Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/cZv1bqt_airwz_TJ2odHOzgvDjc.roa
File: cZv1bqt_airwz_TJ2odHOzgvDjc.roa (raw, json)
Hash identifier: D8Rd9oNTUvrnALckle2sTh5eLCk+quYGDQTl94VXy94=
Subject key identifier: 71:9B:F5:6E:AB:7F:6A:2A:F0:CF:F4:C9:DA:87:47:3B:38:2F:0E:37
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018CC56E225DCA148EC03F2EE95F3E208F7A
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/cZv1bqt_airwz_TJ2odHOzgvDjc.roa
Signing time: Mon 01 Jan 2024 14:29:38 +0000
ROA not before: Mon 01 Jan 2024 14:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211500
IP address blocks: 193.46.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:22:5d:ca:14:8e:c0:3f:2e:e9:5f:3e:20:8f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Jan 1 14:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=719bf56eab7f6a2af0cff4c9da87473b382f0e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f4:73:d4:75:12:bb:6f:d4:cc:87:3f:cf:f0:
3d:a3:d4:79:63:79:ad:b0:b6:03:9e:73:9d:83:23:
52:f3:19:0d:45:6b:88:22:7a:3d:c2:64:a7:7d:b2:
49:7f:78:8a:fa:88:3c:9d:fd:84:2c:68:6d:12:b9:
ac:c0:ee:68:d8:ff:96:8d:84:9c:3d:55:1c:f7:29:
f8:8f:1c:06:9b:c7:f3:d6:24:f7:9c:c2:6c:8a:29:
74:db:6e:45:f4:9c:3a:ec:10:a4:56:6e:8e:c7:5f:
dd:51:11:a3:16:03:a3:aa:98:a2:70:e0:f3:11:71:
29:20:8d:d1:ae:c9:04:b9:25:2b:6f:1e:c6:9c:20:
6e:71:20:28:8b:df:d4:92:a6:4a:02:06:a1:cb:32:
3a:65:88:b6:b4:58:c2:f0:ea:4a:af:07:ce:83:85:
5e:06:4b:f0:77:80:d3:94:ce:f1:3a:be:49:6c:c6:
56:e5:b4:e4:65:48:2d:e6:97:1d:2d:e6:f5:d2:cd:
ac:f4:1b:d1:21:d6:75:1f:7e:72:ed:87:a3:80:0b:
80:1c:b2:f2:e3:78:04:23:a9:a0:6a:f4:be:ab:dc:
83:24:16:eb:64:11:b3:91:c7:09:c7:61:63:8a:07:
ce:70:c1:fc:29:b3:d6:59:ce:6b:fd:72:ac:fd:9c:
8f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9B:F5:6E:AB:7F:6A:2A:F0:CF:F4:C9:DA:87:47:3B:38:2F:0E:37
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/cZv1bqt_airwz_TJ2odHOzgvDjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.81.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:3c:5a:14:7e:15:34:36:fc:1d:c4:59:f8:a5:3f:ba:d7:7d:
78:97:d9:31:70:c8:41:66:ed:b1:6b:17:a3:05:09:04:ad:bc:
3f:03:56:b5:85:a4:27:61:a0:8d:93:91:cb:87:7b:34:4a:c1:
d7:cf:a0:cd:16:f7:6c:9b:f3:ea:2f:db:b1:e6:b2:96:ab:7b:
8f:06:9e:f0:f2:ba:53:53:38:67:2a:6d:45:d5:17:87:02:5a:
53:80:46:ef:3b:e5:20:0f:36:2c:d0:33:24:a1:d2:57:71:c1:
99:8a:43:e6:fa:4c:ec:28:39:d3:82:68:c0:d7:15:83:29:55:
ac:fd:89:00:16:b2:30:52:40:f8:88:9e:ee:ce:15:b6:e0:e4:
dd:9e:41:22:8a:9f:d9:e3:c7:60:87:a7:fa:1b:fb:6e:4a:b6:
92:8c:c2:c6:cc:3e:7e:b9:10:4e:a3:19:4b:06:9a:b1:7e:72:
20:65:bb:97:13:18:bc:02:ec:fc:b1:77:54:eb:e7:b5:80:4b:
ea:71:a5:1a:1c:e5:aa:33:ee:3b:9d:92:35:e3:9a:50:8d:05:
b7:02:77:0d:72:f1:d5:1a:1b:59:c0:40:2a:d2:d5:d9:b0:23:
70:61:3e:fd:8e:98:f2:3a:a5:da:2e:bf:7d:eb:ce:e6:d2:bd:
e1:5f:e1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:34:03 2024 by rpki-client on console-ams.rpki-client.org