Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/ZTdbWE89UfdhaeKsQdQCCLeYtAw.roa
File: ZTdbWE89UfdhaeKsQdQCCLeYtAw.roa (raw, json)
Hash identifier: Wd+FXVA3kRTjYGOB0F1mksAv7avqALgZrd59YrwnQhc=
Subject key identifier: 65:37:5B:58:4F:3D:51:F7:61:69:E2:AC:41:D4:02:08:B7:98:B4:0C
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018CC56E23505FCC24E54A936A283CFC45FE
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/ZTdbWE89UfdhaeKsQdQCCLeYtAw.roa
Signing time: Mon 01 Jan 2024 14:29:38 +0000
ROA not before: Mon 01 Jan 2024 14:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400039
IP address blocks: 93.114.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:23:50:5f:cc:24:e5:4a:93:6a:28:3c:fc:45:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Jan 1 14:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65375b584f3d51f76169e2ac41d40208b798b40c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:30:ce:6a:dd:18:5a:e2:96:ff:74:66:79:97:
4d:b5:38:da:19:26:29:da:5d:28:c5:e8:1a:9d:a1:
90:6f:5d:3a:c8:d6:31:0f:1d:63:1b:68:b6:44:07:
5b:48:ec:3e:89:64:65:e1:9f:2a:10:58:fe:2b:40:
d6:03:45:50:44:64:a5:2e:1c:0f:90:39:c7:25:b0:
35:22:53:99:39:8f:56:db:57:8d:b9:6a:46:d5:8f:
f1:15:5a:f1:75:3a:58:83:53:d6:f0:cf:24:5a:55:
48:47:58:93:81:61:49:5f:b1:6d:a1:6f:47:1b:10:
62:ff:35:f5:40:c2:e4:9a:4c:ed:a2:1a:3a:f0:e8:
bf:cc:f2:bb:31:52:f6:d3:dc:1b:3b:a3:c1:3b:20:
3b:76:fe:ca:74:01:2d:af:e1:3b:74:a9:4a:76:af:
f7:3e:10:3a:03:14:be:b9:d7:11:22:42:6e:40:06:
42:a2:ef:e5:94:62:b2:00:19:67:86:53:4a:e1:e2:
67:c9:aa:89:0b:b3:b1:a7:4c:eb:fa:16:b7:6f:d1:
11:e7:ec:ce:b2:34:e0:08:bb:53:e7:80:85:d4:66:
2e:54:1f:8d:0f:97:da:61:b9:aa:a8:10:f5:1a:0e:
dc:9f:3a:c1:46:5a:3f:98:ee:57:26:47:f3:a6:df:
7f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:37:5B:58:4F:3D:51:F7:61:69:E2:AC:41:D4:02:08:B7:98:B4:0C
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/ZTdbWE89UfdhaeKsQdQCCLeYtAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.63.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:ac:bf:47:e2:86:7b:55:f5:12:83:2b:41:0c:6d:c0:ff:9c:
12:11:07:17:10:2b:92:75:f9:a4:61:72:a8:c8:de:1c:55:6d:
10:ea:cb:c2:e0:2f:92:b5:33:3e:1b:21:73:30:4c:0a:27:ad:
4c:81:ad:e0:ce:2c:b2:a0:31:5f:6a:03:e9:a6:42:cb:0f:58:
7d:f0:43:de:aa:1e:04:51:5b:86:fe:37:fd:1b:6c:83:de:e5:
d9:57:77:00:ab:cc:78:b1:0c:fc:14:60:7a:c0:20:cc:f5:2e:
44:e3:75:13:af:53:44:0c:9b:46:cb:6f:b6:9f:5c:c9:8d:9d:
30:03:3b:98:d6:49:43:92:57:b1:7a:fe:d3:d5:58:9e:be:b4:
6d:ee:59:53:50:16:03:72:b7:bd:5e:e1:08:47:8d:4c:46:e5:
1d:44:13:3c:54:72:6a:f3:24:56:d2:c4:f8:35:1f:18:17:43:
4a:4b:c5:62:59:0b:fb:4b:f0:e2:65:f1:1e:78:84:ab:24:4c:
02:f4:9a:b4:59:be:aa:75:ca:ef:dd:b9:58:af:92:fe:ac:af:
1b:b3:2d:e1:eb:9c:9b:69:20:61:d8:d4:85:0f:f8:06:1c:f1:
fb:9c:f3:90:58:30:ed:0d:c0:6d:18:5e:9c:1c:57:da:1b:1c:
9f:52:d0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:16:05 2024 by rpki-client on console-fra.rpki-client.org