Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/2ZD-l6D0AKeAMpQDbQpXeFgywmw.roa
File: 2ZD-l6D0AKeAMpQDbQpXeFgywmw.roa (raw, json)
Hash identifier: kETlQSIDLVP6x+ewTSJp21ehC6dECC3IAaMvA54I0nE=
Subject key identifier: D9:90:FE:97:A0:F4:00:A7:80:32:94:03:6D:0A:57:78:58:32:C2:6C
Certificate issuer: /CN=cc55f76cfe9dafb2d94190142bc8aab0d32806ee
Certificate serial: 018CC348FEFAF71773BDDE5C33F7EA77E10E
Authority key identifier: CC:55:F7:6C:FE:9D:AF:B2:D9:41:90:14:2B:C8:AA:B0:D3:28:06:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/2ZD-l6D0AKeAMpQDbQpXeFgywmw.roa
Signing time: Mon 01 Jan 2024 04:29:50 +0000
ROA not before: Mon 01 Jan 2024 04:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44576
IP address blocks: 194.8.77.0/24 maxlen: 24
194.8.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:fe:fa:f7:17:73:bd:de:5c:33:f7:ea:77:e1:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc55f76cfe9dafb2d94190142bc8aab0d32806ee
Validity
Not Before: Jan 1 04:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d990fe97a0f400a7803294036d0a57785832c26c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:18:a7:1a:17:a1:f0:9c:ad:68:0b:77:3a:d7:
af:fe:89:27:0b:4e:c2:08:00:5a:11:ba:7b:ed:18:
d8:31:b2:3c:25:45:ed:81:92:de:17:d8:f0:94:cb:
ea:7d:dc:03:72:ae:e3:8a:18:bb:b9:a9:71:4f:b7:
5a:37:18:98:a2:dd:ff:eb:07:9a:f2:8e:b7:c6:11:
bd:ef:2d:1f:c2:1f:77:f8:15:e9:26:d6:5b:3d:9b:
19:11:45:f6:5a:11:19:5d:01:f8:ba:ff:1c:b1:28:
dd:18:b3:14:fc:0e:78:f6:38:b5:a4:2e:6d:8b:1b:
6d:ad:30:4b:34:24:5f:e1:11:9a:7f:02:37:35:9d:
e4:16:b6:14:00:31:df:48:59:aa:3c:f6:4d:4a:04:
5a:b6:fa:92:f7:7e:aa:c4:5b:35:43:f0:7e:e4:32:
fb:06:aa:64:75:a0:ad:3c:dd:61:c2:bc:0c:8a:f2:
13:0b:f8:29:2a:72:e0:d7:bd:e9:a5:86:a7:d3:a6:
3d:5c:fe:ff:f8:71:74:c6:45:43:9e:4c:a9:b0:e7:
d7:bc:d7:36:ca:25:08:78:9d:c4:c5:03:44:67:40:
dc:32:c4:cc:bc:b4:d5:45:bb:f7:31:1f:92:22:40:
18:26:15:ca:6d:13:f2:55:60:cf:b8:2f:53:20:8d:
00:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:90:FE:97:A0:F4:00:A7:80:32:94:03:6D:0A:57:78:58:32:C2:6C
X509v3 Authority Key Identifier:
keyid:CC:55:F7:6C:FE:9D:AF:B2:D9:41:90:14:2B:C8:AA:B0:D3:28:06:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/2ZD-l6D0AKeAMpQDbQpXeFgywmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.76.0/23
Signature Algorithm: sha256WithRSAEncryption
82:36:44:91:2e:d8:09:91:03:1c:27:65:23:48:de:72:9b:0c:
0c:4e:93:47:21:2b:78:70:21:1b:be:d0:41:7f:c5:42:88:33:
f6:73:38:97:70:8b:2f:36:21:9c:2d:48:82:28:aa:a9:ad:20:
29:34:13:a3:5c:e2:2c:20:d9:9c:5a:55:f9:91:ff:91:4e:b8:
e3:f1:1e:25:82:d7:2f:09:dd:b6:be:e8:10:c9:80:81:89:ed:
c3:f0:ad:73:fd:f2:7a:30:9e:27:0c:b2:51:f1:d6:ad:f6:0d:
2f:ad:50:6f:be:94:40:f3:a9:aa:ee:e5:b6:df:92:01:72:76:
04:69:06:14:ec:8b:79:96:72:f4:b3:03:65:9b:49:e5:fe:46:
6d:44:14:b1:7e:b0:63:42:29:7e:0a:43:e1:8b:82:aa:90:f7:
09:76:96:ae:ed:a4:00:ff:d4:cd:aa:d3:47:d8:1b:fb:9f:46:
29:1d:61:0f:36:d6:a7:7b:f6:5b:ae:6f:d8:dc:e1:13:55:41:
74:1d:d7:d8:ab:f7:e3:e7:d9:77:10:4f:20:c9:c6:20:5b:b3:
57:b9:4c:f0:38:2f:60:48:75:5c:5b:fe:98:47:99:82:19:72:
14:b5:ce:22:61:2b:7d:fa:d3:d3:05:ca:8c:5d:91:20:79:f5:
76:75:a3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 04:00:23 2024 by rpki-client on console-fra.rpki-client.org