Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/7ZFsYZFbe0cnijOSWcniGtb8QI0.roa
File: 7ZFsYZFbe0cnijOSWcniGtb8QI0.roa (raw, json)
Hash identifier: RtsQu4mmc72MHXjy9ZMdAd+AnBIJb9fsOY+w7kPyjsU=
Subject key identifier: ED:91:6C:61:91:5B:7B:47:27:8A:33:92:59:C9:E2:1A:D6:FC:40:8D
Certificate issuer: /CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Certificate serial: 018CC501038909614D1ACDC8A95576383581
Authority key identifier: C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/7ZFsYZFbe0cnijOSWcniGtb8QI0.roa
Signing time: Mon 01 Jan 2024 12:30:27 +0000
ROA not before: Mon 01 Jan 2024 12:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33965
IP address blocks: 193.73.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:03:89:09:61:4d:1a:cd:c8:a9:55:76:38:35:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Validity
Not Before: Jan 1 12:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed916c61915b7b47278a339259c9e21ad6fc408d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:42:53:d6:6c:5b:75:b0:b4:f6:22:8f:85:d0:
93:f3:a9:3b:71:17:19:9c:ea:bd:a3:91:f3:ea:eb:
db:8b:4c:cf:4d:b4:1a:74:28:71:25:0b:f3:cd:5e:
01:e4:d1:f4:65:71:29:54:82:78:d2:94:bf:22:df:
d2:ae:3e:bf:1c:8b:a0:20:7c:6b:90:93:f5:2f:09:
a2:87:fa:d6:be:22:18:28:f5:89:7b:8d:65:bd:c4:
4b:1a:5f:e9:c9:19:9f:02:c7:86:06:80:8a:75:ce:
fc:70:66:64:4d:2f:d3:29:2a:a6:c7:ea:fc:3a:13:
fb:de:6d:5a:c6:58:c5:e2:ec:81:81:1d:6c:c5:14:
fe:08:5a:48:36:4e:4a:d7:19:ab:ad:ed:27:11:71:
7c:35:fc:12:d5:e2:5e:35:81:9b:50:20:04:ad:2e:
b3:e8:13:0e:d5:a6:3b:d3:e9:c1:a6:45:72:09:96:
b6:c3:fd:9f:00:fc:85:a2:c5:fe:d6:00:dd:aa:1c:
31:e2:b9:2f:bc:fe:8f:d1:47:69:ea:eb:33:72:6e:
10:24:c9:76:de:dd:f6:f9:05:ef:ef:96:02:a7:8c:
2d:c4:20:92:4f:b7:ce:40:ea:4e:86:f5:46:16:35:
e9:5b:c9:c7:1a:a8:60:f3:72:d4:00:d8:80:fd:2f:
f9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:91:6C:61:91:5B:7B:47:27:8A:33:92:59:C9:E2:1A:D6:FC:40:8D
X509v3 Authority Key Identifier:
keyid:C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/7ZFsYZFbe0cnijOSWcniGtb8QI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.73.114.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:8a:82:2b:83:f8:cc:57:ee:93:a9:6f:6f:87:2a:97:9e:bb:
fb:ce:16:7a:3c:2c:04:b4:d3:bf:ae:3d:0e:e5:37:f6:6a:19:
38:ff:ce:68:8a:e6:ca:17:95:53:3d:67:4e:c7:16:df:9d:4a:
e4:5d:e5:7f:d9:22:d7:f6:ef:3c:31:5b:38:65:66:64:2a:cd:
eb:ac:3d:3e:94:f7:bb:77:03:86:57:67:84:50:84:be:f3:c9:
f3:24:d5:12:cd:7f:79:dc:67:c6:43:9f:e7:64:63:d2:08:3d:
fc:41:8d:45:d1:3f:80:96:4b:ba:27:9c:7d:c0:ed:b8:7b:e3:
a6:14:7e:b5:3a:25:39:4a:62:66:7e:27:d7:45:38:c7:38:ad:
6f:a8:8a:13:b0:dd:d2:3b:58:18:c6:96:b0:19:55:a7:e0:f3:
94:b4:c9:b6:f6:ed:ab:02:e2:19:a4:a7:36:f9:c5:5f:e1:02:
cb:6f:1e:65:8c:4e:36:40:cc:11:0d:20:8d:89:02:e6:a5:2e:
c9:8a:ee:ac:9d:30:45:ab:98:a4:86:f3:98:36:9f:71:12:1a:
8f:db:37:db:4d:fe:b9:a4:c9:1b:aa:2d:de:d2:d2:46:8f:ad:
42:e8:16:d1:39:a9:3c:76:04:15:31:d6:24:05:5c:92:8c:27:
32:8a:db:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:13:02 2024 by rpki-client on console-ams.rpki-client.org