Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/zRlkIuBBfn2JVC4WFddMi11lBhQ.roa
File: zRlkIuBBfn2JVC4WFddMi11lBhQ.roa (raw, json)
Hash identifier: KSJ4zxMRlmihvn9QmrOwmiszZc+NXwH3MSds83+FFM0=
Subject key identifier: CD:19:64:22:E0:41:7E:7D:89:54:2E:16:15:D7:4C:8B:5D:65:06:14
Certificate issuer: /CN=a0af3d8551fbdd3b62f4ffdfd59cad4161e4471e
Certificate serial: 018CC56E273A909315150733E2C6866C457E
Authority key identifier: A0:AF:3D:85:51:FB:DD:3B:62:F4:FF:DF:D5:9C:AD:41:61:E4:47:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oK89hVH73Tti9P_f1ZytQWHkRx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/zRlkIuBBfn2JVC4WFddMi11lBhQ.roa
Signing time: Mon 01 Jan 2024 14:29:39 +0000
ROA not before: Mon 01 Jan 2024 14:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212165
IP address blocks: 185.80.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oK89hVH73Tti9P_f1ZytQWHkRx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:27:3a:90:93:15:15:07:33:e2:c6:86:6c:45:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0af3d8551fbdd3b62f4ffdfd59cad4161e4471e
Validity
Not Before: Jan 1 14:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd196422e0417e7d89542e1615d74c8b5d650614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5e:ba:92:ab:5d:4f:dc:26:02:3b:1c:df:91:
4b:6b:c3:3f:84:56:8e:f1:28:87:71:39:0f:1a:18:
96:67:f6:02:da:3d:95:2b:55:36:c4:aa:b7:29:6f:
e4:62:2e:8f:b7:16:e0:75:0b:4d:28:39:81:b1:6d:
12:fe:2d:7f:04:8d:26:1c:fd:af:3a:d8:e5:77:88:
74:bc:71:9b:a5:29:18:e5:7e:2f:26:f3:e6:48:01:
11:d3:24:c9:59:be:99:24:62:b8:e4:be:42:7c:a1:
37:33:b8:53:76:bf:57:d8:86:cc:02:b9:98:54:54:
11:76:d6:3b:fb:7d:f1:c9:03:2b:ec:75:79:1c:29:
4d:43:8e:7c:04:43:9f:a1:2f:4d:d4:68:76:db:0e:
a2:4a:ac:5f:f4:f8:9b:4c:4c:d7:25:36:ae:e2:d0:
21:ab:4c:25:17:46:5a:4f:5a:52:00:8d:c9:98:f3:
52:d5:3b:34:cb:4a:83:ab:3a:38:33:a1:7a:07:34:
66:9b:7c:0d:fd:38:78:05:43:1d:c6:28:ee:4f:34:
46:54:80:6d:8d:d0:e6:52:f2:9e:d5:23:0d:8c:89:
c9:39:c4:d9:9d:f9:20:f7:4a:02:28:bb:08:a1:4f:
22:52:19:06:5e:d2:6c:f2:0a:5f:ee:82:9f:c6:82:
ea:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:19:64:22:E0:41:7E:7D:89:54:2E:16:15:D7:4C:8B:5D:65:06:14
X509v3 Authority Key Identifier:
keyid:A0:AF:3D:85:51:FB:DD:3B:62:F4:FF:DF:D5:9C:AD:41:61:E4:47:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oK89hVH73Tti9P_f1ZytQWHkRx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/zRlkIuBBfn2JVC4WFddMi11lBhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.91.0/24
Signature Algorithm: sha256WithRSAEncryption
95:3c:10:21:35:53:7b:a8:61:f8:25:e7:e8:79:90:7e:ca:eb:
1b:43:c4:72:c1:cd:91:5d:f9:03:6b:d3:06:05:03:e7:1b:aa:
73:e7:ef:7e:f2:56:f4:45:95:6d:b1:5f:00:87:aa:9c:fd:49:
3c:dc:b2:29:95:c3:ba:92:c0:e9:49:e5:f0:0e:a3:8c:55:63:
91:55:0c:92:f5:e6:1e:3d:e5:03:3a:1d:b6:c3:2e:27:84:59:
31:17:fd:1c:4c:b2:23:b9:04:f8:4b:39:d3:71:00:16:7f:e6:
1e:50:9c:45:e1:0d:43:61:ee:3c:1e:76:15:50:85:04:f7:ea:
74:27:5d:0f:ea:41:a7:2b:ff:d6:fd:3c:80:63:90:48:a8:8e:
03:d0:5f:59:0d:ac:50:2d:93:68:f7:9d:9a:55:d7:d6:e6:d9:
57:d7:2a:87:55:58:98:c9:4c:75:b9:21:91:62:63:07:a2:8f:
74:21:17:00:b2:bc:39:0f:cc:92:40:d1:d4:cc:47:fd:5a:ce:
9a:b2:c6:24:81:18:ab:fe:1b:22:f0:12:8c:88:84:49:9c:29:
7e:49:58:c0:22:de:b8:f9:a1:0b:e8:6f:3d:63:f8:7a:c9:93:
3b:78:14:2a:1d:78:72:c3:76:a5:4b:7d:33:77:98:bf:27:85:
2c:d3:b2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:22:41 2024 by rpki-client on console-fra.rpki-client.org