Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/Z-jeEOVQfRNOTiPZ7sRto3L5xP4.roa
File: Z-jeEOVQfRNOTiPZ7sRto3L5xP4.roa (raw, json)
Hash identifier: pG/PoK7JAUeofs/wifs8itpvWIy2wu5X0VQVXTtu/1M=
Subject key identifier: 67:E8:DE:10:E5:50:7D:13:4E:4E:23:D9:EE:C4:6D:A3:72:F9:C4:FE
Certificate issuer: /CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Certificate serial: 018CC64A937B780AEA60190262845E1C787F
Authority key identifier: 81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/Z-jeEOVQfRNOTiPZ7sRto3L5xP4.roa
Signing time: Mon 01 Jan 2024 18:30:25 +0000
ROA not before: Mon 01 Jan 2024 18:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44569
IP address blocks: 93.190.232.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:93:7b:78:0a:ea:60:19:02:62:84:5e:1c:78:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Validity
Not Before: Jan 1 18:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67e8de10e5507d134e4e23d9eec46da372f9c4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:27:49:b1:d1:f8:0f:f5:7f:75:67:02:68:cd:
ee:4b:44:d2:89:09:d4:d7:a1:11:58:0e:8d:26:5a:
5b:c0:f8:72:86:9c:06:24:ea:d6:a9:64:1b:5c:12:
bd:dc:45:09:6e:38:0a:c1:83:45:b5:96:6e:e6:52:
97:63:97:15:b3:71:b4:b8:4c:3d:e0:68:d7:c1:97:
4c:08:9b:d1:7f:80:6a:39:83:a3:d7:b8:c7:48:60:
46:08:f2:3d:26:ca:0d:fb:5b:8c:c9:68:5d:ff:0f:
b1:6e:8c:f5:8c:86:84:b0:30:a6:b3:d4:20:d7:5f:
d6:e4:f7:8c:93:ab:87:ab:57:9b:6c:e3:15:41:d6:
ae:0e:83:95:a3:67:db:92:c9:3a:6c:8d:79:3a:52:
5c:b7:60:b8:de:82:50:5a:89:25:e0:21:eb:bb:f0:
d2:a1:da:81:d4:5b:24:3c:ef:ef:45:03:e3:2c:6c:
2a:9d:e7:9a:2b:b0:54:dd:d8:7a:b2:f1:b1:d7:6b:
ea:ea:a9:a7:91:c1:2a:a5:be:d7:88:b4:03:c9:8b:
b7:2a:24:b4:32:d3:7e:ec:58:a3:33:c9:23:a7:5e:
a4:76:4f:3a:a3:46:88:80:34:fd:0a:67:bb:79:54:
0a:d5:d9:1c:96:38:1f:f6:58:95:2e:01:d6:39:2a:
54:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E8:DE:10:E5:50:7D:13:4E:4E:23:D9:EE:C4:6D:A3:72:F9:C4:FE
X509v3 Authority Key Identifier:
keyid:81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/Z-jeEOVQfRNOTiPZ7sRto3L5xP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.232.0/21
Signature Algorithm: sha256WithRSAEncryption
65:1e:7e:bb:c7:8c:3e:39:9c:34:cb:c4:a2:85:a7:30:29:d9:
de:fa:99:c8:da:46:75:a4:30:d7:5d:7d:ce:8d:71:3c:5d:97:
fb:10:1a:df:e3:f9:d7:64:7a:18:25:55:e6:e5:9c:4a:0d:2c:
8f:32:6f:d5:7f:bc:a0:f4:7d:79:35:b2:cd:5f:34:6f:6b:e4:
49:fe:06:86:e9:d0:db:bf:d5:34:d8:8b:aa:77:58:0e:6a:dd:
b2:e1:18:1c:ac:2a:27:00:0c:07:8b:fe:c4:a8:b9:aa:f2:40:
2e:a2:c7:a8:ba:89:a7:33:4f:74:26:75:5a:34:53:5b:96:af:
4f:79:4f:ce:00:68:5b:82:b7:b7:66:5f:59:16:60:47:ab:d3:
2e:2b:b1:8a:2e:56:ea:de:8f:2c:d6:29:d6:92:d8:b7:1f:90:
36:cd:a6:53:c1:6e:9f:01:23:e9:e5:70:aa:75:d4:fc:b0:ff:
8d:46:e5:9a:96:2b:be:28:13:61:32:25:22:92:b3:52:93:29:
ff:0a:5d:a2:ec:86:c2:b6:43:71:27:30:3e:44:b3:4e:7d:cd:
42:7c:f6:70:c3:1f:74:a0:95:01:6d:e5:3b:98:02:2a:01:c3:
af:64:e6:32:e7:33:3a:8c:48:97:80:c0:b4:d0:fe:36:be:28:
76:20:cf:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:17:01 2024 by rpki-client on console-ams.rpki-client.org