Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/1zevTH5DkNW3Z18DcnPxWGoVL2E.roa
File: 1zevTH5DkNW3Z18DcnPxWGoVL2E.roa (raw, json)
Hash identifier: PvTcwAMckIW2+t2kivPcPjBTplgq5N7Am4+oMiCVV6U=
Subject key identifier: D7:37:AF:4C:7E:43:90:D5:B7:67:5F:03:72:73:F1:58:6A:15:2F:61
Certificate issuer: /CN=333287e23bee67ca662fbd779fcbc182ec553be3
Certificate serial: 018CC6B79E775F02A7A24F9CDBB068CC0C88
Authority key identifier: 33:32:87:E2:3B:EE:67:CA:66:2F:BD:77:9F:CB:C1:82:EC:55:3B:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/1zevTH5DkNW3Z18DcnPxWGoVL2E.roa
Signing time: Mon 01 Jan 2024 20:29:31 +0000
ROA not before: Mon 01 Jan 2024 20:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59492
IP address blocks: 193.187.77.0/24 maxlen: 24
193.187.78.0/24 maxlen: 24
193.187.76.0/24 maxlen: 24
193.187.79.0/24 maxlen: 24
193.142.213.0/24 maxlen: 24
195.182.7.0/24 maxlen: 24
2001:67c:538::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:03:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:9e:77:5f:02:a7:a2:4f:9c:db:b0:68:cc:0c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=333287e23bee67ca662fbd779fcbc182ec553be3
Validity
Not Before: Jan 1 20:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d737af4c7e4390d5b7675f037273f1586a152f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e3:6b:27:a9:3d:4e:74:26:45:fe:25:37:87:
38:86:f5:25:61:2b:72:5e:3f:8d:0c:35:6c:cb:b3:
9e:58:ca:37:6d:af:b6:a7:6e:c3:a1:61:ed:bb:c3:
2b:1c:62:f5:d8:65:cd:f1:97:3f:fa:e7:cb:9f:81:
5d:b5:9d:e5:71:fb:a5:98:1f:1e:bf:39:b0:f3:96:
da:bb:59:3a:b2:88:1a:0d:81:61:2a:48:57:f6:bc:
10:0e:00:dc:4c:14:db:88:11:bd:37:d0:b8:29:cc:
93:5d:76:58:18:7f:3c:1e:0c:63:c8:34:52:86:66:
e8:82:36:3c:86:50:c4:1b:76:d3:6c:8c:4c:77:ee:
f7:44:bb:01:68:59:64:82:5a:49:87:21:bd:ab:79:
bb:5a:3a:0d:0d:22:dd:ff:1f:82:39:3e:52:47:5f:
3b:3b:9f:28:e8:d1:4a:05:62:01:82:83:c4:dd:b7:
fd:65:e0:49:33:2b:c1:03:df:05:5d:79:5b:4c:c5:
fc:38:45:7d:93:60:ba:d4:a1:20:2c:5e:0a:f2:0f:
41:71:d3:d9:d0:15:21:2a:91:42:db:30:55:3f:41:
25:ef:d7:db:f9:cd:61:ea:20:49:2c:98:5c:fd:62:
40:0f:0a:57:31:c6:34:07:ce:ba:cb:fd:1d:c1:bc:
13:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:37:AF:4C:7E:43:90:D5:B7:67:5F:03:72:73:F1:58:6A:15:2F:61
X509v3 Authority Key Identifier:
keyid:33:32:87:E2:3B:EE:67:CA:66:2F:BD:77:9F:CB:C1:82:EC:55:3B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/1zevTH5DkNW3Z18DcnPxWGoVL2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.213.0/24
193.187.76.0/22
195.182.7.0/24
IPv6:
2001:67c:538::/48
Signature Algorithm: sha256WithRSAEncryption
be:5e:9c:e9:bd:c3:f1:57:e7:6a:b6:5c:64:1a:17:8a:10:c1:
2f:c4:06:2c:02:1a:86:60:d9:2e:2d:35:bc:da:f1:e0:cc:c8:
a9:d1:be:97:07:ea:92:ff:ac:c7:0f:52:43:ea:cc:ca:2f:de:
97:94:a3:c0:58:d6:db:60:6f:8c:e4:20:d2:f0:07:75:3c:cd:
f6:fa:77:0a:6a:28:89:17:e8:95:34:7d:38:50:65:08:7c:76:
b5:98:a5:a8:e2:a2:fd:72:97:5a:a7:3a:a6:81:2d:41:ae:e5:
03:44:6b:d0:90:22:01:91:d3:99:a9:9d:28:bc:e9:e4:57:21:
d2:81:df:2b:19:2f:f7:21:28:5d:c8:dc:f6:28:92:25:a0:2e:
b1:9e:19:9a:d5:ac:af:04:d7:80:b9:67:70:5d:f7:38:4f:54:
6d:15:67:2e:36:97:00:81:5a:24:5a:bb:1c:16:21:8f:4b:d7:
8e:f4:bb:e1:b3:7f:03:39:74:d2:4c:cc:ea:ff:65:a3:29:4a:
1c:4e:3c:51:7a:cf:b9:3a:20:8b:11:6e:a1:74:3f:cd:f7:3d:
ea:f7:ea:67:b3:f3:ac:76:6e:a9:ef:fa:14:d9:b0:25:2a:8c:
4e:82:ee:78:03:07:76:4d:80:01:9b:51:17:cf:ed:15:82:51:
31:33:c0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:51:57 2024 by rpki-client on console-ams.rpki-client.org