Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/93143a-44b0-4e13-8947-e20a3197e79f/1/zhptT95I9EXLqioplRSchVdzsBs.roa
File: zhptT95I9EXLqioplRSchVdzsBs.roa (raw, json)
Hash identifier: 0ATP76gq2LPDMlwVcATxJOysGfAsVie/CB40lKm6dOI=
Subject key identifier: CE:1A:6D:4F:DE:48:F4:45:CB:AA:2A:29:95:14:9C:85:57:73:B0:1B
Certificate issuer: /CN=7d96e4cc29855a88667fa98e35292dfefffa9d7f
Certificate serial: 01935E380551123790AE3A148CC2B0E7B4B3
Authority key identifier: 7D:96:E4:CC:29:85:5A:88:66:7F:A9:8E:35:29:2D:FE:FF:FA:9D:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZbkzCmFWohmf6mONSkt_v_6nX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/93143a-44b0-4e13-8947-e20a3197e79f/1/zhptT95I9EXLqioplRSchVdzsBs.roa
Signing time: Sun 24 Nov 2024 12:49:09 +0000
ROA not before: Sun 24 Nov 2024 12:49:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48551
IP address blocks: 91.246.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/93143a-44b0-4e13-8947-e20a3197e79f/1/fZbkzCmFWohmf6mONSkt_v_6nX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/93143a-44b0-4e13-8947-e20a3197e79f/1/fZbkzCmFWohmf6mONSkt_v_6nX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZbkzCmFWohmf6mONSkt_v_6nX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5e:38:05:51:12:37:90:ae:3a:14:8c:c2:b0:e7:b4:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d96e4cc29855a88667fa98e35292dfefffa9d7f
Validity
Not Before: Nov 24 12:49:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce1a6d4fde48f445cbaa2a2995149c855773b01b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:16:d5:43:4e:cd:7c:61:c8:c2:25:83:c4:d1:
65:49:06:aa:94:35:61:70:55:6f:6d:b0:94:e5:8b:
7d:80:24:20:76:09:c3:80:c1:ea:1e:b9:3f:f8:0b:
42:b8:9b:ef:13:27:82:d8:90:83:d7:0b:df:85:a7:
c4:14:3a:64:c1:74:32:ab:af:ce:7d:ba:47:f9:58:
df:9a:27:d1:a8:d4:c2:a7:fe:d5:0c:30:dd:e7:2d:
c4:59:f2:db:5a:35:50:d1:51:6b:1d:56:07:f2:dd:
23:1c:f0:aa:8b:3c:40:33:e2:63:40:6d:82:22:d5:
c7:1b:d8:f9:80:c0:c6:71:6c:69:6b:01:61:d5:f5:
d8:7a:99:a8:cc:76:1d:f6:79:cd:fa:71:37:60:70:
80:ed:5c:89:50:d8:54:d1:ef:51:90:7f:7a:db:0e:
f3:4a:ef:6a:d4:74:ba:47:4b:4a:45:80:1f:53:cd:
5d:55:0d:6b:d0:ea:76:9e:4f:ed:3f:18:6d:6e:57:
b4:26:a0:ee:c6:20:b7:bc:5b:fd:27:47:34:c1:f7:
cf:aa:02:0d:2b:05:4a:13:1c:26:78:70:84:31:3c:
36:89:d1:c3:dc:a4:6c:ff:0c:60:a5:6f:24:d9:e8:
a6:28:a7:45:89:e9:ba:ba:f5:64:dd:b1:01:34:1d:
98:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:1A:6D:4F:DE:48:F4:45:CB:AA:2A:29:95:14:9C:85:57:73:B0:1B
X509v3 Authority Key Identifier:
keyid:7D:96:E4:CC:29:85:5A:88:66:7F:A9:8E:35:29:2D:FE:FF:FA:9D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZbkzCmFWohmf6mONSkt_v_6nX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/93143a-44b0-4e13-8947-e20a3197e79f/1/zhptT95I9EXLqioplRSchVdzsBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/93143a-44b0-4e13-8947-e20a3197e79f/1/fZbkzCmFWohmf6mONSkt_v_6nX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.31.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:46:80:d1:19:3b:15:7b:19:c9:50:90:48:29:1a:41:03:6f:
bf:e5:11:95:6f:d7:79:12:58:55:bc:d5:28:84:7f:d8:e5:b3:
d1:04:0e:89:cf:55:69:c3:76:2a:3c:84:02:58:22:51:c5:00:
4f:57:37:4a:c7:6f:78:60:fb:b8:f2:c0:10:51:0a:17:88:bc:
d5:ee:82:04:e3:c8:f7:e8:da:87:d4:93:f5:9f:33:f5:48:aa:
eb:d8:51:b1:2d:d0:ce:52:b9:e0:77:4f:0f:32:91:f6:77:14:
77:79:28:80:b3:f8:67:0c:95:59:b2:f7:ba:86:bd:76:28:e5:
43:9f:38:6b:e8:1c:0b:28:f3:a1:bb:54:90:e3:e7:fc:15:a4:
ea:9b:3d:c6:ed:7c:e9:2e:5b:08:55:88:da:4e:20:51:10:a4:
1e:02:2b:69:aa:a4:c1:48:64:98:97:3d:25:56:30:1d:6a:53:
23:a7:72:90:a5:67:f9:da:8f:0c:ec:8a:61:f7:7c:5e:6c:fd:
bb:15:d8:08:9a:69:78:6b:b8:d6:ec:1b:a6:51:9f:78:a3:46:
29:16:79:b2:38:72:b6:0a:ce:02:40:8e:c5:d5:a6:03:b4:cb:
45:6d:f2:28:e9:82:9b:b1:a3:6d:ed:86:4a:75:46:69:a3:e6:
c6:e8:8a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:31:25 2024 by rpki-client on console-ams.rpki-client.org