Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/Zisn2MGmUPf8QLSJOg1Ebiw7hXw.roa
File: Zisn2MGmUPf8QLSJOg1Ebiw7hXw.roa (raw, json)
Hash identifier: cM27vCmoZssoYm+ztTABDTuLRxNUmSE2zKWKdLmpVSI=
Subject key identifier: 66:2B:27:D8:C1:A6:50:F7:FC:40:B4:89:3A:0D:44:6E:2C:3B:85:7C
Certificate issuer: /CN=90f76537ff745893e3142fa0984f449b725b8fd3
Certificate serial: 018CC727164B33B18EDA6DE39381C4705927
Authority key identifier: 90:F7:65:37:FF:74:58:93:E3:14:2F:A0:98:4F:44:9B:72:5B:8F:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/Zisn2MGmUPf8QLSJOg1Ebiw7hXw.roa
Signing time: Mon 01 Jan 2024 22:31:16 +0000
ROA not before: Mon 01 Jan 2024 22:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212989
IP address blocks: 194.156.22.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:16:4b:33:b1:8e:da:6d:e3:93:81:c4:70:59:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f76537ff745893e3142fa0984f449b725b8fd3
Validity
Not Before: Jan 1 22:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=662b27d8c1a650f7fc40b4893a0d446e2c3b857c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:02:9d:5d:7f:17:35:32:aa:4e:3c:cb:10:2c:
78:38:50:6d:c2:41:9a:47:7a:4b:2e:e8:4d:3f:3e:
70:2c:0f:71:8e:a1:69:62:4f:74:8c:26:73:b4:40:
f5:d1:22:f4:f1:b2:36:d6:12:4c:9c:ac:b2:0e:37:
94:c9:2d:83:32:e0:f6:63:88:e7:ba:b4:74:10:54:
94:41:53:c1:44:ed:27:d2:a4:f1:72:c1:91:98:c9:
2d:e1:aa:6e:c4:aa:ff:f2:ea:e4:24:f7:f0:64:cb:
b5:d3:be:5f:29:78:58:94:9e:82:f5:84:a8:e5:2b:
a7:7a:8d:d5:6d:1a:41:e1:a3:ea:5b:73:4c:c6:57:
00:76:5c:0f:54:9f:15:d2:c1:af:93:69:4d:f1:70:
84:6d:5c:4f:87:80:a5:52:48:15:a7:ef:cf:69:e4:
6c:d8:29:fa:76:1a:62:e3:75:b3:8c:70:05:cf:27:
b9:12:fa:97:c5:25:9d:63:25:06:48:45:3b:4f:32:
a6:6b:86:d2:9f:83:80:aa:fb:d7:9f:8d:48:bf:66:
fc:b1:76:cc:77:22:ba:71:90:7a:f5:81:be:93:a6:
3f:5d:f8:3f:37:fe:d3:c2:85:c9:59:0a:ae:57:6f:
e7:26:01:15:a6:ff:2a:18:e1:fa:fe:18:02:66:57:
34:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2B:27:D8:C1:A6:50:F7:FC:40:B4:89:3A:0D:44:6E:2C:3B:85:7C
X509v3 Authority Key Identifier:
keyid:90:F7:65:37:FF:74:58:93:E3:14:2F:A0:98:4F:44:9B:72:5B:8F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/Zisn2MGmUPf8QLSJOg1Ebiw7hXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.22.0/23
Signature Algorithm: sha256WithRSAEncryption
37:84:15:d3:55:9a:0b:39:a5:88:be:d9:88:96:70:39:c6:20:
99:37:c6:9c:c2:f3:20:d3:c5:91:06:66:77:f5:f3:40:a4:95:
86:42:9a:3d:42:a5:01:6a:54:91:55:7d:1a:78:d7:72:2d:60:
2e:05:95:ee:c9:2a:1e:c1:57:a5:0c:8e:30:55:c0:02:ac:b5:
bf:2d:05:68:ba:b6:73:4e:83:a0:04:48:1b:32:d3:14:33:32:
fb:19:1d:30:0a:18:5f:dc:2d:2f:4d:82:d7:b3:7a:8f:9a:f8:
03:ad:8e:83:5a:7a:b2:ed:eb:bf:32:89:e3:06:5e:84:60:43:
e0:86:8b:be:1c:03:ab:41:f0:a6:a3:4a:a3:8b:33:47:55:a5:
b0:c8:85:b9:a3:43:e4:8e:61:9f:f5:1a:64:b2:7d:5a:e1:8a:
89:fa:59:a9:f5:3e:17:40:b0:9f:e5:33:fe:be:ac:d3:70:f3:
6b:73:5b:1b:23:cf:6a:ef:9a:34:0e:0b:38:fc:f9:0a:b9:e7:
63:fb:c9:4e:e7:61:83:ed:70:e8:3e:65:7c:c0:12:ff:03:09:
88:51:15:1c:f9:e5:76:b9:39:f4:8f:ee:b2:7e:61:54:b0:f6:
07:89:7b:a9:47:dc:64:cc:4f:e0:63:9d:5b:c2:9b:58:8d:64:
2e:a6:91:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 22:41:12 2024 by rpki-client on console-fra.rpki-client.org