Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/dZMOyJL_v-QWRLwQSVgWhqs-hk4.roa
File: dZMOyJL_v-QWRLwQSVgWhqs-hk4.roa (raw, json)
Hash identifier: 2OtuGOyzIKA49UWYIOzafzkZWWO0VyTl6KIZIysuwCA=
Subject key identifier: 75:93:0E:C8:92:FF:BF:E4:16:44:BC:10:49:58:16:86:AB:3E:86:4E
Certificate issuer: /CN=7cfc92b0a75b89ad2e3c57f7cba0e478684219ce
Certificate serial: 018CC2DB56B297A9FFD4953941E17237AEEC
Authority key identifier: 7C:FC:92:B0:A7:5B:89:AD:2E:3C:57:F7:CB:A0:E4:78:68:42:19:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/dZMOyJL_v-QWRLwQSVgWhqs-hk4.roa
Signing time: Mon 01 Jan 2024 02:30:03 +0000
ROA not before: Mon 01 Jan 2024 02:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211334
IP address blocks: 94.229.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:56:b2:97:a9:ff:d4:95:39:41:e1:72:37:ae:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cfc92b0a75b89ad2e3c57f7cba0e478684219ce
Validity
Not Before: Jan 1 02:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75930ec892ffbfe41644bc1049581686ab3e864e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f5:93:0b:00:76:44:77:ab:21:f2:89:2c:50:
34:c8:a2:83:94:d3:b7:a4:13:0c:b2:64:17:a6:ae:
4f:67:04:9f:19:8d:41:a5:5a:02:cc:f1:7e:1e:87:
1e:30:00:89:47:a0:16:64:7c:d0:3c:4f:f7:db:96:
f9:e7:d6:9c:14:cd:d1:ab:0c:e4:8b:61:1f:55:67:
cb:f6:60:4b:23:e1:58:60:52:ff:a5:05:09:24:c4:
ac:af:9b:ad:43:8a:20:0a:d8:6f:ea:32:47:73:44:
fb:d9:ae:31:a0:f7:9d:78:92:cd:7d:ad:2e:d9:eb:
9d:75:98:38:dd:4f:bb:61:63:a6:43:99:85:c1:9b:
ad:6b:01:60:b1:1b:19:4e:93:12:b1:fa:8a:b6:7c:
aa:0b:5d:b7:bb:37:d7:96:21:72:64:cb:f9:33:86:
55:11:49:bc:41:d8:48:bf:67:74:7a:af:fd:58:61:
89:cc:d6:76:96:c3:b4:eb:88:f4:85:50:ba:9c:84:
6e:3b:72:47:e6:d9:f4:11:2e:a5:2c:c0:06:f0:b5:
1c:d5:3f:d3:e4:99:d4:fe:c4:39:84:90:e2:32:98:
9b:e9:70:83:93:68:b6:ed:c7:b9:32:ae:9b:21:c3:
1f:da:21:62:e4:35:48:0d:a1:c0:fd:77:87:51:b4:
12:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:93:0E:C8:92:FF:BF:E4:16:44:BC:10:49:58:16:86:AB:3E:86:4E
X509v3 Authority Key Identifier:
keyid:7C:FC:92:B0:A7:5B:89:AD:2E:3C:57:F7:CB:A0:E4:78:68:42:19:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/dZMOyJL_v-QWRLwQSVgWhqs-hk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.229.89.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:54:ca:18:73:57:fe:a1:1e:8a:d9:d3:0a:39:3f:2e:08:dd:
39:1d:cf:e1:7a:92:3c:ea:4e:12:5b:69:a2:e7:fb:0b:21:90:
cc:87:e1:de:84:15:62:43:bf:e5:f3:ec:99:cc:0e:de:64:80:
7d:59:b7:64:f2:c4:b5:06:eb:0a:3a:35:2a:f4:46:be:0e:fa:
36:f7:00:37:c6:65:fa:4c:13:8e:f7:f2:cc:34:8a:a1:5d:78:
bb:81:ab:16:3c:e4:57:d5:5f:c7:e5:44:de:ed:a8:4d:6d:d8:
85:08:5a:d4:9c:bc:ad:75:71:70:d9:7a:26:f9:86:2b:ad:4d:
64:8e:fc:e9:da:c1:f0:1f:15:ac:f7:eb:c8:31:33:45:00:ab:
9c:a4:92:7e:d4:c4:71:86:0c:ce:67:61:99:e4:da:98:f9:b3:
af:2f:81:60:56:6c:42:c8:60:6f:fa:9d:96:6c:74:94:85:f5:
dc:d8:09:18:45:47:bd:aa:be:d4:54:80:01:61:18:ad:23:9e:
6c:d2:a8:3f:53:c7:d7:25:23:b8:8c:7d:b2:8f:6b:65:06:51:
eb:ba:5c:7a:81:d5:54:76:6f:5e:54:af:e1:35:18:ac:42:28:
5c:78:90:a1:49:16:08:ad:8e:c1:5b:7a:d5:f6:42:06:0e:21:
5d:eb:e4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:06:29 2024 by rpki-client on console-fra.rpki-client.org