Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/ZhyFAG-m6OoEpbGtzF_pFYvQeFA.roa
File: ZhyFAG-m6OoEpbGtzF_pFYvQeFA.roa (raw, json)
Hash identifier: FCUDtdF68MBHSIxqoq2oSJ6SNLzgVm8q7csyjVeOM5c=
Subject key identifier: 66:1C:85:00:6F:A6:E8:EA:04:A5:B1:AD:CC:5F:E9:15:8B:D0:78:50
Certificate issuer: /CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Certificate serial: 018CC794BE51D086E59FECC5F0C865385183
Authority key identifier: DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/ZhyFAG-m6OoEpbGtzF_pFYvQeFA.roa
Signing time: Tue 02 Jan 2024 00:31:03 +0000
ROA not before: Tue 02 Jan 2024 00:31:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205399
IP address blocks: 193.106.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:be:51:d0:86:e5:9f:ec:c5:f0:c8:65:38:51:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Validity
Not Before: Jan 2 00:31:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=661c85006fa6e8ea04a5b1adcc5fe9158bd07850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a8:bc:c2:90:c9:b6:11:9f:c1:44:6a:1f:38:
d9:5f:58:dd:5a:81:07:74:7a:21:f7:b1:70:ca:8b:
99:7e:fa:01:db:a0:94:b6:c0:95:ce:69:d0:15:ac:
64:0a:7c:47:0e:56:f4:b6:12:0d:e3:81:3f:2c:5d:
f4:c3:be:17:89:9b:f0:ad:86:fd:54:91:cf:85:9e:
39:77:e0:1b:eb:ce:05:b0:90:0b:6b:8e:fb:e8:7e:
3c:0d:01:99:77:ed:e8:09:aa:ca:01:4a:ae:62:c8:
84:3f:1f:f4:ce:52:32:48:bb:a1:58:68:ec:73:20:
01:fd:6d:2a:7e:78:45:a8:ba:13:e5:10:d6:ce:3e:
05:6b:89:6a:99:01:59:ac:53:d8:58:45:ef:52:76:
f2:23:05:e4:7e:b1:b4:80:26:b6:30:68:01:fa:29:
d4:67:7b:88:88:c4:54:f2:7c:6f:ca:2d:9c:bd:fa:
85:9f:92:b9:71:9b:d5:a7:6c:2b:21:5c:68:fd:8b:
c3:94:65:f0:68:24:eb:05:ba:cd:81:b4:55:5c:2a:
d4:9d:a9:a5:25:5b:7f:35:cb:ba:89:4d:ca:8c:ce:
c8:1f:ad:14:c1:78:b9:03:24:21:31:0d:5e:e6:ac:
bc:33:ed:20:00:4f:bb:37:ae:5a:a1:cb:48:de:4a:
4b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:1C:85:00:6F:A6:E8:EA:04:A5:B1:AD:CC:5F:E9:15:8B:D0:78:50
X509v3 Authority Key Identifier:
keyid:DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/ZhyFAG-m6OoEpbGtzF_pFYvQeFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.188.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:45:08:2b:a0:ed:ee:e6:8d:0b:69:46:d7:42:e5:77:5f:cc:
c6:d6:92:ca:68:9c:9a:0f:45:d4:c7:d6:65:f4:c1:b7:53:74:
a8:fa:83:92:5a:02:57:fe:65:2a:eb:e5:b2:89:d4:53:15:0d:
9c:05:26:51:e6:5e:b9:15:92:06:64:00:1a:15:d9:8f:3c:4f:
d5:97:1f:0b:e4:1e:c1:b6:86:a8:1f:5c:d7:61:f4:1f:07:9d:
c9:a2:68:d3:cf:bd:be:8f:12:07:d6:f8:a4:26:ba:83:88:18:
a1:ac:b8:f0:c9:a9:f4:55:6b:b6:6d:de:88:dd:90:1a:8d:bd:
68:d9:3e:09:36:9f:60:b1:85:83:bb:68:ed:cd:89:fc:13:6b:
6f:8e:e7:e5:4f:77:08:d7:47:e7:d4:ad:56:00:88:ef:b6:bb:
31:65:8a:a9:e1:62:da:18:55:66:81:7f:49:ce:fe:d4:f2:4e:
2b:4a:3a:16:6c:82:c3:4f:dc:b5:82:7e:3e:f2:89:f6:dd:d6:
92:05:da:b4:62:54:f3:bf:97:7e:8e:06:fa:e2:b3:c2:1d:dc:
9d:e4:e5:ce:de:2b:6a:0d:f8:e8:ae:ae:7a:61:17:32:38:73:
83:7e:4d:62:23:b1:e9:6a:e6:59:42:1e:c6:e9:48:a8:81:49:
88:78:38:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 17:44:27 2024 by rpki-client on console-fra.rpki-client.org