Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/kzPZ0KJ95arlk5Im7AdiFxpzuc4.roa
File: kzPZ0KJ95arlk5Im7AdiFxpzuc4.roa (raw, json)
Hash identifier: dd/M2NpVsiUmYKcun5euV2HnLmCwvXO9pCkb6hM01oA=
Subject key identifier: 93:33:D9:D0:A2:7D:E5:AA:E5:93:92:26:EC:07:62:17:1A:73:B9:CE
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 018CC794A3CB64AA9D8B7F97CBB651DAB0F7
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/kzPZ0KJ95arlk5Im7AdiFxpzuc4.roa
Signing time: Tue 02 Jan 2024 00:30:56 +0000
ROA not before: Tue 02 Jan 2024 00:30:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207066
IP address blocks: 176.103.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:a3:cb:64:aa:9d:8b:7f:97:cb:b6:51:da:b0:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Jan 2 00:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9333d9d0a27de5aae5939226ec0762171a73b9ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f6:61:09:61:44:7b:10:67:7b:7c:c2:c2:3f:
13:5c:fe:da:70:87:36:ad:f6:84:05:31:4f:ed:1a:
b7:08:c7:98:82:dd:04:12:4b:92:3a:a4:69:d6:4b:
bc:e1:b0:ea:9f:51:50:99:ab:e2:1d:b1:5a:3f:dd:
34:ca:17:01:59:fc:26:13:27:59:52:77:39:a6:02:
98:81:13:62:71:ad:c4:ec:d9:58:44:bf:7f:d7:b0:
3a:ba:5e:34:a4:b4:74:c2:84:55:be:3d:4f:f2:41:
33:16:14:72:b3:56:2e:56:9d:73:af:fa:ed:9f:45:
7d:65:50:e7:48:82:dd:e1:38:2f:ee:87:a9:c0:5e:
b5:ba:98:d4:d3:2c:c8:c5:fa:d2:b8:90:35:9b:d0:
55:d7:c4:6c:1b:aa:76:36:ac:59:50:f9:c4:8a:48:
59:a6:b1:21:79:70:cd:9c:3b:1c:7e:8d:14:9f:b2:
a8:4a:5c:d7:ce:d7:4e:52:45:92:1a:ac:76:fb:1b:
d5:66:fa:73:60:f3:12:e2:fc:4a:10:95:9c:c3:5e:
f6:5c:77:8c:57:bb:78:1d:64:4f:de:86:20:b9:f0:
43:32:68:3b:39:59:0b:33:f1:62:65:0e:13:df:b0:
b0:b5:3c:79:1e:cb:d3:ca:e4:d3:0f:ff:46:7c:9c:
3c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:33:D9:D0:A2:7D:E5:AA:E5:93:92:26:EC:07:62:17:1A:73:B9:CE
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/kzPZ0KJ95arlk5Im7AdiFxpzuc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.185.0/24
Signature Algorithm: sha256WithRSAEncryption
38:6c:12:89:e1:b0:b1:54:e1:7a:13:eb:7b:4d:99:82:7c:f8:
91:ae:a5:a9:5a:82:29:71:0f:22:01:66:96:99:1a:e8:f1:ba:
c6:b9:30:a6:00:9a:18:6f:f3:59:9d:90:27:b2:a0:22:4d:75:
04:da:d8:4b:b6:d0:cb:b6:2b:15:cd:80:c9:ac:1d:f7:d4:50:
ad:94:b4:28:0e:03:ba:69:8a:0c:5a:3e:24:80:37:da:a9:b9:
1b:60:3e:45:36:b5:ff:f5:99:fb:ef:34:61:03:31:8c:50:05:
8f:93:f9:13:eb:90:33:82:51:e5:ec:a7:c4:1a:d4:89:d7:b3:
8b:15:e3:0f:31:9a:1d:5e:d4:32:99:d6:7b:ed:62:00:11:ec:
d7:f5:f2:58:00:c9:13:cb:de:04:34:91:21:47:32:8d:1f:da:
b6:a7:46:eb:80:42:c5:46:bb:43:84:57:e0:09:04:61:64:7d:
31:d7:c5:c5:ef:e4:07:e7:70:77:d7:87:47:4b:0c:3a:00:5f:
cb:6a:fc:8d:bd:b3:fa:a8:c4:78:9d:79:77:0b:86:5e:e9:eb:
63:bd:3a:bc:fb:ad:1e:88:37:85:66:af:53:95:51:97:95:f9:
1f:ea:89:25:f9:50:c2:44:1c:af:22:48:05:5d:30:67:f7:47:
ac:ba:e6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:07:27 2024 by rpki-client on console-ams.rpki-client.org