Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/ZWi8jdBBJLoPx-AP6O74frILDnE.roa
File: ZWi8jdBBJLoPx-AP6O74frILDnE.roa (raw, json)
Hash identifier: k1NLo3mUtXUyjIL+lv/szJgl/mE2L+CGLASyHOhzAO0=
Subject key identifier: 65:68:BC:8D:D0:41:24:BA:0F:C7:E0:0F:E8:EE:F8:7E:B2:0B:0E:71
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018CC4255352086B1E85F959CBD122672EC1
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/ZWi8jdBBJLoPx-AP6O74frILDnE.roa
Signing time: Mon 01 Jan 2024 08:30:29 +0000
ROA not before: Mon 01 Jan 2024 08:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7106
IP address blocks: 193.221.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:53:52:08:6b:1e:85:f9:59:cb:d1:22:67:2e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 08:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6568bc8dd04124ba0fc7e00fe8eef87eb20b0e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3e:f5:33:55:46:41:e1:44:35:31:3a:bb:a0:
5d:18:d0:e6:9b:a0:b9:4e:1a:10:0d:32:26:b0:54:
0a:01:c0:43:2d:43:e0:ee:7d:a8:54:6a:14:b6:c5:
e0:d9:52:0f:c0:f5:3a:3e:ba:d6:70:0c:45:a7:fc:
b3:4a:fb:c9:83:d3:1f:78:32:66:db:b6:22:7e:68:
ef:70:42:59:2c:f3:28:9f:33:a5:72:13:68:fa:55:
77:e5:4d:8c:1b:2e:61:38:9a:e5:d4:56:8e:62:7c:
b6:76:d8:a8:5a:09:6c:df:64:51:41:ac:80:12:bd:
d3:5f:2a:44:97:59:41:cd:ca:24:b3:17:5d:9b:dc:
66:cf:49:88:df:2e:87:8f:1b:f0:be:f0:d9:23:43:
0c:45:d7:91:61:b1:00:c3:55:83:bf:dd:28:96:63:
03:5a:be:95:fe:58:40:d7:32:da:46:5e:d5:d1:f3:
ba:20:e7:31:91:95:34:f5:13:90:45:d7:05:a3:cd:
5d:bf:5c:1d:c3:73:b6:13:d1:17:da:84:2d:fd:0e:
ac:f2:a3:d5:f8:4f:1a:cd:4c:16:80:9d:65:51:2f:
42:f2:50:d3:c5:46:d6:e8:5e:c1:91:1c:90:0a:64:
4a:54:f0:6d:83:f0:c8:5f:c1:21:68:16:bf:de:a6:
a1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:68:BC:8D:D0:41:24:BA:0F:C7:E0:0F:E8:EE:F8:7E:B2:0B:0E:71
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/ZWi8jdBBJLoPx-AP6O74frILDnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.221.195.0/24
Signature Algorithm: sha256WithRSAEncryption
69:3d:5e:d2:e6:e7:07:8f:2d:90:9e:7b:55:14:b2:4e:a0:e2:
3f:49:40:fb:ff:7e:e0:42:0f:15:14:b2:f1:c6:13:9c:15:4d:
e8:a5:4c:8b:39:b7:36:cc:e2:bd:8b:4f:b0:60:ea:9e:e7:75:
17:67:57:20:59:cd:39:72:01:ce:0c:6d:30:4f:14:f8:d1:ea:
ad:c4:f3:63:24:a9:7b:bb:68:8b:a4:eb:56:b0:08:ab:d0:eb:
85:93:5a:87:94:08:7d:34:e7:8f:f8:38:7f:58:42:70:b2:4b:
5e:62:7b:58:d4:d5:4f:36:02:6b:3b:1b:67:89:95:d4:ee:79:
88:f9:30:48:4b:c0:88:dd:0e:09:e6:e6:b0:00:3e:47:12:70:
79:f7:f8:22:8b:0e:86:8f:de:a5:87:a6:9b:ab:d1:c5:0a:ba:
73:30:f9:cf:01:d4:1b:ef:77:12:fb:fc:3d:19:95:0e:ce:47:
b4:59:0a:9c:35:ae:32:6f:ef:c9:ea:13:2f:b8:56:d6:65:7b:
18:a6:a5:06:f9:50:46:0a:4b:d9:2f:a1:87:5e:db:41:b2:78:
57:88:6b:36:fd:92:04:e9:99:49:8e:de:64:48:94:8f:2c:54:
c8:da:03:b4:35:16:fa:0e:18:ba:7c:bd:e6:b5:64:52:f5:d6:
c2:9e:9c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:13:52 2024 by rpki-client on console-ams.rpki-client.org