Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/CZ9x66UeFhRTe7WXfcurfsZduwk.roa
File: CZ9x66UeFhRTe7WXfcurfsZduwk.roa (raw, json)
Hash identifier: 7XwD8W80x9an4ChTfg0TBvnrVUVXJZw/Kb3QSnx8wao=
Subject key identifier: 09:9F:71:EB:A5:1E:16:14:53:7B:B5:97:7D:CB:AB:7E:C6:5D:BB:09
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018CC7953B9B30A86F2C4E76E04DBE4F22CD
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/CZ9x66UeFhRTe7WXfcurfsZduwk.roa
Signing time: Tue 02 Jan 2024 00:31:35 +0000
ROA not before: Tue 02 Jan 2024 00:31:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400377
IP address blocks: 193.233.178.0/24 maxlen: 24
193.233.182.0/24 maxlen: 24
193.233.183.0/24 maxlen: 24
193.233.180.0/24 maxlen: 24
193.233.181.0/24 maxlen: 24
193.233.186.0/24 maxlen: 24
193.233.184.0/24 maxlen: 24
193.233.185.0/24 maxlen: 24
193.233.189.0/24 maxlen: 24
193.233.190.0/24 maxlen: 24
193.233.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 04:03:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:3b:9b:30:a8:6f:2c:4e:76:e0:4d:be:4f:22:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 2 00:31:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=099f71eba51e1614537bb5977dcbab7ec65dbb09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7c:95:91:1f:4f:77:9f:d9:ce:20:33:c2:5c:
68:f6:2e:f0:eb:7f:3f:ea:0d:b8:b3:d9:29:0c:6c:
53:4f:5c:1f:25:ab:56:07:d3:1c:76:d6:8d:f9:82:
a4:5b:8b:ac:10:fa:64:62:9f:5d:e6:a1:cd:db:42:
1c:f1:57:72:0c:93:e6:b1:c6:2b:aa:78:d1:ee:d8:
0a:ff:2c:7d:b8:df:62:9c:0c:0e:b1:b5:c8:67:41:
0e:22:aa:bd:23:2f:2b:96:2c:09:22:6f:5c:7a:9d:
6b:02:88:a2:97:b2:a3:21:43:f1:3e:19:a7:d0:26:
0a:80:72:1e:74:e1:b1:4a:e0:53:4b:05:b5:bf:a7:
cd:3f:0b:2d:55:08:33:be:71:b5:2a:ad:42:f8:88:
fd:8d:e3:d6:79:39:5e:03:83:59:2c:30:ea:67:a1:
2a:4f:0b:bd:49:05:af:01:40:55:fe:d8:7e:b7:f9:
93:b6:02:3d:53:70:85:d9:37:1b:7c:fa:40:d9:ae:
d1:d0:f7:0b:60:20:38:a8:ef:15:84:36:5f:4e:c6:
8b:2b:58:90:44:5a:2b:f5:2b:ed:4b:eb:15:14:f7:
a9:92:d5:c3:f5:45:29:3d:91:75:1c:b4:61:f7:82:
41:a4:5b:57:73:a4:cc:11:5a:52:51:c3:65:6f:2f:
4f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:9F:71:EB:A5:1E:16:14:53:7B:B5:97:7D:CB:AB:7E:C6:5D:BB:09
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/CZ9x66UeFhRTe7WXfcurfsZduwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.178.0/24
193.233.180.0-193.233.186.255
193.233.189.0-193.233.191.255
Signature Algorithm: sha256WithRSAEncryption
08:0b:5b:de:7f:af:d6:b5:bf:24:64:d7:08:d1:df:fe:35:f4:
f3:fd:9d:95:28:ee:7a:16:f3:d5:b2:69:ac:4c:a3:1c:73:cd:
68:85:29:73:35:71:52:bc:ae:55:0e:e1:a3:8d:7b:a7:1c:27:
14:94:8f:dd:88:ce:ca:79:8b:3a:b4:d8:76:53:02:3e:80:5e:
69:86:41:6d:53:fe:96:81:1e:fb:2b:f0:61:f5:d7:66:f4:83:
1c:68:6e:e1:21:a1:48:ac:1d:eb:5b:30:e4:13:a2:7c:b1:be:
b1:95:9c:8f:03:cf:75:05:07:c5:e0:18:e9:d9:74:f0:f8:11:
f4:37:39:f2:d6:f2:65:92:a6:0e:c9:77:60:45:05:84:fe:db:
f3:38:8a:77:b3:0b:c8:af:5c:fe:53:dd:9f:3e:11:d1:a4:80:
65:55:d6:6c:e1:38:71:f6:7e:72:de:76:48:0a:58:24:2d:99:
8c:c6:a8:f9:9f:6b:85:22:cd:0b:ab:d3:b8:60:6f:7e:0b:0b:
ff:25:81:ef:74:d7:05:9f:66:67:e4:5a:ff:fc:81:8d:eb:f7:
11:9b:f2:dd:69:f3:5c:16:5d:60:98:1b:14:6e:d4:fa:a4:c5:
e4:08:c3:ac:47:00:6e:67:46:fa:26:ba:9f:63:df:ae:c8:36:
37:a0:6e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 08:56:39 2024 by rpki-client on console-ams.rpki-client.org