Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/zpliDRPd2Zt6-0MSmjY_bRgWIbU.roa
File: zpliDRPd2Zt6-0MSmjY_bRgWIbU.roa (raw, json)
Hash identifier: usHJBFbsXeoP486b8Nyb59ECP/5NVUlc4zXXzAEpC0Q=
Subject key identifier: CE:99:62:0D:13:DD:D9:9B:7A:FB:43:12:9A:36:3F:6D:18:16:21:B5
Certificate issuer: /CN=5324defbaade93e998e13a942029dd593b8b2ea3
Certificate serial: 018CC49338726E62F6752F898CFA278F6C67
Authority key identifier: 53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/zpliDRPd2Zt6-0MSmjY_bRgWIbU.roa
Signing time: Mon 01 Jan 2024 10:30:31 +0000
ROA not before: Mon 01 Jan 2024 10:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61135
IP address blocks: 167.160.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/UyTe-6rek-mY4TqUICndWTuLLqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/UyTe-6rek-mY4TqUICndWTuLLqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:38:72:6e:62:f6:75:2f:89:8c:fa:27:8f:6c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5324defbaade93e998e13a942029dd593b8b2ea3
Validity
Not Before: Jan 1 10:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce99620d13ddd99b7afb43129a363f6d181621b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a5:0c:b7:c5:b1:19:d6:4b:79:6d:58:4f:94:
78:b5:b0:b8:5e:68:11:14:38:b9:ae:79:4e:59:c8:
6c:7c:41:85:35:fe:6e:14:60:c2:36:17:92:9e:76:
11:05:ad:22:73:79:0b:14:86:a2:29:1f:9a:4b:61:
b0:46:32:3d:9a:a6:c3:9a:7f:5e:3e:cf:c6:4a:5f:
55:12:85:ff:aa:1d:eb:9c:5f:6d:c1:67:f0:c9:09:
ff:6b:c9:77:a5:14:77:7d:b2:4d:08:6e:4c:31:bd:
79:d2:c8:a0:5f:aa:96:6b:c4:fc:c1:3e:f9:00:ec:
04:7b:07:59:d2:87:8e:7b:da:64:42:45:ed:e6:5a:
23:06:5f:29:40:2f:72:6b:9f:94:b6:c6:c5:98:a2:
78:01:5a:16:39:5d:0a:22:2a:28:7e:dc:f2:b1:8c:
61:8e:9e:f3:ee:bc:de:44:25:5d:3a:f4:12:61:b1:
71:59:c4:98:d5:ae:49:ff:9c:c7:10:64:bc:7f:6d:
da:dc:93:06:2c:ed:bd:75:32:30:3c:85:67:21:3d:
b2:b7:c8:43:b9:2a:61:91:ef:9b:a6:2f:05:0b:2e:
07:40:8d:87:19:c1:07:90:fc:da:9e:e6:d0:89:7f:
be:0d:6c:05:ad:30:ff:8a:11:39:15:ee:45:5a:5c:
a2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:99:62:0D:13:DD:D9:9B:7A:FB:43:12:9A:36:3F:6D:18:16:21:B5
X509v3 Authority Key Identifier:
keyid:53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/zpliDRPd2Zt6-0MSmjY_bRgWIbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/UyTe-6rek-mY4TqUICndWTuLLqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.160.10.0/24
Signature Algorithm: sha256WithRSAEncryption
85:a3:f4:7d:8f:e1:5a:99:95:9f:a2:59:90:59:78:44:e2:92:
16:79:59:d9:af:7b:02:3b:d7:87:e9:46:65:df:76:fe:bf:22:
4d:7c:fc:88:3a:f0:7e:de:0b:08:6d:7c:cb:ea:02:0e:cb:5b:
50:99:98:d9:34:5a:bf:b0:59:0b:8c:d5:32:2b:23:19:0b:f5:
98:5d:42:61:42:8f:16:81:70:a8:47:1d:2e:ce:4b:b5:2b:02:
50:ce:4b:73:4c:8d:21:8a:54:37:80:f2:6e:64:53:86:9c:73:
88:ec:c2:53:6d:0b:8d:dc:4c:73:fd:6c:50:b2:c4:ac:d1:9d:
d7:1d:ee:93:9e:82:5f:c5:9d:b4:d6:5f:b1:4e:ae:39:60:ba:
d4:2c:36:79:ac:af:3a:2d:f2:6e:00:e2:d1:a7:a9:92:6f:85:
c5:2e:14:81:1d:9a:42:e1:e3:fa:8b:d3:9b:f5:2b:0f:42:57:
e3:79:31:91:9e:2f:28:51:da:a7:f5:0d:02:a8:b5:e6:72:b7:
5b:a2:4a:0d:32:52:da:b7:50:c6:bb:7c:b4:e5:35:6a:c6:44:
0c:87:ec:0e:35:cf:14:a0:b6:c1:15:d1:91:80:f2:cd:6a:e1:
a9:a8:2d:81:5e:fe:af:c4:ce:0c:ff:ab:5a:69:64:65:0b:f4:
e7:7c:99:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:26:05 2024 by rpki-client on console-fra.rpki-client.org