Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/z0fNNxF-Ke5kCCd_EPTosi3b6HQ.roa
File: z0fNNxF-Ke5kCCd_EPTosi3b6HQ.roa (raw, json)
Hash identifier: F9XIYD10mH5R8FcadRqeHFKvy7jkcyLkUvek6GNBKHo=
Subject key identifier: CF:47:CD:37:11:7E:29:EE:64:08:27:7F:10:F4:E8:B2:2D:DB:E8:74
Certificate issuer: /CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Certificate serial: 018CC5010C9B4B9033140FDF6C3EAAAAD8FE
Authority key identifier: 35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/z0fNNxF-Ke5kCCd_EPTosi3b6HQ.roa
Signing time: Mon 01 Jan 2024 12:30:29 +0000
ROA not before: Mon 01 Jan 2024 12:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25091
IP address blocks: 185.247.76.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:0c:9b:4b:90:33:14:0f:df:6c:3e:aa:aa:d8:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Validity
Not Before: Jan 1 12:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf47cd37117e29ee6408277f10f4e8b22ddbe874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:74:23:f3:15:07:45:cd:31:51:2f:b5:a6:d8:
4f:f8:4b:a6:7e:d9:60:34:9d:40:26:7b:9f:bb:88:
32:1d:a1:11:32:c3:1b:fa:e9:e3:87:ba:5e:2b:08:
c7:b9:ac:d6:07:8c:08:50:e3:b3:ca:ab:f3:a4:d1:
43:39:9a:fd:a4:3e:50:20:0a:97:90:81:75:7a:09:
c7:cf:a8:8e:a3:b0:d8:f6:83:0e:5b:ce:9b:4f:3d:
6a:2d:1d:a2:74:2e:a5:39:c5:1e:5b:94:f1:a4:2a:
6e:31:82:8d:9e:2b:ee:26:08:21:ac:dd:18:d2:fa:
59:4f:c1:05:13:f0:1c:fd:55:9b:ed:13:0c:3d:9f:
88:80:ef:d2:18:b3:42:9d:81:05:f1:8f:47:63:0f:
ab:e8:78:68:bc:be:67:c0:b1:b3:9b:a5:6a:8b:c1:
78:bc:a8:8b:9f:0a:0e:f4:9a:bb:b6:3d:0d:ad:7e:
06:df:7f:f2:fa:a4:72:96:10:ad:81:f3:c0:f5:52:
4b:9e:71:ad:d8:49:17:31:17:e0:90:8d:4d:60:78:
3a:63:ee:2f:06:b0:33:ef:9a:65:01:71:09:c4:f1:
9c:22:b6:d3:f4:69:42:8b:a6:1d:86:dd:7b:75:1b:
76:55:e9:79:f7:88:0d:56:d4:ef:7b:53:19:26:57:
a0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:47:CD:37:11:7E:29:EE:64:08:27:7F:10:F4:E8:B2:2D:DB:E8:74
X509v3 Authority Key Identifier:
keyid:35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/z0fNNxF-Ke5kCCd_EPTosi3b6HQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.76.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:3a:71:60:79:59:ca:ca:1f:12:69:03:06:0c:51:02:15:7f:
d6:23:9a:5b:70:9f:94:f4:fc:56:cd:fd:4c:96:0a:ac:8b:c5:
18:97:b9:65:39:a4:f0:5e:b6:e3:e6:25:41:e3:e2:70:71:a4:
66:12:46:e2:b8:27:7d:f6:0a:97:4d:36:c6:e5:97:77:04:fa:
2c:04:87:95:f6:95:be:84:4b:38:64:39:17:eb:9f:60:8b:59:
d7:0e:a6:fc:80:22:48:1d:95:03:28:c7:4d:11:72:05:0b:0d:
f0:35:9e:63:d4:28:bc:29:33:f3:47:3e:7f:f4:e6:49:a1:d3:
7b:a7:f7:71:d0:1f:61:04:57:07:de:53:eb:a5:53:e2:ce:8f:
ed:50:05:69:5a:7e:17:24:f1:24:66:e8:39:a4:f8:5a:96:e9:
8d:06:a1:3f:b8:32:4d:84:04:64:5f:83:83:fb:97:89:1b:84:
1a:25:b3:12:95:98:7d:df:aa:17:77:70:95:94:91:f4:d5:4b:
5a:62:a6:83:71:bb:4b:6a:bf:64:a0:81:de:97:11:15:ee:1d:
60:32:7a:59:51:a9:2e:fb:74:73:e8:b6:86:86:d2:7e:87:73:
bf:3d:35:9b:eb:d7:b1:c4:39:99:ac:8c:91:63:01:2d:5e:a9:
ab:64:3a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:43:04 2024 by rpki-client on console-fra.rpki-client.org