Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/zUJDwWtarPud5bzFNriDRdjYULw.roa
File: zUJDwWtarPud5bzFNriDRdjYULw.roa (raw, json)
Hash identifier: uQCnIUvCCS/Bxuvfpbjp/X3ojiWwT0fuya+j+HU4fFk=
Subject key identifier: CD:42:43:C1:6B:5A:AC:FB:9D:E5:BC:C5:36:B8:83:45:D8:D8:50:BC
Certificate issuer: /CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Certificate serial: 018E639D1F4321151D44A49B1E3122B5DD5F
Authority key identifier: C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/zUJDwWtarPud5bzFNriDRdjYULw.roa
Signing time: Fri 22 Mar 2024 00:43:45 +0000
ROA not before: Fri 22 Mar 2024 00:43:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 217.119.96.0/24 maxlen: 24
217.119.98.0/24 maxlen: 24
217.119.104.0/24 maxlen: 24
217.119.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:63:9d:1f:43:21:15:1d:44:a4:9b:1e:31:22:b5:dd:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Validity
Not Before: Mar 22 00:43:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd4243c16b5aacfb9de5bcc536b88345d8d850bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:02:84:cb:e6:7e:7f:55:7a:91:5a:45:46:ab:
33:c3:b7:c3:12:d0:3a:98:34:c5:7e:15:36:87:0b:
7c:41:2e:d1:17:e4:93:e9:8a:39:de:7b:eb:e2:61:
23:7c:bb:4e:d1:0a:3a:e3:da:58:c9:c6:a0:6f:be:
93:45:c4:17:75:6e:ea:1d:93:ae:82:14:3f:fd:51:
3e:78:50:e7:66:01:43:79:6e:b9:02:09:75:44:13:
2c:cb:dc:58:3a:10:57:17:a4:de:85:34:76:02:f0:
68:8c:8d:3f:a3:e4:c9:d0:6a:4d:42:0d:29:8e:45:
79:73:3d:28:74:7b:39:ba:6f:28:b8:45:9f:6f:31:
43:b6:51:7c:65:1f:42:48:e4:de:41:ac:83:93:b0:
22:b6:92:9d:95:74:aa:d4:2c:20:86:bb:2a:93:49:
29:78:7f:39:cd:d6:3f:61:9c:44:3c:de:b3:f4:fb:
f7:f0:2d:b4:fe:ce:17:68:9d:47:b6:89:aa:a9:db:
7d:f4:e9:c9:23:fa:35:b0:bd:ea:de:67:c8:02:ec:
27:fa:d1:33:38:92:72:7c:11:4d:89:a1:0f:a4:63:
49:8f:5f:c1:27:20:03:fd:39:af:2e:0f:8e:8f:a6:
aa:9b:f7:24:d6:04:7f:3c:18:4a:13:b9:c6:0a:7e:
8d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:42:43:C1:6B:5A:AC:FB:9D:E5:BC:C5:36:B8:83:45:D8:D8:50:BC
X509v3 Authority Key Identifier:
keyid:C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/zUJDwWtarPud5bzFNriDRdjYULw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.119.96.0/24
217.119.98.0/24
217.119.104.0/23
Signature Algorithm: sha256WithRSAEncryption
24:bc:f8:b6:16:01:86:ff:c4:bc:36:9b:87:c8:e2:1e:cb:38:
92:cd:ab:64:64:3e:62:6b:c7:97:d2:9f:95:1c:69:5a:66:91:
be:bb:f5:fa:40:9e:a8:94:4e:d5:64:9d:20:e1:30:d0:ea:eb:
8a:d8:2f:80:4c:85:70:7e:bc:9c:75:57:54:ce:91:c3:6a:9c:
3d:aa:6c:f5:5d:bf:43:6b:f6:13:f1:94:4a:43:97:ac:57:bf:
61:2c:70:be:2f:f5:45:9a:1c:eb:b0:82:f9:3a:6d:9d:25:99:
3b:bf:ba:f5:80:aa:ac:01:1b:44:09:cd:d4:46:8b:21:e1:4b:
e8:49:7d:fd:4b:66:51:d4:cf:f6:69:ee:02:06:df:fe:ee:b8:
d9:4b:89:c7:80:25:52:ba:ca:e6:fd:e6:50:44:78:8f:22:b7:
fa:9e:54:0c:88:89:ad:ac:03:6b:06:e4:60:74:bc:c4:4d:4d:
76:07:73:12:ab:90:eb:d2:45:ed:70:ee:aa:56:ab:9d:4f:7a:
07:cb:fc:04:77:03:71:4d:4a:cd:c2:52:42:66:f1:e8:5b:df:
11:a5:cd:73:2c:68:0b:b0:5c:c2:f8:6c:86:09:37:d0:23:3a:
4b:e9:ea:7c:ad:04:2f:aa:af:c5:1a:4a:77:26:84:ca:5c:ea:
0e:0b:70:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 16:32:25 2024 by rpki-client on console-fra.rpki-client.org