Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/ZXGwiPx5cKNj5IzZcTdk6gvTugo.roa
File: ZXGwiPx5cKNj5IzZcTdk6gvTugo.roa (raw, json)
Hash identifier: EEjN4j+o3cQ0PByCcs7fsvQYQGjomPhcIy0ZqXFtYeU=
Subject key identifier: 65:71:B0:88:FC:79:70:A3:63:E4:8C:D9:71:37:64:EA:0B:D3:BA:0A
Certificate issuer: /CN=01c2863a6438b3402752a4740e90ce42eb589129
Certificate serial: 018D20976EC9D8A9A21A024A4BCACA21497D
Authority key identifier: 01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/ZXGwiPx5cKNj5IzZcTdk6gvTugo.roa
Signing time: Fri 19 Jan 2024 07:20:11 +0000
ROA not before: Fri 19 Jan 2024 07:20:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42910
IP address blocks: 91.209.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:20:97:6e:c9:d8:a9:a2:1a:02:4a:4b:ca:ca:21:49:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c2863a6438b3402752a4740e90ce42eb589129
Validity
Not Before: Jan 19 07:20:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6571b088fc7970a363e48cd9713764ea0bd3ba0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:85:66:85:2c:d8:84:1e:32:bb:83:a7:35:6b:
e1:f6:6d:be:c6:3c:e0:4d:16:22:79:ce:79:36:67:
05:fa:fd:f7:2f:15:35:dd:e1:1c:77:5b:9b:eb:8f:
2c:ce:64:c1:80:51:39:52:8c:66:59:ec:fe:0a:f3:
4d:16:f1:30:70:9a:b9:cf:f2:1d:9b:36:44:99:ba:
5f:af:34:0c:c8:b7:d1:ac:8e:46:dd:fb:30:a4:2c:
c9:01:1a:d4:4b:ba:68:48:b4:58:16:05:95:83:03:
74:75:86:ed:7d:dd:33:8c:13:35:c3:45:69:31:cd:
8a:09:c3:be:e4:4b:60:0d:9a:66:b5:7d:a6:c4:6e:
2b:3b:d6:12:bc:e4:6d:bd:e9:92:c0:6d:cf:e5:c1:
f5:a2:67:27:01:cc:f2:09:76:6f:8b:32:ac:3e:0d:
ac:14:1b:3f:a2:7a:89:b8:ad:45:11:70:12:7b:2d:
31:2a:2b:f3:3d:05:18:61:bf:10:34:ee:aa:91:93:
7e:b0:1e:4b:92:4e:1d:ca:fe:60:5e:c1:b4:52:5a:
a5:b4:77:10:75:ea:c6:6f:cb:3f:f1:d0:63:a3:d1:
12:cf:33:58:82:a1:9c:97:e2:ae:75:fd:88:88:df:
a6:72:30:ec:45:52:50:f7:65:36:31:a5:de:70:d8:
11:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:71:B0:88:FC:79:70:A3:63:E4:8C:D9:71:37:64:EA:0B:D3:BA:0A
X509v3 Authority Key Identifier:
keyid:01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/ZXGwiPx5cKNj5IzZcTdk6gvTugo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.175.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:17:1b:de:f1:c6:60:89:ec:f7:a0:12:ab:9c:7a:fd:9b:5d:
7d:96:29:6b:89:a4:8f:75:8e:45:d4:c9:eb:c6:42:71:3a:d3:
f4:aa:c0:7a:a8:f3:ec:c8:79:10:be:b0:30:a3:94:2e:ac:5d:
42:ec:a3:72:36:d7:bf:42:3c:8b:aa:d6:53:2a:e2:1a:a9:ba:
06:42:3e:fb:34:7b:42:a4:8f:ca:90:e7:fd:16:b0:10:8f:6c:
f5:35:5d:09:aa:9f:b6:8b:e9:61:27:9f:fb:5a:05:55:57:a1:
7b:c1:36:78:f9:32:37:96:17:b2:9c:e6:40:2e:31:75:e7:8f:
55:35:25:4a:9c:ed:7d:89:ca:a8:10:5f:36:4f:b7:de:ec:f3:
9e:96:69:ff:58:ac:ab:44:0c:00:39:8f:b7:25:25:ea:88:67:
00:74:73:31:a1:cb:27:2d:67:39:ba:9a:1e:3b:3f:1b:f4:77:
df:9e:8e:05:31:e5:de:c4:e0:c1:01:a7:01:0c:51:9d:a6:e3:
f5:19:2a:89:db:77:56:3e:04:61:e8:d1:db:c0:d7:4c:7f:0b:
7d:73:9b:7b:4e:7d:b0:b9:83:0f:7e:b2:ca:5a:57:70:8a:95:
48:6b:7c:51:ec:be:dc:9d:76:36:bc:3d:cd:30:42:9f:6b:d6:
cd:f4:a3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 04:42:45 2024 by rpki-client on console-ams.rpki-client.org