Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/ZduWdzOn2TM7bRQ-dyVmhB5qMjQ.roa
File: ZduWdzOn2TM7bRQ-dyVmhB5qMjQ.roa (raw, json)
Hash identifier: TLoTuM1z+ia2mWJwT3SXy6mwbQtRC1S9wHkbUO7ZY0c=
Subject key identifier: 65:DB:96:77:33:A7:D9:33:3B:6D:14:3E:77:25:66:84:1E:6A:32:34
Certificate issuer: /CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
Certificate serial: 018CC86EF50BF832F1649819F0BAF97210D4
Authority key identifier: AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/ZduWdzOn2TM7bRQ-dyVmhB5qMjQ.roa
Signing time: Tue 02 Jan 2024 04:29:24 +0000
ROA not before: Tue 02 Jan 2024 04:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6421
IP address blocks: 193.103.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6e:f5:0b:f8:32:f1:64:98:19:f0:ba:f9:72:10:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
Validity
Not Before: Jan 2 04:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65db967733a7d9333b6d143e772566841e6a3234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a9:3b:89:4c:f8:66:96:04:44:74:30:5a:46:
87:38:f0:a9:6f:09:67:93:2e:1b:f0:c5:82:2d:75:
8d:1a:d3:57:5e:68:2e:d3:cb:21:7a:4e:6d:ab:61:
c7:fd:ce:a4:fb:de:45:a1:77:58:f4:ee:af:a5:ef:
b8:83:c5:1a:89:31:b0:e0:c3:84:65:c3:1a:ea:c5:
68:dd:d7:cc:af:87:08:81:c5:3e:f1:d3:02:6d:99:
5e:ed:92:6a:77:f8:db:00:3b:bd:7f:d9:64:81:c7:
d7:d7:64:74:e0:61:25:0b:2f:54:8d:74:32:67:40:
03:ed:4c:ad:73:82:6b:63:83:4c:f0:77:19:c8:06:
f2:82:62:88:6b:1b:41:c4:11:8f:78:45:fa:2f:33:
a1:01:d3:d3:82:fa:34:a1:1e:30:78:a3:85:2b:6d:
b9:9d:3f:7f:40:c0:26:8b:a0:ad:ff:f2:9f:97:72:
ed:f2:18:84:a5:a2:5d:2b:e0:38:31:63:ba:b6:aa:
3e:b4:dc:0e:a8:58:fd:6e:4a:1d:05:2a:e9:f9:2b:
de:ea:73:db:86:94:b7:68:6d:50:99:ed:d2:e1:36:
48:74:ba:f3:e0:ed:ea:88:ae:b6:b6:a0:72:1c:93:
bc:8b:e2:11:9e:40:c1:dc:de:99:48:43:f1:0e:78:
e9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DB:96:77:33:A7:D9:33:3B:6D:14:3E:77:25:66:84:1E:6A:32:34
X509v3 Authority Key Identifier:
keyid:AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/ZduWdzOn2TM7bRQ-dyVmhB5qMjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.103.199.0/24
Signature Algorithm: sha256WithRSAEncryption
55:ec:bc:e4:09:6e:92:43:07:1b:c9:7d:b7:64:70:30:70:c2:
68:a1:57:fc:ee:2c:9a:6b:1e:48:29:a3:91:2f:e8:45:2b:7f:
7f:df:81:05:88:44:0f:91:56:ba:94:68:f4:31:35:75:9b:f0:
70:e4:41:ef:11:d5:ff:82:10:7b:09:d0:d3:ea:75:92:0a:fc:
4d:8a:db:14:3c:2e:aa:73:63:2b:4c:b7:0a:bd:03:12:9d:69:
48:5f:8e:02:36:94:ab:92:0a:4e:f6:a2:2e:e5:ee:b4:61:c3:
4c:55:48:b8:0e:a0:d7:b5:ab:e4:52:f5:6d:01:43:bc:54:68:
99:e5:fe:53:41:c0:9e:bb:23:a8:25:f1:40:1a:9d:d3:4c:c0:
45:98:d1:c4:34:af:d2:7a:11:c2:3c:86:6e:48:ba:8e:71:5f:
e0:5c:08:c2:af:44:df:75:c2:4a:9c:6c:e4:87:b4:2d:c7:c1:
4e:ec:15:a4:93:fa:51:24:64:c8:01:fc:b3:d7:5f:81:a7:0b:
21:97:5e:f2:4a:24:7f:6b:16:13:2b:82:df:fb:43:c6:5e:0b:
a6:2b:40:fd:e6:7c:c2:85:e4:be:37:0c:3e:fa:c4:f0:fe:b1:
c5:84:3e:27:c2:5c:d0:8e:68:70:91:db:60:79:e6:e4:81:6c:
96:b2:12:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:02:21 2024 by rpki-client on console-ams.rpki-client.org