Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/zAK15cowWhpLz6kQA9EvJAN6XRo.roa
File: zAK15cowWhpLz6kQA9EvJAN6XRo.roa (raw, json)
Hash identifier: 8NvHdVHg2dBOUtwkcpr6n7w4X0L41XRR2zMlC3z+0j8=
Subject key identifier: CC:02:B5:E5:CA:30:5A:1A:4B:CF:A9:10:03:D1:2F:24:03:7A:5D:1A
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802FFDAFD4D7DEB9F937008F7F65A53
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/zAK15cowWhpLz6kQA9EvJAN6XRo.roa
Signing time: Tue 02 Jan 2024 02:31:28 +0000
ROA not before: Tue 02 Jan 2024 02:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201271
IP address blocks: 193.234.187.0/24 maxlen: 24
193.234.189.0/24 maxlen: 24
193.234.191.0/24 maxlen: 24
193.234.188.0/24 maxlen: 24
193.234.190.0/24 maxlen: 24
193.234.192.0/24 maxlen: 24
193.234.193.0/24 maxlen: 24
193.234.195.0/24 maxlen: 24
193.234.184.0/23 maxlen: 23
193.234.185.0/24 maxlen: 24
193.234.184.0/24 maxlen: 24
193.234.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:ff:da:fd:4d:7d:eb:9f:93:70:08:f7:f6:5a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc02b5e5ca305a1a4bcfa91003d12f24037a5d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e3:93:09:17:42:86:a3:46:93:83:7b:3a:a2:
f4:89:97:a7:62:c8:9b:1d:44:92:9f:e2:dd:a6:0b:
fe:8d:58:05:76:86:ff:fc:ca:8d:d0:5f:5e:d8:a4:
70:66:22:b1:c0:49:75:da:cd:ce:bc:ed:bd:e5:ab:
34:9e:84:ed:48:d9:08:03:5b:71:2c:b3:02:9f:d1:
4e:9a:2c:51:f9:96:75:13:2a:99:cf:8c:27:d7:e9:
37:9f:17:81:49:c8:9a:23:9f:27:e9:1d:69:4d:6e:
57:26:5a:a8:f9:f6:a5:92:2e:61:c1:12:3d:d9:ab:
51:31:35:43:c5:34:48:f3:49:b9:27:29:b1:25:10:
c9:18:a1:f2:fa:19:bc:61:97:c2:a2:b5:2c:cb:87:
39:c5:66:25:78:7d:42:03:69:16:49:cd:ec:7a:89:
2b:d3:8f:9a:81:2e:ad:8e:05:41:f7:ea:94:40:f9:
98:16:f3:e2:bf:7d:84:9c:df:f0:69:45:6f:bb:d7:
6d:49:d9:ba:cc:f1:67:f2:a7:b9:2d:e4:20:fe:3a:
1e:29:5b:d3:44:11:75:c3:9b:12:69:80:d6:19:fa:
ac:bc:be:d6:4b:b3:e4:ee:5b:b2:1a:20:ef:e1:70:
c1:7d:bd:b8:c4:b5:44:b1:8c:39:a4:2b:73:d8:f9:
f4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:02:B5:E5:CA:30:5A:1A:4B:CF:A9:10:03:D1:2F:24:03:7A:5D:1A
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/zAK15cowWhpLz6kQA9EvJAN6XRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.234.184.0-193.234.193.255
193.234.195.0/24
Signature Algorithm: sha256WithRSAEncryption
20:db:7a:24:f3:ef:6e:cf:3b:b0:88:23:a8:d6:31:7c:ca:dc:
bb:8b:20:53:54:a7:c6:d7:fb:70:ea:f1:25:23:30:88:d6:95:
f3:b9:30:92:ea:0a:87:22:7c:79:cf:32:d7:ef:9a:db:7c:4c:
37:fd:2d:c2:a4:cf:8d:f6:3c:5f:8c:f3:d2:ec:5f:5e:c9:bb:
50:3f:18:87:5e:5d:26:21:5d:f7:d8:e5:5d:c9:53:79:ba:23:
80:7c:41:ea:bd:01:a5:f9:c0:f9:db:d0:5c:76:e5:18:c1:7b:
3b:23:7d:70:cc:b9:64:3e:5e:16:a0:b5:61:28:b6:0b:ea:df:
3a:87:aa:99:5f:12:88:46:fe:fa:45:c4:8c:a6:9f:5a:0a:5d:
8d:fa:da:36:fa:a1:6a:0a:46:17:68:4a:bd:59:b0:95:2c:13:
6c:5c:30:9b:56:b7:92:70:2f:d3:42:56:eb:1f:e2:4a:b6:66:
ae:3c:c6:48:41:03:3d:94:78:d9:e8:59:38:32:cb:43:f0:d6:
0a:d8:9c:3a:7e:07:47:f7:38:50:16:cd:bb:5b:f0:3d:35:74:
67:65:94:b9:da:35:62:eb:71:06:b3:2e:2f:2e:90:bb:4c:67:
2a:5d:ab:03:7f:e2:91:5b:f4:65:84:36:43:99:bb:41:48:4e:
35:9e:d1:35
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 25 09:13:22 2024 by rpki-client on console-fra.rpki-client.org