Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/RSCapZATFPNbEVH7-SaZReqaOx8.roa
File: RSCapZATFPNbEVH7-SaZReqaOx8.roa (raw, json)
Hash identifier: EOs4DTAQxbAiGQJX/dqFJUzyJMPZTJUeWxjynQ4dC4w=
Subject key identifier: 45:20:9A:A5:90:13:14:F3:5B:11:51:FB:F9:26:99:45:EA:9A:3B:1F
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0190C167F638CFB7A1F4EAC4189386AEBADE
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/RSCapZATFPNbEVH7-SaZReqaOx8.roa
Signing time: Wed 17 Jul 2024 15:55:34 +0000
ROA not before: Wed 17 Jul 2024 15:55:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 148996
IP address blocks: 14.102.226.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c1:67:f6:38:cf:b7:a1:f4:ea:c4:18:93:86:ae:ba:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 17 15:55:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45209aa5901314f35b1151fbf9269945ea9a3b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:75:a1:8c:99:6f:cf:de:6c:7b:2d:40:31:05:
75:8d:fa:08:62:dc:3f:29:7a:3f:72:95:c7:b6:53:
2c:0e:31:a8:57:15:65:71:47:1a:9b:bc:69:0c:b6:
b0:ae:71:b7:ac:e8:2c:1f:28:a0:05:40:58:97:c3:
90:ab:dc:9b:33:65:97:b7:da:77:23:03:e9:c4:c8:
7d:ae:72:70:a1:e8:67:0a:39:47:31:bd:23:dd:ea:
d9:6a:97:18:a4:27:7f:3e:22:71:ae:9a:4d:48:c9:
9c:29:f4:6e:be:50:79:ca:59:45:47:16:d6:a4:e9:
d4:29:df:3d:ad:90:29:9f:a4:a6:a5:b5:74:ee:61:
4b:82:76:e9:9c:f8:1d:e9:07:5e:fc:f8:ff:49:bf:
50:9f:43:b4:ae:5e:5c:34:e1:5d:b4:eb:50:ee:78:
0b:48:36:18:ec:ee:fe:63:eb:31:06:37:18:b4:43:
bb:2e:e8:72:67:6b:4f:24:e8:2c:6c:c0:3c:8a:9b:
b2:b2:f5:39:d3:b4:2c:d4:c2:5f:77:32:0e:fe:08:
a2:06:dc:08:78:f1:71:29:39:63:86:45:15:55:cd:
39:d7:6f:89:bd:4a:81:7d:24:a3:2a:7e:4b:fb:d8:
d8:27:08:83:2a:d9:fe:d7:13:0c:44:5f:b3:f7:f6:
a1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:20:9A:A5:90:13:14:F3:5B:11:51:FB:F9:26:99:45:EA:9A:3B:1F
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/RSCapZATFPNbEVH7-SaZReqaOx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.226.0/23
Signature Algorithm: sha256WithRSAEncryption
06:7a:92:8c:13:fe:5a:26:ce:ec:d8:8d:53:bb:69:f4:3e:6a:
ff:9b:ef:65:1e:e8:91:ee:ff:bf:91:8f:f8:b7:fe:50:e4:56:
8c:80:74:cd:c4:4d:e3:e5:03:05:bd:1a:76:7d:10:d0:18:b2:
c4:87:b6:4e:89:d7:1a:9a:1a:9f:47:7f:73:1f:19:73:65:2c:
82:de:28:9c:15:23:1c:e1:fc:0a:b0:93:ed:07:9c:ce:e4:ea:
d7:cc:a8:1c:8d:83:1a:87:37:d7:43:ca:d6:28:38:46:12:52:
cc:f1:79:55:8b:ed:c7:2d:7e:31:c3:29:aa:01:e0:35:b1:af:
9d:28:55:be:85:8e:09:ad:15:67:4c:16:41:3f:73:c1:21:19:
62:6f:cd:63:17:60:f4:e6:c5:f7:e6:0a:e0:09:e3:6e:9b:2d:
95:a5:ec:bf:f5:e0:09:3e:dd:f2:da:70:a4:e0:4a:29:59:57:
b6:63:18:a5:00:7d:09:6f:e2:ff:18:f3:f8:7f:b0:46:d7:a1:
8d:7e:ca:cf:db:af:a4:2b:fc:67:b4:53:5c:54:50:74:af:0a:
99:24:7f:fa:dd:2b:a9:f2:02:c4:5a:28:d5:4b:69:14:90:fb:
41:f5:cc:6d:2c:e2:51:27:bb:df:7a:9a:50:a5:99:31:84:96:
e9:a8:8a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:32:58 2024 by rpki-client on console-fra.rpki-client.org