Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/Zx-Vatpwk_41SS3--aemZU8UtlI.roa
File: Zx-Vatpwk_41SS3--aemZU8UtlI.roa (raw, json)
Hash identifier: qxfQitQ8bzMJWzFohQokBxKPT3aKHpYQStqn3TcZYcg=
Subject key identifier: 67:1F:95:6A:DA:70:93:FE:35:49:2D:FE:F9:A7:A6:65:4F:14:B6:52
Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Certificate serial: 018FB6E17FE71FA9137CC6CDE2455CC73C04
Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/Zx-Vatpwk_41SS3--aemZU8UtlI.roa
Signing time: Sun 26 May 2024 21:49:42 +0000
ROA not before: Sun 26 May 2024 21:49:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63018
IP address blocks: 193.105.95.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b6:e1:7f:e7:1f:a9:13:7c:c6:cd:e2:45:5c:c7:3c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Validity
Not Before: May 26 21:49:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=671f956ada7093fe35492dfef9a7a6654f14b652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ec:c7:88:a2:0f:28:d3:7a:d5:4a:03:ce:72:
aa:df:62:0c:a0:0c:cf:03:19:e1:fb:61:98:68:e0:
18:fa:5c:63:f5:e1:57:1b:05:db:66:1e:62:6a:6b:
0d:7e:d8:b9:23:1e:16:08:ef:fd:70:89:b7:f2:f1:
dd:eb:44:ea:20:74:b4:f1:1d:9e:c1:0d:0b:33:48:
6b:44:ac:7c:da:cb:95:f2:41:af:e4:d5:e4:d0:3c:
3a:70:db:73:e9:3f:b3:5a:f6:78:4c:38:5d:6e:09:
c1:24:52:b5:d3:6f:17:b5:82:ea:50:ed:93:f4:55:
21:e5:eb:6e:6a:f0:d9:9c:dc:eb:68:5c:2c:1f:f2:
e5:fc:23:a4:db:ba:ec:ed:c5:a7:05:35:dd:87:94:
5f:47:26:35:c0:a5:47:78:92:d4:6e:7a:fc:e5:88:
db:88:39:80:62:38:23:48:91:e5:af:c7:af:02:f5:
49:09:10:47:d2:25:92:fb:b3:1c:a9:22:98:fc:2a:
77:8e:ab:48:5e:cf:9b:8d:5a:3b:d2:db:7f:a5:06:
a8:e2:78:51:03:17:0b:f4:5c:94:00:ea:4d:5c:ab:
f8:26:33:6e:f5:e1:fc:44:da:48:dd:ec:64:f9:92:
54:9a:9b:d9:6c:47:24:b0:60:ce:c2:b6:4e:1c:25:
33:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1F:95:6A:DA:70:93:FE:35:49:2D:FE:F9:A7:A6:65:4F:14:B6:52
X509v3 Authority Key Identifier:
keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/Zx-Vatpwk_41SS3--aemZU8UtlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.95.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:6d:72:d7:f5:a4:9e:44:80:d4:88:32:89:24:c3:23:c7:fc:
9d:27:5c:d4:5f:9a:11:e3:9e:de:be:41:47:8b:8a:90:a0:e0:
db:fe:be:d7:12:4b:56:ae:f5:54:c7:f4:bf:36:86:f9:ea:71:
9d:2c:12:d6:8c:df:b7:2a:6c:36:51:36:f0:3c:69:31:15:ec:
56:e2:92:4f:c4:4b:f1:82:b9:eb:1e:14:ca:bf:d1:95:9a:df:
e2:e1:be:27:19:18:63:c3:ba:a4:55:c6:27:59:2e:d8:a8:c7:
e8:c3:77:18:a7:5b:30:99:e0:29:ef:8b:45:05:88:50:68:da:
1d:d7:a6:50:5d:50:4a:67:6b:e2:7d:a3:81:99:ec:90:37:32:
cc:72:7f:07:2c:5c:57:d4:bc:b4:33:17:21:ce:1c:04:e9:e2:
34:af:d0:b6:e7:42:8c:b7:fd:1e:da:8d:23:7f:7d:75:2a:d3:
5e:4f:ba:f9:31:4f:3c:d2:64:53:2a:1b:9f:05:c6:13:8c:87:
d9:00:36:e0:3b:a6:05:27:62:7d:1f:ad:8e:01:5a:11:cd:f2:
8e:08:fe:da:fe:b0:15:bf:ed:30:23:08:2f:ed:a5:b9:c1:b8:
a0:4a:53:52:ee:ac:8a:a6:e6:e9:38:dd:5b:ac:8e:f7:cf:dd:
63:a6:ea:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY+24X/nH6kTfMbN4kVcxzwEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkYjY3YzVjN2ZhN2ZlMjQ5MmVlYzM3Y2Y0Mjc2NDJiNzFk
NDI1YjAwHhcNMjQwNTI2MjE0OTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzFmOTU2YWRhNzA5M2ZlMzU0OTJkZmVmOWE3YTY2NTRmMTRiNjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArezHiKIPKNN61UoDznKq32IMoAzP
Axnh+2GYaOAY+lxj9eFXGwXbZh5iamsNfti5Ix4WCO/9cIm38vHd60TqIHS08R2e
wQ0LM0hrRKx82suV8kGv5NXk0Dw6cNtz6T+zWvZ4TDhdbgnBJFK1028XtYLqUO2T
9FUh5etuavDZnNzraFwsH/Ll/COk27rs7cWnBTXdh5RfRyY1wKVHeJLUbnr85Yjb
iDmAYjgjSJHlr8evAvVJCRBH0iWS+7McqSKY/Cp3jqtIXs+bjVo70tt/pQao4nhR
AxcL9FyUAOpNXKv4JjNu9eH8RNpI3exk+ZJUmpvZbEcksGDOwrZOHCUzuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGcflWracJP+NUkt/vmnpmVPFLZSMB8GA1UdIwQY
MBaAFA22fFx/p/4kku7DfPQnZCtx1CWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjkt
YjAzZGY5OTZlNDgxLzEvWngtVmF0cHdrXzQxU1MzLS1hZW1aVThVdGxJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjktYjAzZGY5OTZlNDgx
LzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWlfMA0G
CSqGSIb3DQEBCwUAA4IBAQCjbXLX9aSeRIDUiDKJJMMjx/ydJ1zUX5oR457evkFH
i4qQoODb/r7XEktWrvVUx/S/Nob56nGdLBLWjN+3Kmw2UTbwPGkxFexW4pJPxEvx
grnrHhTKv9GVmt/i4b4nGRhjw7qkVcYnWS7YqMfow3cYp1swmeAp74tFBYhQaNod
16ZQXVBKZ2vifaOBmeyQNzLMcn8HLFxX1Ly0MxchzhwE6eI0r9C250KMt/0e2o0j
f311KtNeT7r5MU880mRTKhufBcYTjIfZADbgO6YFJ2J9H62OAVoRzfKOCP7a/rAV
v+0wIwgv7aW5wbigSlNS7qyKpubpON1brI73z91jpurM
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:27:11 2024 by rpki-client on console-ams.rpki-client.org