Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/ZESKzbysh6qfriuRoIbs5Xu1EM8.roa
File: ZESKzbysh6qfriuRoIbs5Xu1EM8.roa (raw, json)
Hash identifier: jps05+CU5BfZ5l/vnBw8YlE+mRwqpYB2jhKqkzs9p28=
Subject key identifier: 64:44:8A:CD:BC:AC:87:AA:9F:AE:2B:91:A0:86:EC:E5:7B:B5:10:CF
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 018CC801346EB14DEBB69ADCCF2311AA3677
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/ZESKzbysh6qfriuRoIbs5Xu1EM8.roa
Signing time: Tue 02 Jan 2024 02:29:31 +0000
ROA not before: Tue 02 Jan 2024 02:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 17819
IP address blocks: 5.152.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 14:51:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:34:6e:b1:4d:eb:b6:9a:dc:cf:23:11:aa:36:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Jan 2 02:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64448acdbcac87aa9fae2b91a086ece57bb510cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:60:73:64:45:c7:da:c8:e1:99:1c:ae:0e:54:
d4:e9:fd:fd:51:59:e9:48:b4:0a:37:31:07:6d:a8:
3e:3b:d3:f8:d3:18:94:38:02:58:5a:ae:bd:74:ce:
b9:a8:62:fb:2e:cb:b8:3d:e3:8b:53:cc:88:46:ea:
e1:33:1d:b9:34:08:82:44:bf:60:a4:7a:b0:58:fc:
4f:43:cb:42:1d:83:41:5a:02:f7:34:37:1c:b9:4a:
e0:df:aa:65:d5:23:50:7a:49:88:60:29:d2:ed:65:
e4:ee:28:f6:50:82:8a:ab:ec:e9:bc:dc:7f:54:3f:
3a:e9:69:16:8d:11:38:4a:79:ee:48:d0:cd:61:d1:
b0:82:81:31:d6:22:0e:73:a9:6d:ca:b5:3d:2e:66:
a0:f2:a8:b3:29:f5:3c:81:d3:e9:e6:33:b4:94:be:
7e:58:f3:04:fd:00:cb:ac:41:11:62:54:88:83:a5:
7b:6b:db:7e:2c:1f:4a:ba:c2:f9:aa:57:66:23:d1:
38:e1:46:9c:87:20:b8:be:45:a7:38:04:76:4a:a4:
ab:9c:58:3f:ff:ca:d1:d7:64:f8:a4:42:1a:52:e9:
43:aa:c8:50:42:58:db:ab:21:42:a3:5e:a1:72:8f:
00:17:63:e0:71:37:f2:9d:ed:51:6a:0c:5d:09:3f:
a7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:44:8A:CD:BC:AC:87:AA:9F:AE:2B:91:A0:86:EC:E5:7B:B5:10:CF
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/ZESKzbysh6qfriuRoIbs5Xu1EM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.152.180.0/24
Signature Algorithm: sha256WithRSAEncryption
00:d2:46:2c:23:2d:19:49:1d:35:57:ee:b5:40:7c:ca:d9:2c:
c8:b9:81:33:6a:3e:0e:f3:4d:16:88:29:ab:a9:2c:d2:12:e3:
f9:38:d6:c6:54:f1:35:ae:fa:8e:9b:63:6a:40:16:1d:f1:63:
1c:86:aa:2e:f6:9c:6a:b2:62:86:6f:ad:92:6e:24:54:ed:f9:
5e:67:7e:21:dd:fe:da:90:ab:7a:48:aa:66:c2:0c:2c:db:30:
72:5f:30:eb:f8:df:47:fc:e7:37:bb:b2:3b:51:03:55:8e:7d:
3a:ba:9e:3b:51:31:75:1e:ce:27:5e:0a:18:e4:4b:63:86:0f:
4f:89:77:c0:df:9c:6b:d4:ee:cb:00:63:dc:10:b5:fe:23:ca:
31:f2:25:0a:61:6f:c7:27:45:e6:f9:a8:c0:bf:d7:85:f7:fa:
b0:e4:ac:ea:00:44:72:45:0f:9d:44:79:de:6a:e3:27:d8:71:
59:f2:8d:92:97:fc:a5:fc:00:bc:23:e4:b0:37:4f:de:25:e1:
25:ae:8c:c1:ca:8d:76:37:1c:0d:ec:26:a7:94:de:1b:b9:c6:
5f:83:c8:e2:18:23:54:a8:78:18:45:14:1d:d3:97:62:1c:56:
39:94:17:d8:78:ea:b4:88:62:1f:66:3f:4b:e6:90:ee:14:e3:
00:7b:74:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 23:12:15 2024 by rpki-client on console-fra.rpki-client.org