Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/zdrKQtAt5UnO1SC8RhT72esUeXY.roa
File: zdrKQtAt5UnO1SC8RhT72esUeXY.roa (raw, json)
Hash identifier: 6QNnJjtN+OnawcorEmOUI8VRSxPfRdcAKqMgR0Uv36M=
Subject key identifier: CD:DA:CA:42:D0:2D:E5:49:CE:D5:20:BC:46:14:FB:D9:EB:14:79:76
Certificate issuer: /CN=f9e00abe184a625b76f8d1fbceef817aaf71415b
Certificate serial: 018EA9E275010A7089B80FF9E7DB7A45CEF7
Authority key identifier: F9:E0:0A:BE:18:4A:62:5B:76:F8:D1:FB:CE:EF:81:7A:AF:71:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/zdrKQtAt5UnO1SC8RhT72esUeXY.roa
Signing time: Thu 04 Apr 2024 16:12:54 +0000
ROA not before: Thu 04 Apr 2024 16:12:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 93.183.68.0/24 maxlen: 24
93.183.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 May 2024 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a9:e2:75:01:0a:70:89:b8:0f:f9:e7:db:7a:45:ce:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9e00abe184a625b76f8d1fbceef817aaf71415b
Validity
Not Before: Apr 4 16:12:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cddaca42d02de549ced520bc4614fbd9eb147976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:06:ff:04:1a:01:5f:a2:70:87:02:7c:13:86:
67:d8:c7:9e:38:45:cb:90:2f:4a:8f:94:da:cd:d5:
2b:71:fb:54:64:87:26:9a:f0:6a:30:7c:fc:71:17:
8a:7b:6e:85:30:ca:60:d5:43:c4:fc:93:35:76:b2:
f4:b5:9f:6e:61:d6:c3:f4:e6:8e:7c:5c:74:35:be:
59:35:ec:5c:68:4e:2a:ab:69:f2:e8:ea:e3:06:b7:
6c:3c:41:7e:e0:f1:be:99:0b:df:92:78:71:86:f0:
b9:a4:32:8a:6a:bb:fd:8c:93:fe:da:3a:46:b7:92:
25:f9:ae:be:40:7f:7d:fe:1d:d5:cc:d1:a3:50:01:
d2:0a:da:ec:8a:28:52:78:98:67:04:f3:2b:70:64:
fb:ef:25:ed:a7:e1:81:cd:cf:89:31:5d:c4:a7:a1:
d5:5c:2c:63:6d:18:8f:4b:1d:42:36:31:f4:54:da:
c5:4f:d2:51:e8:ea:70:8b:55:01:53:72:17:30:26:
54:60:25:bc:1b:7e:52:5a:57:7a:1c:ac:e1:e7:35:
c7:c3:d8:9f:f5:69:ee:49:31:c0:9d:71:8d:ee:17:
9c:44:52:20:3d:9f:e7:6d:7a:97:b2:62:30:ee:e9:
16:33:57:02:41:ce:51:ff:e7:88:76:76:0a:00:52:
ae:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DA:CA:42:D0:2D:E5:49:CE:D5:20:BC:46:14:FB:D9:EB:14:79:76
X509v3 Authority Key Identifier:
keyid:F9:E0:0A:BE:18:4A:62:5B:76:F8:D1:FB:CE:EF:81:7A:AF:71:41:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/zdrKQtAt5UnO1SC8RhT72esUeXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.183.68.0/23
Signature Algorithm: sha256WithRSAEncryption
65:5d:c7:65:00:05:6a:47:b1:1b:68:a9:ae:2e:f0:43:c4:a9:
1c:f9:c2:26:0e:9e:04:b2:b7:3f:1c:0f:82:20:0d:39:fa:2f:
04:7d:1a:7e:16:e3:24:fc:4e:4a:67:a1:1f:72:ef:67:b7:70:
cb:70:cf:13:8a:79:e6:45:2d:f6:75:e4:22:22:1f:4f:ae:87:
40:56:a7:52:72:c6:ad:23:37:08:50:de:38:cf:8b:e5:72:19:
7d:2a:18:30:03:1f:ad:a3:f2:4b:50:49:b1:0b:78:ec:da:e0:
7f:99:03:10:32:06:12:4b:de:d0:19:d2:74:54:03:e0:7e:ef:
0e:be:25:e9:75:b5:37:18:7d:21:50:4c:1a:b4:fa:3e:62:12:
92:a5:51:bc:f6:cb:ea:b7:28:a6:fe:52:92:f6:c2:13:a3:c2:
be:23:72:a4:52:58:bf:6c:0f:01:b1:5c:fb:8e:38:24:7e:82:
79:ce:6d:1a:43:a0:c5:af:44:06:8f:38:16:f9:d4:8a:2a:88:
6c:66:75:0e:8e:b9:de:e0:6e:00:56:fa:59:b4:14:ad:24:ff:
b4:a9:d0:79:7b:e4:64:47:87:c0:1c:ad:56:02:2b:47:8d:3f:
fc:49:bc:7c:06:e5:43:18:8d:cb:92:9f:f6:0f:cf:f4:0c:9b:
85:8c:c5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 09:08:08 2024 by rpki-client on console-ams.rpki-client.org