Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/zHX78fz9Y7pINbBeiXUDXs79ksw.roa
File: zHX78fz9Y7pINbBeiXUDXs79ksw.roa (raw, json)
Hash identifier: lqycG1bT+cllsnqK1vFEU4z8kzgw2JlAjbqAIElWykk=
Subject key identifier: CC:75:FB:F1:FC:FD:63:BA:48:35:B0:5E:89:75:03:5E:CE:FD:92:CC
Certificate issuer: /CN=0de7f26db43ad43205beb067fd0ab3e30027865d
Certificate serial: 018CC2DAF2C1F92F1EDDB57E0F7B98FB4D1B
Authority key identifier: 0D:E7:F2:6D:B4:3A:D4:32:05:BE:B0:67:FD:0A:B3:E3:00:27:86:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/zHX78fz9Y7pINbBeiXUDXs79ksw.roa
Signing time: Mon 01 Jan 2024 02:29:37 +0000
ROA not before: Mon 01 Jan 2024 02:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57364
IP address blocks: 194.110.152.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:f2:c1:f9:2f:1e:dd:b5:7e:0f:7b:98:fb:4d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0de7f26db43ad43205beb067fd0ab3e30027865d
Validity
Not Before: Jan 1 02:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc75fbf1fcfd63ba4835b05e8975035ecefd92cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2c:49:f2:6b:74:26:9e:00:31:3d:dd:07:1e:
47:f0:b8:15:91:df:7c:5c:30:cd:38:da:ce:39:26:
82:5c:ab:63:d4:34:31:e7:96:a9:b4:d3:a6:18:ab:
2a:58:85:36:45:9b:b4:54:83:72:a6:2d:92:8b:df:
e4:0e:9e:0a:af:a1:50:b1:92:81:bc:96:bf:74:82:
ba:bc:41:8b:16:23:1f:74:57:a7:a7:89:f3:54:e0:
6c:e3:49:8a:98:c8:9a:c9:ad:8c:c9:85:58:c8:59:
a0:8b:43:d8:91:46:1a:21:28:b7:98:9c:7d:80:36:
84:ef:04:2b:48:ab:a1:2a:93:20:ad:ec:e1:ce:f5:
cd:d1:52:5f:b7:88:01:09:c4:04:99:02:99:48:cf:
a0:c3:6e:68:76:bc:4b:5b:c0:f2:32:93:d2:ea:2a:
ef:d3:53:c8:a3:19:85:ac:8e:06:e6:a2:38:2a:27:
bc:57:a9:9c:e4:6b:1a:b4:85:ab:b9:be:29:82:09:
db:80:e3:60:02:c2:8c:9b:3e:68:2a:a3:4b:b1:4f:
15:06:36:82:d5:ae:0a:f5:b8:56:d3:60:cb:92:6a:
b0:62:88:eb:fa:be:e7:31:54:0c:8b:72:66:be:33:
66:c8:26:78:84:9e:ed:6d:e8:af:c0:7c:8b:79:9b:
a0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:75:FB:F1:FC:FD:63:BA:48:35:B0:5E:89:75:03:5E:CE:FD:92:CC
X509v3 Authority Key Identifier:
keyid:0D:E7:F2:6D:B4:3A:D4:32:05:BE:B0:67:FD:0A:B3:E3:00:27:86:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/zHX78fz9Y7pINbBeiXUDXs79ksw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.152.0/23
Signature Algorithm: sha256WithRSAEncryption
89:da:37:6c:4e:7b:1d:79:1d:4a:60:6c:16:9f:92:07:84:b6:
3b:1c:09:93:3c:de:d1:5f:2b:c6:66:10:d8:da:b9:29:69:86:
0f:7c:05:c4:d6:9d:44:22:85:b7:dd:8c:fa:f7:b7:1d:0b:e9:
b9:1f:2f:5d:2d:40:45:23:c9:bf:64:e9:26:aa:90:70:7a:3f:
a6:88:a2:be:d6:31:cb:b5:75:1c:03:60:42:66:b0:38:74:3c:
e9:c8:85:4f:8b:a9:1c:24:35:3e:a1:57:7e:cc:ee:21:b1:14:
ab:7e:63:1c:d2:86:4d:86:06:f9:e8:20:a8:3f:93:6e:96:c2:
db:54:6e:c5:82:4c:e0:86:e6:03:d5:27:ff:73:02:f2:b4:13:
c0:ff:d8:a2:df:21:b0:34:6d:7d:6a:79:14:bb:3f:7c:d7:b3:
a3:9d:2a:80:9d:9a:87:a1:81:5f:37:30:af:40:ff:39:6c:fc:
d8:26:a1:6a:b4:c9:5e:79:5d:4e:db:9d:20:35:e6:25:0a:30:
bc:d5:2f:b6:b4:89:a1:13:fc:ee:64:d1:ce:24:3c:87:4c:f2:
13:7a:6d:c7:0e:fb:0c:06:fc:47:02:12:66:f2:87:73:d0:37:
b3:1b:f1:9a:2b:56:28:a4:11:e3:01:41:0e:b6:24:c3:f0:72:
fa:e5:ce:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:42:42 2024 by rpki-client on console-fra.rpki-client.org