Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/Z33SUWHpTw0nXqDskLcx3PZ6oSY.roa
File: Z33SUWHpTw0nXqDskLcx3PZ6oSY.roa (raw, json)
Hash identifier: nvlFpc8EM+8Jqjlh4UB1spz2JHAQ1/DGHp9GtlVdgEU=
Subject key identifier: 67:7D:D2:51:61:E9:4F:0D:27:5E:A0:EC:90:B7:31:DC:F6:7A:A1:26
Certificate issuer: /CN=a3698b01053911607edb2a76090a6aced95a3ed5
Certificate serial: 018CC5DC2642BF55E15A6886E152C8EBA5DA
Authority key identifier: A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/Z33SUWHpTw0nXqDskLcx3PZ6oSY.roa
Signing time: Mon 01 Jan 2024 16:29:48 +0000
ROA not before: Mon 01 Jan 2024 16:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15924
IP address blocks: 194.61.224.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:26:42:bf:55:e1:5a:68:86:e1:52:c8:eb:a5:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3698b01053911607edb2a76090a6aced95a3ed5
Validity
Not Before: Jan 1 16:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=677dd25161e94f0d275ea0ec90b731dcf67aa126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:6a:6d:f1:bf:ab:b9:3d:74:dd:75:20:af:dc:
22:82:3e:41:fa:6c:73:de:06:a0:90:5b:54:98:b1:
cd:71:e8:f8:6d:be:bc:87:dd:58:00:b0:22:bc:1a:
c7:1d:3d:66:cd:5d:32:ee:d1:3b:e8:46:91:ba:98:
47:ad:a7:56:a7:1e:ed:e7:87:64:dd:d2:de:86:4d:
0f:20:74:98:98:0d:0f:28:59:88:89:66:46:ba:67:
31:e2:0b:fa:3d:e0:3b:1f:f4:a7:4e:c7:bc:21:59:
7d:9b:10:53:86:a8:e7:e8:cd:e5:d2:d0:cd:f0:c7:
26:7c:cb:ce:1c:96:63:f3:56:dc:f7:70:03:69:f7:
48:24:e0:fe:a6:c1:68:63:9f:bf:f6:e8:62:4f:f4:
33:37:41:4d:28:94:3f:94:ee:ad:71:39:79:de:49:
37:74:8d:75:1e:d4:b6:aa:4f:21:87:fd:d4:a5:b0:
25:ba:80:fd:d8:ba:a9:bd:14:b1:ca:b5:1e:a4:98:
34:62:c6:11:71:38:ec:35:c7:a1:ee:dd:71:d2:75:
09:19:da:02:84:59:e6:d1:0e:bb:64:ff:4d:c4:32:
dc:3a:d1:9d:ce:0f:bb:2e:bb:c1:38:50:47:f6:be:
7f:50:e1:76:1f:a5:96:05:0f:a3:61:72:8c:04:e0:
3c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:7D:D2:51:61:E9:4F:0D:27:5E:A0:EC:90:B7:31:DC:F6:7A:A1:26
X509v3 Authority Key Identifier:
keyid:A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/Z33SUWHpTw0nXqDskLcx3PZ6oSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.224.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:92:73:8d:4e:83:f7:56:5b:34:6b:51:38:f0:01:02:f7:fa:
0f:ce:79:dd:10:3e:06:76:e3:bd:5c:30:32:35:f8:76:40:b8:
06:a8:48:97:45:ec:42:ef:05:6f:2b:5a:26:bb:e3:a3:03:1d:
7e:39:e2:e1:28:d3:03:20:64:75:cc:32:62:66:2c:db:c2:a3:
97:ed:32:d6:0f:b9:1d:bc:fc:e9:d2:88:be:8d:be:c2:5d:e7:
29:dc:d3:3b:58:a1:51:1e:4e:94:e5:7c:bc:16:1d:52:cb:cf:
d9:ba:fa:a4:ce:9a:76:a3:6d:8b:56:06:86:09:f2:ff:86:e6:
bf:59:d5:39:1d:37:4a:60:58:04:e9:c6:fd:2c:82:38:71:f9:
97:38:62:87:08:0a:bb:31:86:38:a5:bf:f1:31:80:0a:2c:68:
55:5a:11:a7:a5:5e:db:5e:21:2d:92:98:d3:ee:00:6d:34:7d:
27:42:85:a0:90:ed:46:b5:87:2b:9e:84:44:29:78:12:45:be:
9a:80:8a:8c:79:5e:23:f7:54:20:e7:c7:15:21:89:d7:4c:f0:
82:fc:52:8e:f0:2a:67:1c:5d:fc:f2:d1:06:0c:08:e9:5a:0d:
bb:f9:14:02:77:e9:bf:c2:96:79:f0:03:f4:c1:87:cf:6d:7d:
18:e3:3e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 03:44:01 2024 by rpki-client on console-ams.rpki-client.org