Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/ZYSWak6s6T19qjLTklL7dJuFAPQ.roa
File: ZYSWak6s6T19qjLTklL7dJuFAPQ.roa (raw, json)
Hash identifier: H/Fws6N52yxoiMYerKX2SQUg/mSzBv+7pD/BX0YUhbY=
Subject key identifier: 65:84:96:6A:4E:AC:E9:3D:7D:AA:32:D3:92:52:FB:74:9B:85:00:F4
Certificate issuer: /CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac
Certificate serial: 018CC8DF6BEF459D9C975A92E6F4C1FC4E63
Authority key identifier: B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/ZYSWak6s6T19qjLTklL7dJuFAPQ.roa
Signing time: Tue 02 Jan 2024 06:32:14 +0000
ROA not before: Tue 02 Jan 2024 06:32:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49981
IP address blocks: 195.191.112.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:6b:ef:45:9d:9c:97:5a:92:e6:f4:c1:fc:4e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac
Validity
Not Before: Jan 2 06:32:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6584966a4eace93d7daa32d39252fb749b8500f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:13:a6:41:b5:05:bb:9d:d1:2c:34:bb:70:0c:
19:65:7d:2e:dc:50:ed:65:d3:47:f2:24:6f:96:78:
46:fe:46:e9:07:22:df:67:a4:56:17:ab:f8:50:2f:
ec:9c:5c:27:01:4d:80:60:97:6d:eb:b9:f4:50:d4:
85:f6:d7:58:e3:ad:0a:b4:e9:93:ca:5f:33:c3:f6:
50:2b:c7:03:1c:8b:37:37:b1:36:b5:af:b8:5f:8b:
1e:a8:e9:e9:a5:fe:67:f3:71:6f:28:7e:40:99:ee:
45:6e:6c:ce:a2:e7:9d:1a:e1:59:1c:e5:af:18:f0:
5e:32:70:c2:cf:ab:2a:28:17:a0:a4:1a:77:d7:3a:
db:95:e1:c5:18:0d:bc:8d:96:f5:cd:48:09:8d:6c:
ab:f6:a5:f7:87:e1:86:50:6d:51:a1:fe:ae:2e:ad:
9b:93:d3:93:8a:21:e2:09:a3:1b:4b:b0:43:9f:f5:
23:5c:95:78:29:e4:ad:a9:31:9d:1d:90:48:70:93:
39:4b:1c:a5:f6:75:76:d0:74:ec:b2:8c:87:ff:ac:
d7:79:af:9d:84:b2:d8:29:f8:e8:4f:ad:2e:ad:8e:
dc:0a:f0:89:e5:d1:24:9d:1e:fd:d3:60:df:fb:09:
4e:b4:bf:9f:5d:a6:9b:78:3b:7f:fd:c7:de:e7:d4:
5c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:84:96:6A:4E:AC:E9:3D:7D:AA:32:D3:92:52:FB:74:9B:85:00:F4
X509v3 Authority Key Identifier:
keyid:B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/ZYSWak6s6T19qjLTklL7dJuFAPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.112.0/23
Signature Algorithm: sha256WithRSAEncryption
40:ea:2f:a5:d4:d8:79:e2:2b:27:ec:b9:81:66:1f:51:1c:99:
c7:de:54:d5:e3:ee:2d:9a:f0:2a:64:87:54:63:a7:46:55:f0:
f6:57:a1:4a:51:6f:09:2c:6a:d9:10:02:92:3a:7a:e5:37:d1:
b5:1d:92:88:bb:13:ed:ef:6b:2d:eb:fc:aa:97:cc:17:48:f6:
e3:60:0d:95:28:b4:e8:8b:b0:53:80:6f:50:be:58:ed:be:f8:
c9:a0:56:08:46:53:6c:60:90:08:00:04:71:c5:0a:8d:be:c5:
e1:28:1e:18:f9:ab:9d:57:9b:7f:c1:3b:86:20:b0:66:a2:74:
5a:ce:06:4e:a9:11:e3:f4:0e:57:dc:fc:15:0e:ab:fc:4e:bf:
8f:a6:26:87:d9:c6:90:0d:e4:48:62:0e:45:ab:2a:8f:e5:07:
8d:be:a0:10:78:d5:43:99:2d:c9:72:36:24:e4:a7:85:94:0a:
63:30:d8:d4:dd:29:1b:28:1a:e2:3d:6d:c4:26:db:ba:b3:a4:
f9:75:ab:2f:79:af:a6:2f:9e:9a:1f:6a:51:3c:be:61:57:68:
35:c8:66:6b:46:a5:9d:7f:54:c2:07:a8:60:ce:54:34:f7:be:
1b:70:99:86:1a:1c:43:4d:4a:41:0c:c8:84:aa:75:ce:d8:f0:
ff:57:62:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 19:26:56 2024 by rpki-client on console-fra.rpki-client.org