Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/ZniNxwvKR4ZJNpcWB1ZfUJZVFzU.roa
File: ZniNxwvKR4ZJNpcWB1ZfUJZVFzU.roa (raw, json)
Hash identifier: psudHshebovk9alNf0qddjCh4fPFiapvsCKxKFDOS5Q=
Subject key identifier: 66:78:8D:C7:0B:CA:47:86:49:36:97:16:07:56:5F:50:96:55:17:35
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 018CC64B9066F1D05EB91359F001C091FBA5
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/ZniNxwvKR4ZJNpcWB1ZfUJZVFzU.roa
Signing time: Mon 01 Jan 2024 18:31:30 +0000
ROA not before: Mon 01 Jan 2024 18:31:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201373
IP address blocks: 193.192.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:90:66:f1:d0:5e:b9:13:59:f0:01:c0:91:fb:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 18:31:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66788dc70bca47864936971607565f5096551735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:99:54:22:af:35:bf:8a:da:d7:b9:b7:39:55:
6a:4c:07:a2:4f:3d:92:06:eb:cf:e3:c0:fb:eb:6d:
9f:fb:99:1e:d8:ad:2d:c1:ae:54:86:7a:88:bd:0a:
6c:c6:ef:17:4d:d8:6e:66:50:c8:c8:75:2f:0a:21:
60:ec:c1:75:4a:b8:1c:2b:ec:60:02:89:5d:0f:71:
5b:45:95:03:5f:dd:35:a2:e7:24:55:26:a8:81:68:
5c:f7:2c:f3:59:a8:72:de:59:56:e1:4a:b3:e9:02:
38:4e:d4:61:c1:43:f2:ab:e9:59:ac:8c:26:b2:4d:
4c:56:81:c9:71:94:b8:d9:69:5a:73:e9:28:2c:6e:
18:59:e2:a0:4a:cd:8c:ba:6c:d9:9f:6b:73:66:42:
0f:ad:13:f3:7f:7d:c7:a5:30:a3:68:c0:39:1c:35:
97:39:6a:49:c3:0b:ac:3a:be:0c:69:c0:9b:07:9c:
89:a9:a7:df:0f:00:e2:bf:e5:09:70:53:0b:41:bb:
3c:d6:5f:3a:f0:ad:6d:5c:9e:75:da:f3:97:b3:42:
d4:b4:9c:20:66:a0:83:37:0e:f0:17:04:5e:53:5f:
90:ae:e1:10:4d:5e:4f:d5:da:b5:b6:66:d2:7e:cb:
96:8e:c0:9b:c6:60:80:c3:93:97:5b:6e:2e:8d:f7:
dc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:78:8D:C7:0B:CA:47:86:49:36:97:16:07:56:5F:50:96:55:17:35
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/ZniNxwvKR4ZJNpcWB1ZfUJZVFzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.190.0/24
Signature Algorithm: sha256WithRSAEncryption
29:21:70:5b:10:02:d2:fb:a5:29:a5:ba:06:c1:99:91:68:f8:
97:d0:18:70:98:e9:b6:38:16:f0:43:00:79:a6:be:d5:05:60:
e4:26:cb:42:d0:99:d8:cc:e3:59:ab:51:ad:d6:52:f5:90:f5:
80:3f:5d:c5:a9:7e:74:d9:85:44:65:c0:6a:f1:14:5d:16:48:
3d:2d:6e:cd:e8:a4:2c:aa:60:54:2f:c1:1f:79:3b:52:03:a7:
82:3c:5d:fd:a2:a5:26:1e:7e:89:82:3c:33:2b:a7:f2:9e:dc:
df:95:43:75:43:2f:94:c4:61:dc:19:1c:c1:97:64:ef:de:bc:
df:47:44:1e:67:4d:dc:03:b8:b9:e9:96:aa:14:06:33:09:b4:
8b:6b:7a:0e:fa:7c:59:70:7a:ba:9a:e3:47:44:cc:bd:1b:2b:
5d:47:ea:2e:84:f9:52:fc:c7:21:1d:6a:12:af:01:3f:3f:1a:
ff:b3:15:10:dd:c4:76:01:0e:10:08:9e:1a:42:cb:61:f2:76:
c6:9f:84:9a:64:bb:5b:84:6f:af:0b:1a:da:3e:ec:16:21:ec:
db:04:6e:79:1d:3e:43:c8:cb:04:78:7b:3a:01:fb:ef:9c:7c:
00:78:ba:bd:3b:f2:c8:d6:a7:df:21:4a:85:1a:0f:8b:32:56:
89:40:bd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:19:04 2024 by rpki-client on console-fra.rpki-client.org