Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Zutb95AWPEEW2bAFdc9m0BwniKQ.roa
File: Zutb95AWPEEW2bAFdc9m0BwniKQ.roa (raw, json)
Hash identifier: PgrYC2pIbdOVvGMLUiiVq/xxkOeK2+5gbbrb7OJh1G4=
Subject key identifier: 66:EB:5B:F7:90:16:3C:41:16:D9:B0:05:75:CF:66:D0:1C:27:88:A4
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 018CC424F33758FA541CBB47D54DC385A05F
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Zutb95AWPEEW2bAFdc9m0BwniKQ.roa
Signing time: Mon 01 Jan 2024 08:30:05 +0000
ROA not before: Mon 01 Jan 2024 08:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43391
IP address blocks: 185.185.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 May 2024 22:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:f3:37:58:fa:54:1c:bb:47:d5:4d:c3:85:a0:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 1 08:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66eb5bf790163c4116d9b00575cf66d01c2788a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5d:7d:dc:d0:05:6c:53:82:69:57:a4:03:14:
ba:ae:bf:36:5e:83:e1:90:37:cc:7f:da:8a:47:91:
0f:76:09:42:a0:fa:ac:ae:b6:ad:e3:e7:f0:2e:64:
18:40:56:cc:b4:64:1a:c0:8f:b8:e7:ea:8c:b0:ee:
75:19:1d:36:0f:9d:c2:71:33:3c:c9:e0:1f:3a:c3:
ba:1b:7c:d0:6d:2e:a0:04:25:90:9c:8f:0f:e8:1b:
22:70:bd:27:a8:34:24:c7:d3:a9:4b:99:ac:26:ed:
18:68:3d:4e:6d:d4:55:b6:6e:4d:21:26:df:10:39:
b4:f8:9b:0c:3f:27:48:56:bc:56:35:70:8e:16:71:
47:04:c7:6f:f4:51:ea:4e:21:78:a7:ee:cc:a0:79:
bf:12:4f:5d:2f:fc:1e:c3:c2:27:bb:df:9e:e7:a2:
80:c7:54:e6:09:7a:30:95:64:55:cc:e8:26:13:79:
b8:0e:4f:9b:63:bf:52:60:ec:75:51:0f:34:a8:36:
12:b8:be:95:ca:5d:b4:e3:2d:f2:02:89:8e:88:9d:
c3:c1:4d:cc:9f:5f:c1:cd:25:57:7b:13:f4:83:ee:
3f:80:b1:b1:41:a4:d3:a1:49:fd:71:42:fe:53:15:
6f:34:7c:a1:bf:5a:e2:55:b8:9c:d6:4b:12:f8:9f:
0b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:EB:5B:F7:90:16:3C:41:16:D9:B0:05:75:CF:66:D0:1C:27:88:A4
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Zutb95AWPEEW2bAFdc9m0BwniKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.233.0/24
Signature Algorithm: sha256WithRSAEncryption
53:90:69:34:17:f1:59:6d:5e:18:d2:09:ba:41:60:44:c3:01:
5e:15:74:e5:dc:5f:f8:cd:87:8c:9f:f6:f2:51:d2:4f:e6:8f:
a2:ab:07:a1:a5:0f:d5:7e:50:57:7a:9b:de:57:64:c1:f9:61:
f7:11:1f:e0:87:dd:5a:c7:1c:e4:e5:8b:b8:bd:7e:78:5d:bf:
1e:20:bc:c4:cf:ec:45:8f:f6:52:8f:51:b7:7b:c2:03:59:86:
cf:0d:e7:07:74:49:6b:cc:37:64:a5:a6:83:c8:ae:52:29:6e:
ff:bd:89:2c:f3:72:2b:d8:10:06:b0:f9:ef:c3:6d:4a:5e:c6:
13:4a:a2:0f:d4:2f:1f:a8:70:a1:f3:d0:03:30:41:cd:6c:63:
50:8a:e8:41:12:8b:56:9d:7c:84:89:e0:33:a3:81:c2:7a:18:
71:be:a1:94:dd:28:0e:05:41:87:f5:f0:57:0f:51:81:7e:a6:
9d:af:43:a4:34:98:65:1c:b7:60:9b:8c:c3:82:9c:d7:0a:92:
07:01:58:94:93:99:77:9d:ec:4c:91:9b:5f:e9:67:b9:cf:7a:
e0:28:cb:73:5a:6a:bf:9e:0b:1b:07:b3:71:df:b9:04:ba:f7:
64:41:11:46:e5:91:43:2f:f4:9c:82:44:ee:19:7d:31:9f:19:
60:a5:37:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 04:55:25 2024 by rpki-client on console-ams.rpki-client.org