Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/zN-ix2qvaikqVPZ2hvaxQIOHJug.roa
File: zN-ix2qvaikqVPZ2hvaxQIOHJug.roa (raw, json)
Hash identifier: RPr6nywouYPt03yWgj3dQic8/BE30DIEIiQ81CCoM6Y=
Subject key identifier: CC:DF:A2:C7:6A:AF:6A:29:2A:54:F6:76:86:F6:B1:40:83:87:26:E8
Certificate issuer: /CN=72f7f1476ff8291efaf2849cd3f214672267b001
Certificate serial: 018CC802AB0355AF08167A8768C127A0B6F1
Authority key identifier: 72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/zN-ix2qvaikqVPZ2hvaxQIOHJug.roa
Signing time: Tue 02 Jan 2024 02:31:07 +0000
ROA not before: Tue 02 Jan 2024 02:31:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15879
IP address blocks: 193.104.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:ab:03:55:af:08:16:7a:87:68:c1:27:a0:b6:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f7f1476ff8291efaf2849cd3f214672267b001
Validity
Not Before: Jan 2 02:31:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ccdfa2c76aaf6a292a54f67686f6b140838726e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:70:00:59:a5:9e:92:6b:64:98:ae:ba:14:25:
5e:9d:45:b2:41:56:ca:3d:32:12:bf:e4:8e:b8:56:
90:e2:87:3d:90:94:6d:b4:3a:b1:e4:81:d6:15:1d:
ed:be:2e:22:c5:41:8c:b1:26:41:3b:19:78:a7:6f:
1b:fc:6d:42:18:1a:8a:32:2f:04:14:f4:46:74:80:
49:99:cc:a2:4a:9b:a8:a3:24:e5:40:a2:7f:08:e7:
3e:4a:63:f3:c8:52:ae:2b:96:69:4b:20:4c:ee:c4:
a4:fe:c0:17:dc:73:38:f6:86:6b:73:3c:d3:0e:db:
23:ed:88:4a:4e:65:7d:17:5c:2b:4e:46:f6:6a:38:
52:d3:be:aa:06:5b:fe:c9:af:75:c9:95:9f:26:78:
09:1f:d6:86:b1:cb:f3:b8:c5:27:32:33:b2:6e:9c:
11:bf:f7:c2:01:59:28:c2:6b:82:58:06:54:0f:a5:
d7:50:bf:70:c7:f0:bc:04:02:57:b0:78:29:62:c9:
be:b9:33:41:09:60:45:e1:f0:b0:45:4c:38:d8:f9:
12:78:ae:b2:42:b8:08:54:26:5d:54:7f:72:7b:93:
62:7d:b1:cc:06:c5:d7:ca:c8:dd:15:b3:04:3f:fa:
49:29:88:eb:9a:0c:41:6a:55:a0:42:b0:0c:3a:c8:
4c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DF:A2:C7:6A:AF:6A:29:2A:54:F6:76:86:F6:B1:40:83:87:26:E8
X509v3 Authority Key Identifier:
keyid:72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/zN-ix2qvaikqVPZ2hvaxQIOHJug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.111.0/24
Signature Algorithm: sha256WithRSAEncryption
55:11:d6:0c:de:f6:c9:a4:60:eb:48:72:5c:28:48:7d:cc:90:
86:00:16:d3:eb:aa:df:27:46:4e:5a:7c:97:d1:5b:ca:65:fd:
37:32:ef:9b:f4:d4:ae:d2:a0:39:b3:a3:59:ba:89:be:59:be:
a1:37:ea:96:f3:93:3b:97:c9:cb:b5:71:d1:11:9b:00:de:04:
e1:47:06:1d:18:42:1c:eb:3f:75:a4:09:5b:55:b8:68:a0:57:
a3:87:70:01:95:2b:99:75:f2:a7:c3:3d:90:ab:cb:23:a5:20:
15:d0:c0:d2:9b:79:4e:bf:ab:ed:67:a2:1f:cf:7d:1b:95:57:
4a:59:53:88:85:f3:03:e4:3a:a2:6f:fc:50:3f:fb:a8:f8:4d:
25:f6:9b:f9:59:a5:ae:59:f7:6f:28:e3:a3:64:10:15:13:1b:
0a:5c:ca:3b:fc:d5:b6:f7:41:03:fb:27:37:2b:f1:98:ea:c2:
27:07:d7:39:5a:71:50:8d:d2:de:42:15:0b:d9:6f:87:45:2d:
fe:b4:ea:17:40:0b:94:db:0a:e2:e2:76:1f:e7:d5:d7:38:14:
e8:48:b3:00:25:7a:b8:a1:e3:3b:f2:57:3b:64:1c:d4:b8:cb:
0d:2e:7c:59:92:6d:cf:43:da:a3:eb:53:15:85:33:43:83:25:
7f:e2:89:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:47:00 2024 by rpki-client on console-ams.rpki-client.org