Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Zv7K8Te1OeZAt7D8h2OTukUGU1s.roa
File: Zv7K8Te1OeZAt7D8h2OTukUGU1s.roa (raw, json)
Hash identifier: C/3YiI/RVhyD4jx3dn6MqsPAjnWMabEw6+2I5xBEUyU=
Subject key identifier: 66:FE:CA:F1:37:B5:39:E6:40:B7:B0:FC:87:63:93:BA:45:06:53:5B
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 018CC64B8BCF728E96E068DAFEA18D756815
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Zv7K8Te1OeZAt7D8h2OTukUGU1s.roa
Signing time: Mon 01 Jan 2024 18:31:28 +0000
ROA not before: Mon 01 Jan 2024 18:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198881
IP address blocks: 188.114.80.0/22 maxlen: 22
178.16.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:8b:cf:72:8e:96:e0:68:da:fe:a1:8d:75:68:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 18:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66fecaf137b539e640b7b0fc876393ba4506535b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:80:39:ea:5c:f3:3b:63:f5:f7:8f:5c:82:ff:
42:f7:00:9c:33:37:b2:69:93:bb:fa:b3:41:40:fd:
5d:7a:08:ae:60:de:94:ad:8f:fb:91:60:97:01:7b:
aa:54:5b:23:05:92:cd:8c:bf:dc:d7:b5:31:9f:5b:
90:67:d6:78:b8:ec:c0:9e:c7:1b:7c:7e:d0:00:7a:
da:07:d0:fe:85:e8:be:4e:8f:46:a8:25:35:44:14:
28:5d:f3:26:10:49:12:30:c6:57:0d:d1:05:cf:62:
b5:56:6a:02:c8:3c:43:ef:3a:cf:3e:b5:c9:07:2f:
8d:ae:22:12:4a:89:4e:a1:55:c4:37:38:b6:64:46:
08:33:51:52:42:07:22:c6:25:98:63:2a:2c:34:41:
25:fe:be:c2:48:9a:7a:17:34:ce:2c:ca:f6:41:04:
ad:34:a5:28:b2:2c:5e:c9:d4:af:fa:8b:99:e4:e3:
92:4b:96:96:30:68:dc:ff:7b:d3:60:93:af:1a:5b:
d9:97:25:13:a8:e4:17:c9:89:4e:32:39:17:79:6c:
5a:66:d0:c4:cb:15:b7:5d:f1:aa:dc:7d:44:96:ea:
e7:32:d8:3e:c3:f8:55:01:22:20:28:c4:90:78:85:
fb:64:50:ca:3a:dc:c8:00:9b:4b:cb:0e:65:11:97:
11:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FE:CA:F1:37:B5:39:E6:40:B7:B0:FC:87:63:93:BA:45:06:53:5B
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Zv7K8Te1OeZAt7D8h2OTukUGU1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.16.117.0/24
188.114.80.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:3d:3f:25:36:72:e1:ab:1e:11:5b:53:27:d1:79:59:42:7c:
bd:11:5a:b0:ac:86:ca:5e:6c:b1:d7:37:00:03:74:e7:73:7d:
f5:e7:a1:e5:0e:a0:37:99:05:26:37:99:87:2f:29:7d:5d:df:
ce:68:9b:15:1a:de:f2:f9:9f:ec:e6:3c:6b:08:18:aa:c1:36:
51:93:ec:48:f7:04:fe:ec:54:80:32:38:34:9d:da:bc:77:ae:
67:24:72:8a:db:de:5a:64:87:9c:8c:21:2f:07:e4:a1:76:70:
cb:83:45:80:83:e3:69:d3:d5:2f:2b:22:2e:28:e6:ff:82:90:
7a:f8:7b:c3:9e:70:d9:b7:31:87:9e:56:db:b0:b3:a3:34:26:
08:4e:40:b6:cc:52:c3:6b:d9:59:9b:43:97:9b:62:1f:ab:3f:
6e:6b:24:fa:a5:83:86:40:6e:5d:ac:6e:65:40:29:0a:5e:c9:
41:aa:ba:5b:5b:cf:a2:0c:88:c9:9e:05:f4:49:32:64:56:e1:
7e:31:ab:21:4a:8d:60:86:76:ed:1c:e8:3b:db:cc:ca:c8:1f:
2d:22:aa:32:b8:b5:25:84:db:61:24:f3:c0:c1:a2:ed:4c:30:
e0:f8:9f:8d:6c:56:85:d6:81:81:67:a9:4a:62:17:ee:3e:7b:
98:5d:e4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:04:07 2024 by rpki-client on console-ams.rpki-client.org