Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/SZz9H4HOe20DCr_66JjsBT61HHI.roa
File: SZz9H4HOe20DCr_66JjsBT61HHI.roa (raw, json)
Hash identifier: ZQ5EzC/QhWxCwI/iW+FgB68q/OTM9QaYMCYQdzsjFWY=
Subject key identifier: 49:9C:FD:1F:81:CE:7B:6D:03:0A:BF:FA:E8:98:EC:05:3E:B5:1C:72
Certificate issuer: /CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Certificate serial: 018CC5DC037ACB38A1C18474737231F16AE5
Authority key identifier: 0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/SZz9H4HOe20DCr_66JjsBT61HHI.roa
Signing time: Mon 01 Jan 2024 16:29:39 +0000
ROA not before: Mon 01 Jan 2024 16:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1234
IP address blocks: 193.110.32.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:03:7a:cb:38:a1:c1:84:74:73:72:31:f1:6a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Validity
Not Before: Jan 1 16:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=499cfd1f81ce7b6d030abffae898ec053eb51c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:db:40:fc:ff:71:d4:3b:cd:69:77:98:6b:bf:
a5:c5:99:41:2a:7e:19:06:8b:92:6c:4a:b2:98:15:
cf:ac:45:e8:c5:d7:af:b0:12:41:61:94:cb:f2:70:
1d:16:f9:a4:14:02:cc:72:16:7f:f8:a1:c5:24:15:
24:e7:88:aa:a5:a3:6e:0a:3f:98:24:36:15:6d:cc:
dc:41:b6:46:5d:c3:03:2e:1b:86:fc:8f:71:e3:64:
53:98:02:e3:0d:29:88:9d:10:79:74:6e:db:6d:4e:
5f:84:01:57:d4:e8:0f:c7:de:98:7a:e4:ca:d8:71:
22:fc:39:dc:cc:9a:e9:39:1f:17:24:3c:b4:0e:08:
41:10:ca:05:54:db:d6:0d:ba:f0:23:60:95:49:88:
dd:88:d6:c8:e5:e1:65:1e:5f:a8:14:ad:d1:67:d2:
b2:d7:b5:39:cb:28:e9:ea:d6:02:50:29:7a:c3:89:
de:d1:b5:e8:67:b7:5b:60:24:3f:1c:1b:16:ad:ab:
e8:3f:ba:e0:f2:a9:a2:fa:50:77:ac:92:57:a2:41:
5b:43:a8:82:fd:eb:f3:72:c0:5a:bb:c6:a4:81:cf:
91:17:5e:be:be:70:0a:da:6a:25:a8:6a:a7:89:86:
3c:17:ca:ae:89:fa:aa:a3:c7:c4:12:c5:b3:fd:63:
2e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:9C:FD:1F:81:CE:7B:6D:03:0A:BF:FA:E8:98:EC:05:3E:B5:1C:72
X509v3 Authority Key Identifier:
keyid:0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/SZz9H4HOe20DCr_66JjsBT61HHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.32.0/21
Signature Algorithm: sha256WithRSAEncryption
06:fe:73:9c:cd:d4:34:e4:59:34:46:80:f7:7b:63:35:d5:f6:
14:59:49:97:9f:ff:3c:48:f0:07:f6:cb:3b:20:ce:97:a9:87:
ec:34:3d:be:4f:c1:28:7b:9f:fd:ff:4c:77:fc:cd:ed:37:d8:
e8:52:d3:d7:52:88:03:f4:15:7c:d9:cc:31:56:35:98:79:54:
22:18:d9:6f:37:90:f6:4f:62:5a:b4:56:e5:3f:30:61:b7:25:
7e:71:75:f4:3f:83:b1:37:8f:9c:ac:ad:53:f9:06:d1:e6:46:
91:4e:ce:32:11:cb:d0:89:52:00:2f:8a:dc:60:56:0f:55:6f:
4a:99:d1:fa:5c:a1:8a:e6:00:54:06:f4:d8:f7:8d:47:34:fa:
9d:cd:31:c3:46:a0:71:19:f2:05:65:e8:fa:cb:cb:60:43:3f:
34:23:16:06:de:90:4b:73:24:9b:e3:3a:02:39:27:e1:d7:e5:
f5:5d:6e:45:9c:1e:d5:eb:30:13:5f:17:c8:8e:19:eb:0a:ef:
9e:24:09:92:4a:f3:1e:e7:c3:75:3c:53:30:de:d7:b1:e4:1e:
a0:ab:b9:4b:90:1d:61:56:db:13:9f:44:60:7d:5f:81:25:29:
61:98:fa:42:f9:fb:39:b1:14:8b:fa:3b:b0:d0:9c:f4:07:ce:
d5:51:9e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:53:11 2024 by rpki-client on console-ams.rpki-client.org