Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/ZWAGb6qCKi1UxrI1RPJAMqzly6U.roa
File: ZWAGb6qCKi1UxrI1RPJAMqzly6U.roa (raw, json)
Hash identifier: A1OEuw/zJ6LQJbJob0NmM5s4h+lD0DpG8YzW61NZAVE=
Subject key identifier: 65:60:06:6F:AA:82:2A:2D:54:C6:B2:35:44:F2:40:32:AC:E5:CB:A5
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0190B5FD99F4B1D5516E7021F1A7A3D41E61
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/ZWAGb6qCKi1UxrI1RPJAMqzly6U.roa
Signing time: Mon 15 Jul 2024 10:43:34 +0000
ROA not before: Mon 15 Jul 2024 10:43:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 91.238.93.0/24 maxlen: 24
95.214.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b5:fd:99:f4:b1:d5:51:6e:70:21:f1:a7:a3:d4:1e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jul 15 10:43:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6560066faa822a2d54c6b23544f24032ace5cba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fa:8d:ca:a1:3b:cf:9e:72:39:89:5a:e0:37:
7f:f5:92:ab:21:78:ab:23:fe:d5:5c:dc:dd:78:56:
e0:aa:ce:7e:d4:d2:22:65:5d:39:03:37:61:fc:ce:
84:01:48:11:05:ae:4b:bd:4e:c6:ec:e2:22:a8:ea:
38:d7:a3:4f:f1:80:f3:6f:5a:14:76:2a:15:af:bc:
42:07:bf:47:18:5b:3a:83:66:76:fb:2c:5f:48:31:
7a:20:0d:15:59:a0:1b:b7:7a:c9:2d:26:93:02:87:
60:00:40:33:05:e2:5b:d1:42:9a:9f:b9:ce:5e:d0:
c3:8d:f5:af:75:8d:ec:da:54:0c:43:d1:e8:b8:68:
b2:58:c9:ee:6a:23:9c:6b:1f:26:0b:e7:1c:d1:ac:
69:00:7f:a8:90:2b:f8:47:0b:87:7c:e7:df:c1:21:
af:76:e5:47:76:d5:37:2b:db:61:ec:dc:60:86:4b:
33:40:fb:c9:0d:91:b7:5c:cc:2e:ae:db:61:c3:55:
fe:2b:b1:a7:f7:e3:8f:a3:ec:d3:96:59:ad:b1:10:
26:36:c5:60:00:ce:31:58:d0:b1:9c:ff:18:3a:81:
5b:48:c9:5e:cd:0b:6d:1e:29:34:51:92:ae:55:89:
a4:5c:35:bc:b2:33:41:ee:b7:ce:cd:96:26:dd:41:
8b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:60:06:6F:AA:82:2A:2D:54:C6:B2:35:44:F2:40:32:AC:E5:CB:A5
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/ZWAGb6qCKi1UxrI1RPJAMqzly6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.93.0/24
95.214.176.0/24
Signature Algorithm: sha256WithRSAEncryption
55:98:7e:78:05:d0:9c:d7:21:06:5f:58:d9:23:77:ea:ba:46:
65:13:ea:ec:45:78:cf:e2:d1:97:5d:40:07:ab:65:ad:7b:a0:
c8:42:9e:ab:bd:d8:17:71:54:35:88:a5:5f:34:f4:cf:35:9d:
91:cd:b9:94:c1:9c:67:ca:9b:7a:a8:bd:8a:dd:1c:4f:b0:af:
72:bb:8b:33:37:fb:0f:61:9e:f4:c3:25:6f:1f:71:35:30:13:
93:ea:75:4e:dc:0b:0f:d4:d7:e5:21:11:8c:c8:bb:05:59:ab:
5d:19:e2:d1:54:7f:a9:8f:07:18:52:0c:ee:4a:3f:4d:56:1b:
1b:6c:a4:a2:13:62:d3:9d:c3:bf:8d:fc:b2:d0:0f:06:1c:e5:
1a:3e:ff:90:56:df:ad:33:61:c1:d6:17:23:83:3e:9e:9c:ec:
6c:41:11:37:92:9a:57:e7:1a:d5:c2:55:88:36:e3:68:fa:f3:
fb:5c:7c:63:0e:e4:36:77:ce:91:a9:34:6d:3c:90:e6:f6:18:
8f:d3:fa:c2:cc:c0:30:a9:9d:95:f4:54:29:11:ac:3c:83:93:
b5:ce:c4:52:4e:81:a5:52:7d:a4:cc:9d:06:d3:34:26:a6:b6:
b1:28:07:3c:73:a6:91:19:63:59:ad:bc:08:b4:d1:f8:60:f3:
ce:12:99:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:15:09 2024 by rpki-client on console-ams.rpki-client.org