Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/zda3mVjh6RQUcPBhvwrtSyICaz4.roa
File: zda3mVjh6RQUcPBhvwrtSyICaz4.roa (raw, json)
Hash identifier: 9iAOSHDDIlj2lGT9FtFEG5AGc34aYs3znRcExO0hjjA=
Subject key identifier: CD:D6:B7:99:58:E1:E9:14:14:70:F0:61:BF:0A:ED:4B:22:02:6B:3E
Certificate issuer: /CN=2fe5b7ccb403d30a44857d47c58cf1346546d283
Certificate serial: 018CC3B700A120A2889C6E8FA5D6A94000D7
Authority key identifier: 2F:E5:B7:CC:B4:03:D3:0A:44:85:7D:47:C5:8C:F1:34:65:46:D2:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/zda3mVjh6RQUcPBhvwrtSyICaz4.roa
Signing time: Mon 01 Jan 2024 06:29:59 +0000
ROA not before: Mon 01 Jan 2024 06:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29399
IP address blocks: 159.253.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft
rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:00:a1:20:a2:88:9c:6e:8f:a5:d6:a9:40:00:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fe5b7ccb403d30a44857d47c58cf1346546d283
Validity
Not Before: Jan 1 06:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cdd6b79958e1e9141470f061bf0aed4b22026b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8c:87:59:53:62:c1:f0:78:d1:05:d3:9a:b6:
ca:22:ac:1d:fb:05:60:31:5d:3d:af:94:4b:ac:49:
c5:bf:ca:b7:1a:a0:c8:18:ac:63:cc:a1:8e:ed:9c:
b7:3a:69:55:f0:00:35:ed:ac:1e:c7:de:a8:e5:2e:
cf:e3:aa:2a:17:a1:78:10:5a:b2:38:58:da:b4:ee:
19:ec:cd:cb:be:8f:59:4d:e2:d3:23:a2:a1:71:78:
ad:44:9b:5a:66:49:a5:dd:81:e4:33:ea:52:91:66:
a7:8e:ee:a3:42:b3:58:98:96:88:59:be:21:4f:fb:
5d:83:13:ca:da:c0:55:11:50:2d:21:c5:ea:3a:cd:
fe:9a:95:46:33:bf:b7:e6:92:14:c8:4e:06:03:d8:
2e:75:35:b8:9f:a2:f8:0d:e8:e3:1e:3d:cd:45:95:
a1:0e:36:b0:ba:3f:ca:af:4e:4c:ea:78:43:6c:3e:
0e:28:3c:22:d8:9f:34:62:d6:6d:25:67:49:74:eb:
6a:a1:25:99:7a:6c:11:a4:83:a0:cb:cd:b5:ca:a5:
29:b0:b6:d6:1d:0a:5e:3b:d5:44:73:aa:4f:bb:a4:
1c:5e:52:ce:72:20:0d:af:e0:9e:75:b1:30:1e:3a:
2f:9a:7b:61:85:77:87:78:fd:6c:f2:53:d8:94:bf:
26:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D6:B7:99:58:E1:E9:14:14:70:F0:61:BF:0A:ED:4B:22:02:6B:3E
X509v3 Authority Key Identifier:
keyid:2F:E5:B7:CC:B4:03:D3:0A:44:85:7D:47:C5:8C:F1:34:65:46:D2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/zda3mVjh6RQUcPBhvwrtSyICaz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.253.86.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:b4:e5:9b:22:d6:b2:77:74:a0:7d:4c:84:dd:bf:10:8b:02:
af:ee:9a:c3:fe:70:71:04:69:03:20:71:3a:41:3a:3d:99:d3:
3c:0f:a0:e8:db:1a:45:ef:d9:5f:78:2a:9e:d0:e4:b8:1c:1f:
5a:e9:c1:79:21:1a:36:fc:52:50:ff:4d:cc:48:f6:6c:93:ee:
2c:0d:08:0f:15:86:9f:5c:3f:a0:15:1f:2e:b6:bd:b4:c4:5e:
94:c6:36:47:a1:4e:62:15:ca:12:a0:c9:d5:b0:51:ba:c0:68:
f1:38:2c:f1:54:3f:b0:07:6c:b3:60:25:59:0e:86:b3:dc:ca:
f4:d0:50:ab:f9:d5:ab:35:ac:b9:fc:83:8d:f3:0b:b9:c2:68:
60:3e:93:1f:ab:7e:f0:a1:cd:57:7d:f2:f7:cc:c3:4c:88:62:
4f:19:66:d0:dd:9f:80:f0:da:85:88:11:cb:73:8f:08:aa:fb:
6c:6d:ab:ce:d0:c1:06:11:18:4d:66:f9:12:9d:26:89:c4:5b:
f1:22:ad:59:72:a5:81:ea:91:53:7b:08:46:2e:c8:79:a4:3f:
93:22:66:df:98:a3:07:2f:1f:06:c7:2d:70:90:8a:0b:cd:a0:
b8:ff:64:80:d5:a2:d0:1e:88:b8:82:4b:41:2f:53:63:2f:b6:
61:23:ce:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 04:27:29 2024 by rpki-client on console-ams.rpki-client.org