Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/ZbOyp_PuP8DYeL5JAM23PBFqoUI.roa
File: ZbOyp_PuP8DYeL5JAM23PBFqoUI.roa (raw, json)
Hash identifier: gE/ojFKPrWo+RbYdfIvq+TmKjRAaJ4/PK/H2UUF5Ols=
Subject key identifier: 65:B3:B2:A7:F3:EE:3F:C0:D8:78:BE:49:00:CD:B7:3C:11:6A:A1:42
Certificate issuer: /CN=f3ef6a6cfce343f914c9ad94c3410da00a7cd1cc
Certificate serial: 018CC56E67BB34136D3AFEBD56899492B43F
Authority key identifier: F3:EF:6A:6C:FC:E3:43:F9:14:C9:AD:94:C3:41:0D:A0:0A:7C:D1:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/ZbOyp_PuP8DYeL5JAM23PBFqoUI.roa
Signing time: Mon 01 Jan 2024 14:29:56 +0000
ROA not before: Mon 01 Jan 2024 14:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207949
IP address blocks: 194.104.90.0/23 maxlen: 24
194.104.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:67:bb:34:13:6d:3a:fe:bd:56:89:94:92:b4:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ef6a6cfce343f914c9ad94c3410da00a7cd1cc
Validity
Not Before: Jan 1 14:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65b3b2a7f3ee3fc0d878be4900cdb73c116aa142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e9:d6:03:ed:46:fc:3f:29:4f:d3:2d:c7:b5:
cd:da:08:29:4f:c1:c8:21:08:c2:9c:d7:98:5f:3d:
46:43:b6:28:32:ab:83:8d:3b:44:ee:6a:79:3c:90:
48:99:45:be:d3:39:50:45:3a:b0:fa:d4:73:56:41:
7e:be:b5:d7:2e:04:f8:03:9a:13:bf:b8:a6:03:56:
be:70:de:e0:28:86:c3:0c:90:8e:27:33:6d:69:94:
85:62:2a:1e:a7:e7:ca:5a:9c:c0:e8:e8:8c:84:32:
94:44:1e:07:64:4b:1b:01:9a:d4:b8:1b:80:fa:8e:
c2:9f:19:c7:77:eb:3a:cd:e1:8f:33:71:e5:f1:21:
da:0c:f1:e4:ca:cc:42:9f:c6:e8:06:20:b5:32:c7:
a9:be:e9:d7:c2:ed:d2:9c:49:54:61:41:56:0c:4f:
ec:d4:1e:e7:a5:35:a5:e9:6d:ba:3e:e9:fb:77:95:
a7:fd:58:3f:56:51:96:26:5f:a7:d2:99:ae:ef:d4:
b3:87:5a:79:3b:be:2e:52:05:b6:33:a0:5b:69:0b:
d2:1a:7f:0d:c7:27:13:a0:a9:92:0f:5a:67:c5:b2:
c7:4b:3c:73:df:95:ab:21:46:b1:c9:b7:45:8e:21:
39:ea:25:80:88:f1:0b:49:01:01:fe:aa:a1:4d:91:
6f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B3:B2:A7:F3:EE:3F:C0:D8:78:BE:49:00:CD:B7:3C:11:6A:A1:42
X509v3 Authority Key Identifier:
keyid:F3:EF:6A:6C:FC:E3:43:F9:14:C9:AD:94:C3:41:0D:A0:0A:7C:D1:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/ZbOyp_PuP8DYeL5JAM23PBFqoUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.90.0-194.104.93.255
Signature Algorithm: sha256WithRSAEncryption
60:1f:1a:26:9c:2a:3d:32:57:be:1d:f0:71:24:a1:a6:a5:13:
df:dd:b3:bc:87:0d:fd:37:bb:32:30:0f:70:a6:13:29:ae:e7:
26:d8:a3:92:c7:28:29:d7:a6:d9:7d:0a:0c:d5:c1:e9:ec:77:
56:1c:ec:00:ac:c7:9e:a9:fe:11:7a:28:a9:89:e3:20:5d:7d:
d8:8f:44:45:23:d3:12:36:2d:9c:d7:9d:33:85:57:5d:d6:22:
bf:7f:77:3c:1f:9b:3d:11:b1:cd:e5:b2:00:3c:84:d8:65:d9:
5a:ef:87:4e:2c:b6:ab:00:b3:87:f0:da:fa:d7:be:be:2f:bd:
8c:df:0c:45:94:f3:a4:ec:96:b0:42:0a:0a:7d:1a:e9:5e:a2:
ab:19:ad:72:70:0e:a3:fb:4c:19:f3:7e:91:90:bc:b7:86:f5:
c4:ba:6f:7c:37:71:de:74:42:6c:db:5d:8f:5f:05:43:30:ba:
7b:05:90:19:88:0f:c1:f7:4a:18:46:9b:eb:1d:6c:4e:91:ab:
f2:89:36:0c:7e:9e:cb:2a:5c:cf:a3:30:84:a4:d7:20:65:6d:
25:fb:6d:8e:7c:85:58:12:b3:3c:ed:ac:db:db:81:f3:73:db:
de:c6:57:cf:27:5d:4a:db:20:df:a5:d2:9b:a9:17:bb:98:05:
12:fe:b6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 08:27:19 2024 by rpki-client on console-fra.rpki-client.org