Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/ZYuWYCPAyuKuPzZcZgGYbzjOjkU.roa
File: ZYuWYCPAyuKuPzZcZgGYbzjOjkU.roa (raw, json)
Hash identifier: HOZKCm4znhX+AoU/T+xzLKeD6jZQm/HATXFvYvHktw0=
Subject key identifier: 65:8B:96:60:23:C0:CA:E2:AE:3F:36:5C:66:01:98:6F:38:CE:8E:45
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 018EE5E4498B5651435CFB541760ED5753AE
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/ZYuWYCPAyuKuPzZcZgGYbzjOjkU.roa
Signing time: Tue 16 Apr 2024 07:52:07 +0000
ROA not before: Tue 16 Apr 2024 07:52:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 185.194.204.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e5:e4:49:8b:56:51:43:5c:fb:54:17:60:ed:57:53:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Apr 16 07:52:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=658b966023c0cae2ae3f365c6601986f38ce8e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:48:b8:16:c3:4a:22:af:4f:82:07:a7:77:64:
b0:a2:bf:c3:ec:90:da:12:c6:e3:ef:05:f3:58:3f:
1f:51:a9:c1:4d:03:31:56:70:e5:81:d9:2d:88:dd:
8c:d4:b0:bb:33:78:3d:5b:6e:c0:32:01:e0:8e:4c:
a7:18:29:18:a7:37:06:28:89:6c:c7:18:d8:91:36:
4d:47:70:ff:f4:cf:4d:5f:62:cf:57:c3:7b:8e:16:
f7:42:7d:c5:7c:42:a6:ee:dc:78:67:9e:46:2c:b7:
2c:60:54:03:c8:30:69:73:21:3c:e5:97:4b:dd:44:
6d:43:35:7f:dc:09:9e:7d:df:15:92:7f:06:3a:69:
9e:61:54:7c:36:38:78:39:3a:58:aa:f2:9a:69:fa:
e0:62:6c:b4:d0:65:30:4b:b1:09:c5:93:21:e3:24:
d0:65:c8:e2:a7:ca:d5:4f:e5:34:1f:41:ba:a1:6a:
ff:5e:b2:e5:b1:f8:ee:20:90:80:f5:4f:6c:cd:9b:
15:12:37:73:45:f9:1b:e6:6d:0e:97:50:28:6b:49:
e1:78:fb:cd:1a:ee:ea:d9:de:6b:23:90:85:de:80:
e8:e7:47:5f:5f:bb:e4:5d:d4:c8:3d:f8:2b:15:c0:
a8:17:df:26:fd:09:46:81:ac:a8:40:0c:ee:fe:11:
7c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:8B:96:60:23:C0:CA:E2:AE:3F:36:5C:66:01:98:6F:38:CE:8E:45
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/ZYuWYCPAyuKuPzZcZgGYbzjOjkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.204.0/23
Signature Algorithm: sha256WithRSAEncryption
97:79:d0:2d:d8:c4:9f:d7:de:44:da:bb:47:88:18:7c:0e:b0:
c6:6f:ec:fe:1d:08:0f:57:41:7a:64:dd:d2:eb:6e:ea:4f:c9:
07:bf:81:fc:84:8f:e7:a5:d8:8a:2d:0e:86:eb:67:eb:4b:55:
3b:b9:6e:96:98:4b:43:b3:8a:1d:ea:af:93:73:30:58:d8:56:
ac:e0:b6:f8:b1:3a:21:51:0c:d6:48:67:e5:3c:ae:e3:e8:83:
c4:d7:99:fb:52:8a:a4:89:e2:f2:55:53:df:7b:bc:6a:81:92:
bb:3f:21:4b:88:73:9b:dc:71:bc:38:e0:48:09:0b:09:3c:9b:
b9:1e:1c:b5:e0:b4:0e:f4:10:69:05:fd:b2:c4:2a:5e:68:40:
84:ef:8c:c0:f3:6d:50:20:7c:d5:76:c8:5b:9d:62:74:97:b8:
74:41:b3:a9:81:5e:b5:36:83:1c:e4:63:84:3c:b3:81:23:6a:
8d:53:35:50:f1:9b:75:4a:fa:3a:46:89:7a:46:d2:b6:28:69:
e6:6c:0b:35:56:3f:0f:68:79:98:ff:4b:57:51:b0:40:d8:2e:
9c:80:ee:c7:08:0b:72:1b:48:22:64:7c:7d:dd:22:9b:ae:8a:
05:0e:c0:0a:a0:5d:73:38:ca:50:78:f4:84:b2:a6:55:06:6a:
c6:93:85:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:48:47 2024 by rpki-client on console-ams.rpki-client.org