Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/zv3lS-349-3Rca3TYZfuxKkldIo.roa
File: zv3lS-349-3Rca3TYZfuxKkldIo.roa (raw, json)
Hash identifier: WkD1YSCQfeuHhY3xla635t9MlR3AyegZYddFMr+ekg8=
Subject key identifier: CE:FD:E5:4B:ED:F8:F7:ED:D1:71:AD:D3:61:97:EE:C4:A9:25:74:8A
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802FC0DC366F8B50145E73DE0F41F9E
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/zv3lS-349-3Rca3TYZfuxKkldIo.roa
Signing time: Tue 02 Jan 2024 02:31:27 +0000
ROA not before: Tue 02 Jan 2024 02:31:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199470
IP address blocks: 194.103.166.0/24 maxlen: 24
194.103.164.0/24 maxlen: 24
194.103.162.0/24 maxlen: 24
194.103.160.0/24 maxlen: 24
194.103.165.0/24 maxlen: 24
194.103.163.0/24 maxlen: 24
194.103.161.0/24 maxlen: 24
194.103.170.0/24 maxlen: 24
194.103.168.0/24 maxlen: 24
194.103.172.0/24 maxlen: 24
194.103.169.0/24 maxlen: 24
194.103.167.0/24 maxlen: 24
194.103.171.0/24 maxlen: 24
194.103.178.0/24 maxlen: 24
194.103.176.0/24 maxlen: 24
194.103.174.0/24 maxlen: 24
194.103.179.0/24 maxlen: 24
194.103.177.0/24 maxlen: 24
194.103.175.0/24 maxlen: 24
194.103.173.0/24 maxlen: 24
194.103.184.0/23 maxlen: 24
194.103.182.0/24 maxlen: 24
194.103.180.0/24 maxlen: 24
194.103.183.0/24 maxlen: 24
194.103.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:fc:0d:c3:66:f8:b5:01:45:e7:3d:e0:f4:1f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cefde54bedf8f7edd171add36197eec4a925748a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:11:40:8a:6d:36:39:cd:b2:f5:00:ab:ab:e8:
5f:65:cc:49:b4:b5:9c:6c:c6:c7:0d:bf:59:b2:f3:
7c:f8:8d:e8:08:6b:e5:73:8f:73:f5:6f:78:d0:56:
17:83:05:09:fd:97:02:7a:1a:e3:6c:08:95:df:0e:
71:26:0a:17:5a:1d:b9:eb:6b:77:1e:60:5d:2f:9e:
68:9f:44:a0:7a:9f:7d:1a:5d:a3:f8:1e:b6:2d:4c:
4e:66:d4:07:c3:5c:f9:e1:e2:a8:72:b0:6f:d0:62:
c1:0b:18:a1:b3:81:2b:7c:ef:8d:2a:2e:b8:2a:85:
21:a9:4e:78:8e:5f:82:65:8c:40:41:c4:59:a5:42:
32:0b:f2:8f:77:22:40:57:3e:e5:fe:ba:c8:93:b7:
71:00:db:ff:68:d9:c1:0f:d0:f4:65:e9:87:09:c4:
2b:eb:7b:87:22:64:e3:9e:af:85:32:32:a8:94:ca:
1d:b1:c9:a2:c2:43:c7:21:70:26:86:6c:6b:52:61:
86:2b:d1:4a:f3:fe:19:44:25:15:90:b9:97:02:43:
f8:9c:6f:f8:00:f3:37:52:61:84:81:b2:26:af:16:
53:cf:2b:e3:76:f6:da:ec:1a:b1:98:5f:e3:41:b8:
42:e7:99:33:7d:ea:0a:34:fc:73:68:c0:fb:33:b2:
9a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:FD:E5:4B:ED:F8:F7:ED:D1:71:AD:D3:61:97:EE:C4:A9:25:74:8A
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/zv3lS-349-3Rca3TYZfuxKkldIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.103.160.0-194.103.185.255
Signature Algorithm: sha256WithRSAEncryption
17:25:65:78:ad:27:47:ad:38:2b:f8:3e:f2:34:fb:b4:ad:a7:
a9:d3:22:5f:b4:96:6e:c4:d7:f0:17:2c:e3:bb:73:d0:43:0e:
76:b2:42:aa:84:5a:35:a9:0d:52:0e:3c:9b:b7:b4:a3:55:b5:
84:4d:b7:33:bd:6e:66:7e:5e:da:39:db:87:35:53:a2:9b:da:
10:af:3e:58:20:66:0a:34:6a:f8:4c:45:f9:eb:60:31:ab:d2:
ab:69:ac:fb:f0:99:c3:cc:b3:0b:e6:11:c9:17:cc:07:9e:ba:
d9:10:0c:2c:69:6c:d0:a0:a5:16:81:54:25:49:c9:40:1b:bf:
53:8b:ce:e1:a5:c1:82:d6:59:9c:a2:42:fa:46:f3:b0:44:df:
3a:6f:1a:df:91:d9:a8:c8:2f:98:12:53:b5:e8:11:6d:13:16:
21:68:08:4f:fe:62:5f:a6:5f:b0:e9:e9:bc:2b:02:7c:e7:0a:
88:83:20:0a:c5:c1:b1:65:16:10:3d:d8:3c:a0:05:1c:b7:28:
c0:2a:8e:cc:fd:4e:28:66:20:65:4a:88:de:c7:a3:7f:33:0c:
b4:f9:c2:1c:16:b8:ae:7f:7d:32:9f:43:8a:2a:44:7a:00:9b:
ba:5f:23:fa:4c:aa:42:40:b7:17:f0:12:6d:7e:93:78:8b:3d:
3c:c7:f0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 09:13:22 2024 by rpki-client on console-fra.rpki-client.org