Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/z7vwqQUPJWbko3zUKZUHXjrcSm0.roa
File: z7vwqQUPJWbko3zUKZUHXjrcSm0.roa (raw, json)
Hash identifier: 0w1OOInCXIvuSZx0x099MMF8hkKlGVaNhUM421/JaLY=
Subject key identifier: CF:BB:F0:A9:05:0F:25:66:E4:A3:7C:D4:29:95:07:5E:3A:DC:4A:6D
Certificate issuer: /CN=0100a169c8e696ca169b599c7a171193fff06d2a
Certificate serial: 018CCA2A0F8053A9CAC7ACBE5E6F981A0711
Authority key identifier: 01:00:A1:69:C8:E6:96:CA:16:9B:59:9C:7A:17:11:93:FF:F0:6D:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/z7vwqQUPJWbko3zUKZUHXjrcSm0.roa
Signing time: Tue 02 Jan 2024 12:33:23 +0000
ROA not before: Tue 02 Jan 2024 12:33:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.29.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 22:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:0f:80:53:a9:ca:c7:ac:be:5e:6f:98:1a:07:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0100a169c8e696ca169b599c7a171193fff06d2a
Validity
Not Before: Jan 2 12:33:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cfbbf0a9050f2566e4a37cd42995075e3adc4a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a7:6d:e8:ff:bd:fc:81:82:69:64:44:4e:e4:
49:85:05:fc:ee:f8:7d:98:ea:98:bd:32:0c:49:a0:
cf:08:0b:c9:9e:b9:22:c8:55:5c:4f:c8:1c:be:e1:
dd:c9:27:08:3a:1a:f9:4d:9a:1b:cb:19:9b:d0:3f:
23:70:c6:73:b1:66:6a:58:9a:8b:7d:53:4b:c6:66:
e5:f4:29:c0:65:34:48:84:fa:9e:98:20:01:47:08:
98:56:0a:6f:81:eb:a2:76:d3:47:ce:b3:bf:d9:13:
ae:c0:ec:a5:84:91:ca:74:65:1c:3d:d1:c2:f9:5c:
5d:d9:81:70:db:73:ec:3b:a9:5c:69:68:09:f9:35:
d1:ab:16:e5:cd:36:e5:49:cd:36:3c:b3:28:4f:4b:
e8:7b:87:fa:56:e5:c2:66:c0:b9:40:a1:ff:42:a9:
f3:1d:14:45:6e:96:16:f8:7b:f6:c6:48:37:4d:f8:
2d:eb:71:4a:9a:c3:89:49:87:f2:24:be:d8:18:79:
27:08:96:75:36:c9:22:13:1a:cb:4b:cb:1f:bb:ad:
9e:ec:29:36:7b:49:f7:88:7c:7b:04:32:3b:5d:70:
23:bb:43:18:e4:70:70:1a:de:75:ee:eb:0a:59:94:
9e:e7:c6:44:5d:b2:95:3b:35:65:12:37:09:f9:c9:
43:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BB:F0:A9:05:0F:25:66:E4:A3:7C:D4:29:95:07:5E:3A:DC:4A:6D
X509v3 Authority Key Identifier:
keyid:01:00:A1:69:C8:E6:96:CA:16:9B:59:9C:7A:17:11:93:FF:F0:6D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQChacjmlsoWm1mcehcRk__wbSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/z7vwqQUPJWbko3zUKZUHXjrcSm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/46c95c-7f21-4cc7-8e8f-b566aeb95f93/1/AQChacjmlsoWm1mcehcRk__wbSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.47.0/24
Signature Algorithm: sha256WithRSAEncryption
97:01:40:4c:f2:18:1e:fc:a9:cd:cf:5e:ca:8e:4a:78:76:27:
1a:98:f0:00:12:51:04:a4:cf:7f:cd:01:35:36:68:76:9c:34:
71:7e:0c:37:13:9b:17:a6:06:2a:ad:74:db:bf:90:12:4b:7d:
ae:ae:7a:6f:fe:56:98:c1:6a:50:1c:0b:78:a2:f6:93:04:3f:
33:af:c3:35:e4:ca:2c:41:5d:ba:0d:db:b5:4d:d8:98:a1:f2:
82:98:e1:37:76:b5:b3:a7:dd:a5:f7:43:04:6b:d6:33:25:b6:
17:70:76:e1:95:a7:86:a5:d1:ff:31:4d:fb:8a:fc:0b:06:a6:
24:ff:39:16:28:59:c5:85:a9:19:d7:ac:bc:5b:1d:0b:74:3a:
c6:dc:76:79:77:76:7a:61:63:46:7c:99:0b:8f:c4:37:46:d8:
bf:51:37:45:c8:1b:c0:dc:60:75:07:50:be:78:26:4d:1e:88:
a3:cb:9d:cd:da:aa:cc:87:88:5b:dc:c6:85:9f:ab:ff:b5:70:
59:87:1a:04:4c:2b:79:90:5c:34:c8:a7:12:67:af:50:97:1e:
e5:cc:6b:ea:1a:2e:e8:ef:9e:61:e6:a0:81:86:7e:93:9b:5c:
3d:c2:30:b9:25:f0:2f:58:64:6b:1c:b3:0f:7a:ae:37:ac:74:
a2:e7:d0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 02:09:15 2024 by rpki-client on console-fra.rpki-client.org