Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Zqe0iEGQpw7W09QDx69IoOsAarQ.roa
File: Zqe0iEGQpw7W09QDx69IoOsAarQ.roa (raw, json)
Hash identifier: T9nX1giCJc22uGPYCzBpIyIWo4pMLv2ilTALMa8H4rM=
Subject key identifier: 66:A7:B4:88:41:90:A7:0E:D6:D3:D4:03:C7:AF:48:A0:EB:00:6A:B4
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 018CC64B921AC69CFA50DE1A575A0EC89EA4
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Zqe0iEGQpw7W09QDx69IoOsAarQ.roa
Signing time: Mon 01 Jan 2024 18:31:30 +0000
ROA not before: Mon 01 Jan 2024 18:31:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202133
IP address blocks: 193.192.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:92:1a:c6:9c:fa:50:de:1a:57:5a:0e:c8:9e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 18:31:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66a7b4884190a70ed6d3d403c7af48a0eb006ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:89:3c:34:8b:dd:b4:4c:82:0c:16:ac:57:93:
22:bf:01:ba:e1:01:61:94:de:5d:e9:ec:fe:8e:7c:
4e:42:16:e4:c3:67:da:58:f1:53:a8:72:88:7e:38:
d1:5c:e0:ff:cf:f9:75:fb:12:7c:20:34:53:18:c0:
6f:1b:95:e5:60:6d:06:37:da:a1:a2:0f:b6:70:20:
e6:9e:b0:62:1f:7d:60:08:f9:31:5f:57:61:15:40:
72:7d:4e:1d:52:30:d2:54:d1:4f:a1:b5:6a:fa:29:
13:ce:d1:4b:97:9f:76:66:1b:2b:55:c1:be:d0:6e:
cb:af:00:2a:c5:c0:c2:d6:fd:9a:eb:1f:de:b4:ba:
13:5f:9a:99:33:2c:64:ae:d3:09:b0:fb:68:69:f9:
0f:32:c8:65:69:94:e3:91:0b:c9:24:22:b4:37:cf:
ee:a6:98:bb:dd:5b:7a:7d:0b:11:2e:dc:79:56:95:
de:38:b8:89:35:6d:22:fe:8c:17:b3:76:6c:ba:dc:
7e:0f:f6:ab:a6:dd:68:c6:53:f8:32:41:e9:a0:fa:
d2:94:4c:d6:14:0e:d5:1c:7e:d0:8a:6b:2d:16:1f:
c0:82:00:a4:e7:02:71:df:bd:37:06:a3:3b:0f:30:
88:4c:cb:53:1b:b3:2d:f2:17:e1:14:9f:18:e0:47:
f1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A7:B4:88:41:90:A7:0E:D6:D3:D4:03:C7:AF:48:A0:EB:00:6A:B4
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Zqe0iEGQpw7W09QDx69IoOsAarQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.171.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:f3:84:0c:23:5a:08:00:91:98:1f:18:be:27:d8:4a:13:d3:
cf:b4:bd:0d:9a:25:f6:7c:eb:7b:84:ad:4d:02:48:6e:72:f7:
56:4c:ed:75:5b:4c:ec:29:5a:38:94:0d:66:f2:bf:63:6d:33:
4e:c6:d2:29:22:99:94:93:3b:0c:eb:8d:51:af:6e:b0:88:be:
15:c1:52:19:37:07:cc:74:a7:37:48:fa:27:cd:48:4f:27:f1:
72:97:17:04:81:8d:8d:57:c3:98:c3:5f:7d:a2:10:da:34:94:
d3:72:dd:17:2c:4d:ef:3a:87:09:f3:d6:61:01:55:c8:8f:fa:
e1:fd:82:5b:ea:fd:cb:85:62:b5:ee:1f:64:35:26:5f:70:e5:
b0:a4:24:8a:fc:88:47:98:9a:97:c8:fe:ad:93:e0:b0:c5:b2:
e3:32:a0:fe:02:0f:9b:02:2c:e8:ad:00:04:c5:42:e3:f4:95:
61:2b:9f:2c:9c:de:76:f0:a1:6b:4d:f5:bf:80:d9:9f:8c:33:
02:70:9a:fe:bb:f0:b7:cb:db:3d:89:b0:6b:66:df:6c:6d:45:
bb:83:14:3f:b7:7f:7d:81:79:76:e1:f8:d2:09:05:41:40:02:
3b:4a:34:2d:32:aa:3b:f5:37:33:d4:6f:6c:ed:c9:59:27:a1:
cb:17:53:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:26:06 2024 by rpki-client on console-ams.rpki-client.org