Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/m0UznYZhYvjjWt14ulKDF3ku3fY.roa
File: m0UznYZhYvjjWt14ulKDF3ku3fY.roa (raw, json)
Hash identifier: dawaEn5mb77xUdyNLj/TofXeGbt8nA6qNSFV9TNuGw4=
Subject key identifier: 9B:45:33:9D:86:61:62:F8:E3:5A:DD:78:BA:52:83:17:79:2E:DD:F6
Certificate issuer: /CN=6552d2cb5a9e8d5689fad67a9605149c6d5ef7ba
Certificate serial: 018CC34961C4E8C777B58461222400BAE5B5
Authority key identifier: 65:52:D2:CB:5A:9E:8D:56:89:FA:D6:7A:96:05:14:9C:6D:5E:F7:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/m0UznYZhYvjjWt14ulKDF3ku3fY.roa
Signing time: Mon 01 Jan 2024 04:30:15 +0000
ROA not before: Mon 01 Jan 2024 04:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3303
IP address blocks: 194.93.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:61:c4:e8:c7:77:b5:84:61:22:24:00:ba:e5:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6552d2cb5a9e8d5689fad67a9605149c6d5ef7ba
Validity
Not Before: Jan 1 04:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b45339d866162f8e35add78ba528317792eddf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:45:97:80:7b:a4:dd:ae:21:b1:52:9f:3c:3e:
f1:53:b8:ab:10:92:55:f8:d1:34:f6:3c:20:d7:fa:
61:63:73:34:de:5a:08:8d:4b:58:a2:c5:58:01:58:
29:06:af:de:7e:d2:44:7b:f4:9c:03:2e:bd:69:44:
92:93:1f:4a:45:5e:08:ef:e5:17:65:08:00:a3:8c:
36:29:0c:ab:72:ac:f4:bf:34:3c:67:9f:e6:45:e6:
d0:d9:a0:93:c9:c5:98:6c:55:47:0e:ac:ad:ac:7c:
6e:af:da:cc:6f:c8:e9:4d:22:2b:2b:fc:2b:c6:9c:
0b:cc:8a:4b:ec:db:e4:8e:7f:ac:48:ca:72:4f:6a:
9b:85:f3:d4:e5:56:4c:8c:42:b2:cf:e7:d8:d3:a1:
05:0c:1d:16:3f:d8:a4:8f:ce:28:7a:bb:8f:d2:2d:
00:8b:fe:e7:0e:5a:57:17:cc:17:d5:65:02:d8:dd:
a8:9d:88:e7:78:32:62:c8:3f:0d:53:73:18:d1:8e:
57:5a:8f:11:8e:c7:d4:97:f4:82:fb:84:d8:66:b4:
56:e0:9e:ba:8d:6c:44:62:bd:45:2b:c6:91:11:3d:
f3:37:2d:ff:0e:4e:d4:92:53:53:3d:ed:11:f4:cf:
e8:15:8d:9a:c1:6d:ef:45:ab:14:56:0d:44:d8:cf:
61:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:45:33:9D:86:61:62:F8:E3:5A:DD:78:BA:52:83:17:79:2E:DD:F6
X509v3 Authority Key Identifier:
keyid:65:52:D2:CB:5A:9E:8D:56:89:FA:D6:7A:96:05:14:9C:6D:5E:F7:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/m0UznYZhYvjjWt14ulKDF3ku3fY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.98.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:69:bd:97:49:f8:c8:bf:9e:22:2e:d1:8c:71:ef:b6:b0:80:
aa:70:4c:8f:fb:a4:5d:54:b2:ee:ca:f3:d2:11:4d:e1:12:f0:
d2:4d:26:8c:c2:cf:4e:7a:eb:00:5b:0f:03:da:ac:1f:ec:fb:
f8:19:02:b3:9b:26:dd:4b:68:47:c5:b9:a3:33:36:ce:f1:b9:
99:dd:05:3e:df:97:4c:96:6d:ec:20:88:a9:ce:0c:0c:8c:cf:
6b:16:46:77:f0:5a:cf:5b:5f:40:9f:ba:be:2f:b3:36:81:07:
f5:7c:26:bc:5a:a0:11:96:b7:4e:02:73:44:fc:25:0e:e7:11:
a8:cb:8d:65:a7:c9:6c:dc:12:d5:81:41:24:9a:e6:13:d6:1c:
6e:ee:72:8c:fe:80:69:77:ec:5d:f6:97:ee:d4:1d:ad:09:e1:
e4:d5:62:b6:03:78:60:ab:25:3b:80:b5:2d:8e:f9:fb:ff:17:
77:0c:47:ee:61:e3:40:a3:b4:58:d2:be:94:f6:27:6a:40:c0:
8f:e3:09:53:99:79:88:0b:09:56:78:f1:f9:ae:84:95:84:87:
ef:56:d0:18:9f:31:e0:8d:73:6d:42:44:29:04:9e:4c:6a:59:
79:4f:82:79:22:3d:a9:b6:c1:f0:1d:4b:11:2e:64:ed:4d:a4:
ba:8a:c9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 19:51:24 2024 by rpki-client on console-ams.rpki-client.org