57:c1:62:84:29:8d:9c:44:44:99:89:54:b0:9e:c0:8e:
61:a0:da:18:53:54:3a:27:88:b7:8a:4a:c6:bc:a8:b3:c9:44:
00:2f:9d:ec:ed:b2:14:62:6d:00:20:aa:00:54:07:74:ec:06:
30:61:9d:77:11:a3:c8:40:21:1d:78:97:2b:bc:2f:f6:d7:1e:
51:aa:2a:2d:cf:de:0a:68:e5:df:89:75:ad:11:b7:b3:29:92:
f1:47:5a:1d:49:73:6a:8b:21:c9:10:0c:2c:d9:c8:93:4d:9d:
81:12:0b:1f:1d:01:bd:2d:ad:c3:08:34:8e:de:2e:03:80:b5:
d5:30:50:e1:fd:2b:11:04:b4:6e:e8:2b:12:6e:47:e3:20:9f:
fe:7f:48:5e:84:92:d3:93:d9:df:d6:66:53:0d:41:33:83:36:
b8:fb:be:8e:76:61:d4:db:20:f0:30:53:75:3a:cd:ba:79:fc:
c5:ce:1a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:05:13 2024 by rpki-client on console-fra.rpki-client.org