Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a4d97c-214f-4e58-8a1b-9b7ba2515607/1/wzni65xEvs8kN0nfJW4ufeW5IzY.roa
File: wzni65xEvs8kN0nfJW4ufeW5IzY.roa (raw, json)
Hash identifier: Px/XjVWCTyQqtwE/6XTDh7kpdoG4oYdOrz9Fyz3Z/ns=
Subject key identifier: C3:39:E2:EB:9C:44:BE:CF:24:37:49:DF:25:6E:2E:7D:E5:B9:23:36
Certificate issuer: /CN=8a6706b33960e1d15fd1770a298e0a555a41a809
Certificate serial: 018CCA96C7FFBC76B1CAAD4ACB560C20DDF7
Authority key identifier: 8A:67:06:B3:39:60:E1:D1:5F:D1:77:0A:29:8E:0A:55:5A:41:A8:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imcGszlg4dFf0XcKKY4KVVpBqAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a4d97c-214f-4e58-8a1b-9b7ba2515607/1/wzni65xEvs8kN0nfJW4ufeW5IzY.roa
Signing time: Tue 02 Jan 2024 14:32:08 +0000
ROA not before: Tue 02 Jan 2024 14:32:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209492
IP address blocks: 193.33.40.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/a4d97c-214f-4e58-8a1b-9b7ba2515607/1/imcGszlg4dFf0XcKKY4KVVpBqAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/a4d97c-214f-4e58-8a1b-9b7ba2515607/1/imcGszlg4dFf0XcKKY4KVVpBqAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/imcGszlg4dFf0XcKKY4KVVpBqAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:96:c7:ff:bc:76:b1:ca:ad:4a:cb:56:0c:20:dd:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6706b33960e1d15fd1770a298e0a555a41a809
Validity
Not Before: Jan 2 14:32:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c339e2eb9c44becf243749df256e2e7de5b92336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a0:04:6e:26:14:44:fa:44:c3:a2:93:71:6d:
a2:8e:90:2e:34:a8:9f:4e:c1:1b:b0:ea:46:b9:28:
b9:23:fa:81:70:fc:fe:63:ce:cf:2c:88:d5:c1:c6:
82:ca:43:fa:5b:bd:56:0e:aa:68:a0:77:11:e6:97:
3b:87:1a:da:ca:f8:e8:4b:80:37:30:b1:70:4e:d2:
8d:64:1e:53:be:d8:c7:75:84:7b:5c:b6:23:08:d6:
f4:fc:5a:5b:e3:20:47:a3:06:24:0c:5a:2a:02:d3:
36:c0:d2:14:0d:97:89:f0:a6:15:fe:96:36:e2:a5:
ed:36:e7:a3:40:44:05:75:7b:f0:27:40:c2:5b:a6:
1c:66:b7:bd:b4:37:6a:f4:51:6a:e5:ed:5f:bb:c4:
75:7b:e6:e2:22:d2:cc:6f:a3:bc:5b:26:e1:37:3a:
a5:c8:f4:d2:c2:1b:3e:dd:e5:14:24:98:91:78:3b:
91:8a:61:75:9c:45:c1:eb:f4:79:50:ca:15:dd:e2:
22:1c:b5:47:06:3f:22:6a:80:09:56:f4:14:10:56:
86:29:1b:8e:fb:63:02:53:4a:dd:b7:57:0a:7c:0d:
22:e3:8e:2a:1a:57:38:10:5f:05:89:44:ba:e4:60:
d4:56:2d:38:dd:fd:2a:4a:ab:7e:ae:a1:72:4b:fc:
4b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:39:E2:EB:9C:44:BE:CF:24:37:49:DF:25:6E:2E:7D:E5:B9:23:36
X509v3 Authority Key Identifier:
keyid:8A:67:06:B3:39:60:E1:D1:5F:D1:77:0A:29:8E:0A:55:5A:41:A8:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imcGszlg4dFf0XcKKY4KVVpBqAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a4d97c-214f-4e58-8a1b-9b7ba2515607/1/wzni65xEvs8kN0nfJW4ufeW5IzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a4d97c-214f-4e58-8a1b-9b7ba2515607/1/imcGszlg4dFf0XcKKY4KVVpBqAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.40.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:80:65:8f:e6:0c:2b:3e:87:c6:c2:3d:a8:67:99:71:0d:a2:
da:26:6c:c3:b9:b6:85:77:23:99:cb:2f:db:68:99:c5:96:72:
a0:51:d2:ff:a0:d4:07:8c:69:34:51:0a:ba:72:85:5e:30:5e:
33:66:65:96:46:ef:66:83:51:11:c5:0f:11:ac:b5:a0:c5:a9:
6e:d8:ca:9a:c7:b6:fa:78:84:38:fb:d5:27:4c:55:17:40:c7:
2b:97:70:6a:46:6e:f0:13:0e:3c:0a:4a:eb:08:83:4b:70:ef:
ab:99:e7:86:6c:17:aa:8d:4e:d1:de:23:cb:a4:95:a6:9f:c5:
f0:9f:7c:b7:80:5b:cf:13:60:49:5d:46:e2:b5:39:0c:9f:8f:
f2:0b:24:0f:90:ea:b4:c3:6c:9f:63:03:51:c0:f1:91:77:56:
4b:e0:84:83:97:31:9a:07:ea:ad:7d:82:87:a2:09:d2:be:5d:
ba:fe:80:97:c3:62:41:fd:4f:cd:bc:53:b0:dc:58:8c:12:ee:
65:59:6d:a5:34:dc:9c:e4:c9:09:ca:97:ef:65:78:9a:36:29:
c1:51:ed:65:7c:f1:e3:7a:56:ab:1d:1f:a5:be:17:c1:8f:c1:
8d:99:a6:6d:dd:a3:19:73:74:a8:15:c8:63:df:75:04:e4:4a:
00:de:fa:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 20:29:29 2024 by rpki-client on console-ams.rpki-client.org