Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zsy_lbSEvqNTGmvTRX44Y6Vzb8o.roa
File: zsy_lbSEvqNTGmvTRX44Y6Vzb8o.roa (raw, json)
Hash identifier: ekFnkI66YVxFkSg+glTclvDPNEE8lHAbbrvtxQNJQgk=
Subject key identifier: CE:CC:BF:95:B4:84:BE:A3:53:1A:6B:D3:45:7E:38:63:A5:73:6F:CA
Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial: 018CC8DEE1230A32E6B813A0B2F11FC75201
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zsy_lbSEvqNTGmvTRX44Y6Vzb8o.roa
Signing time: Tue 02 Jan 2024 06:31:38 +0000
ROA not before: Tue 02 Jan 2024 06:31:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210525
IP address blocks: 91.242.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:e1:23:0a:32:e6:b8:13:a0:b2:f1:1f:c7:52:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Validity
Not Before: Jan 2 06:31:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ceccbf95b484bea3531a6bd3457e3863a5736fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d2:46:4a:67:72:c5:a1:c5:86:5e:8b:0a:36:
ea:21:77:f1:e1:4b:44:b8:c0:7d:5b:42:a7:39:ef:
b8:32:45:f8:21:bc:5b:18:2d:b9:dd:3d:1f:e4:f1:
5d:96:59:99:00:0c:df:fd:8b:66:9b:0d:b5:42:44:
45:73:51:8c:5c:82:6a:f6:e9:4b:7a:86:60:d4:c3:
be:98:9d:96:e8:2f:4f:73:89:72:f8:9a:96:21:c9:
b1:3c:48:16:c1:ba:ae:c3:68:7b:74:47:89:5c:ba:
a7:1c:80:71:99:6d:1d:86:9c:7a:a9:e0:25:5d:04:
7d:64:10:e9:86:cd:9c:3c:c8:20:cd:bf:e6:95:22:
53:c7:57:d9:8e:b1:90:b9:2c:fb:35:4f:6f:d7:a5:
79:ed:1c:eb:8c:58:7f:f3:8a:cc:78:6f:5e:e5:b1:
d3:67:9b:d3:cd:cc:fa:6f:82:9b:94:26:12:66:b2:
e9:8d:54:58:87:d6:54:ad:3b:d6:80:2c:9a:c9:8e:
c5:ba:d8:fc:7b:c2:09:ab:7e:fd:1b:bf:90:5b:c4:
89:5b:f2:34:0b:0a:89:8b:e0:73:5f:ca:ff:94:31:
c2:08:b9:05:27:b2:e5:df:b2:d9:00:b9:5b:73:8b:
91:49:25:7b:9e:1b:d2:20:3e:e4:ea:2c:2a:46:7a:
26:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CC:BF:95:B4:84:BE:A3:53:1A:6B:D3:45:7E:38:63:A5:73:6F:CA
X509v3 Authority Key Identifier:
keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zsy_lbSEvqNTGmvTRX44Y6Vzb8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.255.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:7b:5b:7b:47:66:cb:06:98:61:09:e5:7a:57:c0:50:bf:80:
63:35:21:94:87:95:36:13:8e:54:56:2b:2e:6f:a2:ab:e7:b4:
b9:d8:80:11:3e:fa:f1:b1:1f:e2:a8:be:09:b7:6d:09:39:6f:
8b:4a:73:85:c8:f9:20:82:5d:62:99:6c:18:25:fc:64:f5:54:
d1:66:54:ff:ef:61:4d:19:9e:68:8e:3c:22:4a:10:a3:17:40:
56:e7:56:9f:fb:cc:7a:25:60:3d:38:27:1c:29:83:39:9f:d5:
75:f7:65:13:6b:6f:82:f7:cc:d8:81:9a:2f:a8:84:39:7d:de:
b1:68:05:c6:73:23:df:29:68:53:77:de:23:5d:f6:33:b8:23:
13:a0:00:7d:30:a1:a6:20:3f:86:18:77:ca:bd:2e:0b:63:54:
9e:9b:c8:af:38:9a:9d:5e:f8:18:12:eb:6f:be:a7:e0:8c:ad:
69:10:fd:cd:97:f8:fb:81:9f:8a:84:4b:4c:c1:dd:5f:f1:28:
28:73:6b:01:03:e1:e3:97:99:7a:c4:a9:53:d3:60:2a:4b:47:
d4:37:56:de:d3:0d:90:c9:ad:20:56:e0:fd:9c:fd:c9:ca:1c:
98:e7:40:c4:22:87:70:e8:e8:1a:13:97:4a:76:b9:40:35:88:
27:de:77:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:18:03 2024 by rpki-client on console-ams.rpki-client.org