Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/876fc7-6552-4d41-89ae-87aa9d8772f3/1/ZooDYPz_59-dwA0Y2SVI1APcvqw.roa
File: ZooDYPz_59-dwA0Y2SVI1APcvqw.roa (raw, json)
Hash identifier: FISfVO3kzkBZDNMTXS7Vnw21/BCQ7uMYvK1qt+OxPB8=
Subject key identifier: 66:8A:03:60:FC:FF:E7:DF:9D:C0:0D:18:D9:25:48:D4:03:DC:BE:AC
Certificate issuer: /CN=178dd51d7e40b34b439f8fdf4d051411c53472ea
Certificate serial: 019102B24A43DEDDE7092C955F1E2DB36781
Authority key identifier: 17:8D:D5:1D:7E:40:B3:4B:43:9F:8F:DF:4D:05:14:11:C5:34:72:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F43VHX5As0tDn4_fTQUUEcU0cuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/876fc7-6552-4d41-89ae-87aa9d8772f3/1/ZooDYPz_59-dwA0Y2SVI1APcvqw.roa
Signing time: Tue 30 Jul 2024 08:12:04 +0000
ROA not before: Tue 30 Jul 2024 08:12:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24593
IP address blocks: 193.110.162.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/876fc7-6552-4d41-89ae-87aa9d8772f3/1/F43VHX5As0tDn4_fTQUUEcU0cuo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/876fc7-6552-4d41-89ae-87aa9d8772f3/1/F43VHX5As0tDn4_fTQUUEcU0cuo.mft
rsync://rpki.ripe.net/repository/DEFAULT/F43VHX5As0tDn4_fTQUUEcU0cuo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 Nov 2024 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:02:b2:4a:43:de:dd:e7:09:2c:95:5f:1e:2d:b3:67:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178dd51d7e40b34b439f8fdf4d051411c53472ea
Validity
Not Before: Jul 30 08:12:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=668a0360fcffe7df9dc00d18d92548d403dcbeac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4c:71:8c:98:18:24:e1:1e:d5:d7:c3:29:22:
f5:8b:3d:15:fe:59:2e:58:b3:e3:c2:f4:24:83:81:
94:7d:24:02:7e:69:d6:27:31:81:e0:0f:20:a7:5f:
42:5d:4e:c9:cc:e0:e4:34:c3:8f:67:29:42:ca:12:
a1:13:da:cd:37:58:95:f9:de:06:e0:44:fe:53:87:
8e:39:53:3e:f3:74:f0:9d:59:94:09:87:72:9a:cf:
65:a6:07:91:23:8a:d9:6a:75:39:c3:15:a3:fc:1f:
4c:b8:7a:06:7c:ff:86:d9:5c:2e:a5:f3:57:e1:ce:
9f:7f:b6:f3:3a:6e:1a:c8:79:37:61:56:ed:c8:69:
96:3e:a6:28:58:c8:04:2a:5a:7d:00:00:fc:fc:cc:
27:41:97:fd:c9:f5:b4:fd:f5:a2:5f:9b:dc:fb:80:
0d:9f:fe:52:73:f4:42:84:a9:a5:26:60:fc:c3:a1:
ac:9f:44:43:b0:46:7e:61:61:6e:dd:3a:26:9a:6c:
78:f0:39:f0:e9:89:68:90:10:59:0c:86:87:f6:3f:
ff:a2:f9:92:54:72:77:4a:ef:d7:1e:7b:62:11:65:
c5:cc:74:e8:9c:57:61:65:64:9b:f6:ad:c4:ce:e9:
37:e0:b2:79:88:84:0b:0a:93:52:be:4a:ba:05:1b:
1e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8A:03:60:FC:FF:E7:DF:9D:C0:0D:18:D9:25:48:D4:03:DC:BE:AC
X509v3 Authority Key Identifier:
keyid:17:8D:D5:1D:7E:40:B3:4B:43:9F:8F:DF:4D:05:14:11:C5:34:72:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F43VHX5As0tDn4_fTQUUEcU0cuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/876fc7-6552-4d41-89ae-87aa9d8772f3/1/ZooDYPz_59-dwA0Y2SVI1APcvqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/876fc7-6552-4d41-89ae-87aa9d8772f3/1/F43VHX5As0tDn4_fTQUUEcU0cuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.162.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:6d:ef:ec:4d:3c:22:41:a2:4e:eb:b4:e0:47:66:bd:0f:cc:
87:16:c9:fa:4e:54:a9:fa:82:b8:57:2f:dd:77:af:92:88:30:
7e:3d:16:f2:06:cf:7c:2c:e7:53:34:94:1f:1d:70:0a:61:9d:
61:12:8f:6c:9c:7d:fd:77:25:3f:67:26:1f:d9:c4:3c:2f:29:
87:16:69:a8:8d:49:02:d4:6f:4e:f4:f4:ec:90:23:18:2b:1b:
89:85:ea:33:04:ff:0c:74:9d:c8:f3:43:94:db:38:16:e3:60:
37:8f:d0:77:1a:ea:71:d4:ba:2e:29:42:8d:4f:3c:20:ee:67:
64:4f:0f:71:6e:04:3c:d0:d0:0a:5d:a9:29:e9:f2:5e:eb:4f:
6f:0a:f2:ec:5c:b4:da:4c:07:92:17:bf:b8:82:84:a6:55:c8:
20:2f:8d:87:f1:21:56:06:ae:7a:19:a4:4e:68:3a:ae:ae:93:
f0:54:a6:4f:ab:31:6c:a5:68:ab:02:ff:79:d2:84:16:bb:b8:
45:14:04:c3:b5:ad:f3:ec:57:dc:bf:7e:40:bd:f5:f4:26:d5:
c3:29:62:1e:2e:27:d9:cf:fb:ac:4d:ba:ac:77:0a:ec:9b:ac:
04:f2:f0:85:e6:87:ec:07:09:29:31:05:01:54:9f:9a:bd:eb:
80:75:67:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 13:39:01 2024 by rpki-client on console-ams.rpki-client.org