Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/ZlKT_5bEBuetLgFcBGIrZccGP20.roa
File: ZlKT_5bEBuetLgFcBGIrZccGP20.roa (raw, json)
Hash identifier: K59weS/Hh16BWfaxRX0tFtJhj5UdFX9h7DwS2Gu4yDQ=
Subject key identifier: 66:52:93:FF:96:C4:06:E7:AD:2E:01:5C:04:62:2B:65:C7:06:3F:6D
Certificate issuer: /CN=a509e86576c065e14bfbee8f652ab6c279ccde12
Certificate serial: 018CC9BBFD729C7DBB2F8FFD577DDB1FD125
Authority key identifier: A5:09:E8:65:76:C0:65:E1:4B:FB:EE:8F:65:2A:B6:C2:79:CC:DE:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/ZlKT_5bEBuetLgFcBGIrZccGP20.roa
Signing time: Tue 02 Jan 2024 10:33:09 +0000
ROA not before: Tue 02 Jan 2024 10:33:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24940
IP address blocks: 193.163.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:fd:72:9c:7d:bb:2f:8f:fd:57:7d:db:1f:d1:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a509e86576c065e14bfbee8f652ab6c279ccde12
Validity
Not Before: Jan 2 10:33:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=665293ff96c406e7ad2e015c04622b65c7063f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:35:cc:07:13:db:a7:0a:19:d6:0b:c4:b2:a0:
14:9f:f8:c7:0c:0d:26:94:cf:65:f8:a8:47:14:cb:
a2:83:33:2f:bc:b2:43:37:5f:c1:42:22:4c:f1:b5:
f0:1c:5e:c9:19:2f:16:61:62:9c:b5:f4:2a:b9:3b:
95:40:5a:74:9d:6f:e8:e5:da:1f:04:21:0e:54:14:
60:35:ee:95:ef:da:49:7d:a4:13:43:d4:b4:58:7e:
23:cb:2e:10:3f:8c:14:6e:f1:e9:e8:a4:1c:60:f9:
dd:22:4e:1e:f7:45:5d:2b:13:fa:59:9c:0a:58:39:
a8:54:d4:fb:02:1c:fc:55:d9:a0:55:35:82:07:8b:
9d:93:5f:87:2f:6d:ab:de:4c:07:10:54:71:ba:5f:
ed:36:a6:eb:83:8a:a8:44:08:b7:20:4f:3e:3b:5c:
ed:8e:32:46:3f:14:5f:22:9e:fe:21:f9:67:45:28:
e6:8b:f9:21:4e:21:6e:06:d5:64:95:9e:73:99:6a:
03:51:a8:cb:08:87:49:aa:05:a4:d1:7b:5f:90:17:
f0:3c:25:7b:8d:35:0e:7b:28:35:38:32:63:dd:64:
47:f6:07:75:5a:a8:56:47:37:cb:18:c1:75:40:6f:
ec:97:e9:dc:c2:4f:af:51:dc:d9:b6:b0:cb:74:60:
eb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:52:93:FF:96:C4:06:E7:AD:2E:01:5C:04:62:2B:65:C7:06:3F:6D
X509v3 Authority Key Identifier:
keyid:A5:09:E8:65:76:C0:65:E1:4B:FB:EE:8F:65:2A:B6:C2:79:CC:DE:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/ZlKT_5bEBuetLgFcBGIrZccGP20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.198.0/24
Signature Algorithm: sha256WithRSAEncryption
79:73:a7:77:95:3a:08:5a:3b:5b:d3:00:20:ba:33:21:35:dd:
ad:f2:ff:09:d0:85:28:a3:e9:49:ad:2e:3e:3f:6d:4a:33:f3:
fc:1e:bf:5a:74:18:ec:06:4a:bd:9a:c3:0e:5d:6a:57:f0:0a:
0a:ab:90:15:61:8f:20:5b:81:ab:9e:57:08:b0:bb:4f:6d:ae:
de:83:3c:0e:14:5e:b5:c9:0a:cc:f0:29:60:6e:7f:0b:43:b6:
2f:4a:29:0d:e1:68:59:69:75:58:c2:a1:41:c7:21:68:8b:05:
65:50:90:5f:ff:5a:cd:30:8b:c1:df:61:a3:b6:f5:0f:60:58:
b7:9c:ee:1e:85:d5:3f:da:31:9d:41:c9:e9:27:0d:24:39:71:
4d:0a:fa:78:f1:43:b6:97:1a:22:c7:f4:ca:1b:ee:b1:49:84:
46:7b:80:d9:1e:44:20:71:0e:3a:85:6c:66:5d:a2:59:29:4e:
cb:1f:a0:4b:f6:d7:3b:8f:fe:f8:55:3f:2c:71:10:0b:04:f7:
99:c2:07:9c:d3:62:63:ac:ee:8d:92:15:e1:2e:e6:86:df:51:
56:4b:7f:c0:8c:40:32:f1:c1:44:ae:52:9a:50:5f:2c:65:7c:
a7:9f:7e:e7:41:70:d4:49:96:c5:56:e5:84:1c:21:dc:7f:e8:
56:c1:65:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:42:27 2024 by rpki-client on console-fra.rpki-client.org