Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/zii3c9V3Y4MbPg-KAsktXSPW7Vk.roa
File: zii3c9V3Y4MbPg-KAsktXSPW7Vk.roa (raw, json)
Hash identifier: /Y6NszcF4GPPFg3tJ1xlrOHoS8aqZJSj+Z1SnXjD/6U=
Subject key identifier: CE:28:B7:73:D5:77:63:83:1B:3E:0F:8A:02:C9:2D:5D:23:D6:ED:59
Certificate issuer: /CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Certificate serial: 01922F229627C3E374CB0504878EB6E7E351
Authority key identifier: 2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/zii3c9V3Y4MbPg-KAsktXSPW7Vk.roa
Signing time: Thu 26 Sep 2024 16:20:48 +0000
ROA not before: Thu 26 Sep 2024 16:20:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60223
IP address blocks: 193.178.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2f:22:96:27:c3:e3:74:cb:05:04:87:8e:b6:e7:e3:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Validity
Not Before: Sep 26 16:20:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce28b773d57763831b3e0f8a02c92d5d23d6ed59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a6:c0:8f:e2:65:30:c2:96:da:a0:1b:02:ed:
5f:30:70:ba:fd:17:51:9a:87:4a:e1:7e:63:d4:c1:
7c:5c:36:4f:dd:29:bf:ee:05:3d:e3:6c:84:88:7a:
63:f2:ce:4d:71:99:29:66:a8:ed:fd:6a:41:be:51:
8d:ae:2a:a3:2a:7b:57:40:a4:11:44:1b:2c:b9:1b:
30:d6:32:45:a0:fb:e2:09:38:73:87:86:35:d5:69:
82:2f:5b:2c:41:f9:e7:e0:bf:29:48:dd:42:1f:24:
da:b8:7e:71:d5:6a:e6:f9:ad:c7:d0:d5:0d:8c:3b:
54:9e:6d:bb:03:71:6a:a4:bd:54:e9:18:a8:d8:e3:
9a:cb:b9:ff:5e:98:24:12:56:b2:20:81:4c:56:b8:
ec:af:19:c2:9d:3d:1b:8f:4f:70:6c:6a:ce:f6:58:
59:89:51:58:02:f0:db:1b:90:a9:8a:1a:e6:88:78:
ac:a3:81:4d:63:8f:a8:97:5a:14:a1:20:14:f8:29:
a2:59:93:85:37:a0:77:3e:3d:2e:0b:c3:54:99:be:
0b:d1:f5:11:be:b7:71:67:3e:94:39:80:5f:1b:d9:
93:90:5a:a7:cd:17:8e:81:32:6e:36:2d:ed:db:c2:
a6:9c:dc:39:fc:11:0a:1c:e6:2e:fb:7f:c0:3d:f6:
65:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:28:B7:73:D5:77:63:83:1B:3E:0F:8A:02:C9:2D:5D:23:D6:ED:59
X509v3 Authority Key Identifier:
keyid:2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/zii3c9V3Y4MbPg-KAsktXSPW7Vk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.226.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:24:87:8f:66:bc:c6:d2:2a:a7:0e:a6:df:3f:13:56:e3:e9:
30:4a:31:b3:e5:47:00:61:3b:ae:71:23:ad:6f:b1:62:c9:0f:
f0:71:a9:25:e2:b3:ff:33:70:ff:20:24:37:cf:e2:bb:55:a5:
bf:b5:cd:17:05:eb:73:f5:29:12:c7:aa:4c:56:3d:f9:59:83:
90:ad:92:c6:ec:7b:71:74:00:65:08:a1:ae:50:a8:0d:40:b8:
73:90:df:1d:08:4e:c4:69:bd:3f:ad:e5:4d:88:4d:99:52:e0:
6b:11:98:31:69:fd:c7:cf:d6:d3:52:a8:e6:84:7d:eb:d8:e7:
9f:8f:aa:ae:c8:c8:66:74:b8:54:33:20:18:ef:6f:f6:b6:99:
10:4e:63:89:b7:fd:81:4c:40:34:c6:54:43:50:75:bf:27:71:
6b:a7:87:76:69:54:7e:f4:93:21:54:3f:06:3b:d7:69:99:bd:
5d:3b:ac:86:fc:7d:cc:21:4a:dd:dd:74:d0:d8:08:2a:a6:3a:
68:c0:ed:61:5f:a7:97:42:fe:41:9c:3d:31:6b:0f:a5:d7:51:
84:74:32:ef:58:d7:7f:51:1a:3a:3b:f2:c4:55:88:9e:ad:d0:
6e:37:08:52:70:db:a9:d3:3e:2d:73:29:40:53:61:2c:92:9d:
44:43:20:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:05:53 2024 by rpki-client on console-ams.rpki-client.org