Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/rZz8fe92VjLzqLChwFU_ysBtdkM.roa
File: rZz8fe92VjLzqLChwFU_ysBtdkM.roa (raw, json)
Hash identifier: Ekl0Hv8gXkUW1RfCh5FpLiZJ8IuRV4+og3GKndzGPro=
Subject key identifier: AD:9C:FC:7D:EF:76:56:32:F3:A8:B0:A1:C0:55:3F:CA:C0:6D:76:43
Certificate issuer: /CN=e875464e89816ef00b0369502018a7e59ce2d36c
Certificate serial: 018CCA99ACEC27B509A7C557B0AACCFF5726
Authority key identifier: E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/rZz8fe92VjLzqLChwFU_ysBtdkM.roa
Signing time: Tue 02 Jan 2024 14:35:18 +0000
ROA not before: Tue 02 Jan 2024 14:35:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57304
IP address blocks: 87.245.192.0/20 maxlen: 20
139.45.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft
rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 14:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:ac:ec:27:b5:09:a7:c5:57:b0:aa:cc:ff:57:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e875464e89816ef00b0369502018a7e59ce2d36c
Validity
Not Before: Jan 2 14:35:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad9cfc7def765632f3a8b0a1c0553fcac06d7643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:87:82:7f:f2:ef:81:e9:7b:ee:09:32:41:31:
ff:b5:f9:3d:7a:5c:27:2c:e4:33:f5:dd:49:70:45:
af:b9:42:ba:71:30:2e:63:3a:6c:05:d4:4b:2a:c8:
16:f5:61:af:ac:fb:71:12:77:61:e3:9b:42:5a:89:
5a:ae:15:be:fa:53:0e:35:fd:c7:93:d2:80:d9:b8:
15:6c:99:57:1c:ce:f7:01:c7:58:e3:47:8f:f5:02:
e1:1f:2a:93:1a:26:b8:c2:d7:62:19:00:48:83:86:
59:78:5a:9c:ca:ae:27:ad:a5:c9:8f:12:db:9b:37:
19:bf:fe:fd:fd:80:8c:d2:2d:87:94:90:cb:d9:77:
19:a0:fa:77:d6:eb:59:b0:98:a9:83:36:f4:bf:d4:
ed:e5:57:78:39:a8:f1:a4:f7:18:ab:c8:fe:a9:d1:
e2:a4:9b:9d:f5:7d:4b:ae:ae:ae:4e:2d:9a:e7:d2:
44:83:48:b8:50:7b:dc:14:b1:8b:6b:18:92:a5:33:
25:07:dc:93:a2:fa:f7:fe:67:f0:4a:e7:d8:ab:58:
59:d0:2d:ba:d1:fb:ad:71:f4:3d:d1:fb:f7:14:c2:
11:a1:a2:1e:a7:cf:61:6b:f7:91:91:53:30:68:2a:
20:02:b5:2c:4b:a2:00:d4:db:c5:81:3b:9f:b7:a0:
b4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:9C:FC:7D:EF:76:56:32:F3:A8:B0:A1:C0:55:3F:CA:C0:6D:76:43
X509v3 Authority Key Identifier:
keyid:E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/rZz8fe92VjLzqLChwFU_ysBtdkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.245.192.0/20
139.45.224.0/19
Signature Algorithm: sha256WithRSAEncryption
19:ea:73:03:be:e9:9b:d5:fb:02:a6:24:10:c7:ab:66:62:bf:
45:86:bd:fd:ae:08:91:ef:4c:59:d9:8e:c4:2d:ab:45:28:fa:
1f:e1:86:9a:dd:13:b9:62:44:ec:22:15:d6:d4:29:55:83:31:
08:90:8c:18:aa:92:e1:7e:ee:cd:91:21:3d:e5:4a:90:ba:27:
f7:65:5a:ee:47:89:25:3f:46:1f:34:1b:09:04:8e:19:94:b1:
d7:88:a7:7e:be:c8:38:e4:b9:1e:64:08:58:ee:1f:15:24:ba:
9a:71:9e:d9:60:30:5b:59:cf:f1:73:56:2d:1e:12:68:c4:5c:
c6:67:c7:4a:f9:96:39:f1:8b:b8:a9:2b:36:82:6f:a2:af:bc:
50:3c:f4:2e:73:8b:5b:be:a2:f7:f0:a2:bd:af:a9:26:93:64:
f7:a4:d2:53:dc:f7:7e:19:35:43:36:6b:b9:2a:49:91:63:6e:
99:be:e2:c6:3d:5f:ae:b5:ab:47:5b:e0:e1:da:a3:2e:e3:b1:
c6:0b:12:21:19:d5:81:c1:fd:7b:ff:00:ad:10:40:8e:63:c1:
93:f8:58:b3:41:fe:de:d5:15:b6:a8:83:68:f6:d5:5c:38:da:
a4:36:c8:64:9e:b5:be:d2:ed:f4:3f:ca:66:96:2a:85:96:b3:
1f:59:b7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 01:06:22 2024 by rpki-client on console-ams.rpki-client.org