Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Zol7mJzaqao5kdoBN78XY7mpZaY.roa
File: Zol7mJzaqao5kdoBN78XY7mpZaY.roa (raw, json)
Hash identifier: leLar2UZYH7kjDgztQTDqDDdDoNObvxLJNtwMUVHM2Y=
Subject key identifier: 66:89:7B:98:9C:DA:A9:AA:39:91:DA:01:37:BF:17:63:B9:A9:65:A6
Certificate issuer: /CN=09f93d62beb75bb4232dcd052d270276d36f8573
Certificate serial: 018CC801927C71E9BB5128D1CE013E5C08BA
Authority key identifier: 09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Zol7mJzaqao5kdoBN78XY7mpZaY.roa
Signing time: Tue 02 Jan 2024 02:29:55 +0000
ROA not before: Tue 02 Jan 2024 02:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.141.193.0/24 maxlen: 24
2a04:ac0:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:92:7c:71:e9:bb:51:28:d1:ce:01:3e:5c:08:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f93d62beb75bb4232dcd052d270276d36f8573
Validity
Not Before: Jan 2 02:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66897b989cdaa9aa3991da0137bf1763b9a965a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:31:14:4a:d2:b5:67:3c:d2:1e:1d:d0:d2:d7:
ca:34:29:f0:a6:52:25:0c:85:31:62:bb:af:e4:e9:
79:cf:ac:59:48:8e:34:24:65:0f:c6:c9:3e:1a:65:
d2:1a:86:b1:45:54:37:d4:7b:55:ed:0b:0a:aa:f0:
ac:7f:2b:23:45:84:80:4f:2b:d0:9f:25:5e:b1:76:
0b:58:38:96:fb:ea:5c:f4:fe:42:a3:2b:8d:7a:1f:
7b:8a:0f:aa:6c:f2:29:34:e0:96:31:5e:e2:89:6c:
da:eb:5c:b0:06:59:4f:9e:24:a3:21:6c:77:47:71:
c3:6d:07:f0:06:e1:6d:60:bb:d3:7c:55:a0:bc:a7:
91:76:a3:81:bc:fc:d8:11:b4:3f:d4:e0:ee:bd:a2:
be:2d:21:af:f6:35:a5:c8:bf:4d:8a:7b:bc:28:a9:
30:a3:d1:94:33:db:46:2e:8f:be:d0:a1:dd:ab:ca:
47:ee:19:d7:15:da:8e:03:bd:6b:37:de:57:35:3d:
7d:03:b0:0b:7b:03:84:87:e4:14:c7:f4:bd:cf:77:
4f:06:4c:81:89:71:a6:c4:e9:5d:b6:1a:3d:5a:d6:
7f:9c:7c:5a:1e:33:1c:63:d8:0e:73:a9:84:13:65:
a2:9e:7f:e0:f8:1e:42:25:19:eb:30:e5:95:42:6f:
b1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:89:7B:98:9C:DA:A9:AA:39:91:DA:01:37:BF:17:63:B9:A9:65:A6
X509v3 Authority Key Identifier:
keyid:09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Zol7mJzaqao5kdoBN78XY7mpZaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.193.0/24
IPv6:
2a04:ac0:2::/48
Signature Algorithm: sha256WithRSAEncryption
71:5f:43:2c:e6:64:28:c8:54:25:21:10:87:14:e6:c3:38:cd:
39:bb:62:3d:24:bc:c8:3a:9c:86:a4:a1:3e:76:a6:68:67:8b:
34:7a:c1:9f:93:2e:ad:76:07:22:33:79:19:d7:41:95:d8:7d:
e2:25:69:3c:e4:22:2d:43:7d:e4:0d:75:7f:25:ea:a4:c8:82:
11:1a:33:1b:25:85:50:2b:ce:ba:07:97:1a:b9:51:0e:92:e6:
2a:31:3d:28:2c:5c:10:f5:2c:9f:23:0e:92:97:8d:e0:6d:e5:
4a:01:e7:9b:d2:73:ce:6d:3f:f5:41:c0:04:b9:e9:e1:51:bf:
bd:50:42:1c:16:9c:04:99:b3:3f:98:1f:48:78:85:87:17:34:
96:0a:84:d0:48:50:3f:55:26:3a:ac:37:29:35:c3:8e:c2:11:
2b:0f:4a:6f:a3:ed:5e:7b:da:aa:ed:6c:36:7b:15:37:65:df:
80:0f:2a:52:3d:97:69:47:75:4e:d0:77:99:fc:ed:64:e3:b9:
6c:6c:4e:1f:f1:f3:c3:d9:06:c0:7a:08:fd:fa:4a:5b:98:05:
bf:75:af:14:a3:2a:d4:30:9d:0c:83:70:43:1d:fc:b9:84:8d:
0a:84:94:1e:0e:a6:a8:f4:2c:4b:31:c6:e7:1e:30:db:cc:a8:
c9:1a:88:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:50:50 2024 by rpki-client on console-fra.rpki-client.org