Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/pZEud7983H-ygYCljtMnGRn1D5U.roa
File: pZEud7983H-ygYCljtMnGRn1D5U.roa (raw, json)
Hash identifier: Bebc8HVBotRWmTA/luBbWSiUrBErWz5S5KPjLyW/80k=
Subject key identifier: A5:91:2E:77:BF:7C:DC:7F:B2:81:80:A5:8E:D3:27:19:19:F5:0F:95
Certificate issuer: /CN=12c603666719e979bef0921451a2ec264ed01209
Certificate serial: 018CC8DE5B90C65417B971B4851A6E0BFE5B
Authority key identifier: 12:C6:03:66:67:19:E9:79:BE:F0:92:14:51:A2:EC:26:4E:D0:12:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/pZEud7983H-ygYCljtMnGRn1D5U.roa
Signing time: Tue 02 Jan 2024 06:31:04 +0000
ROA not before: Tue 02 Jan 2024 06:31:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35398
IP address blocks: 185.211.29.0/24 maxlen: 24
185.211.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:5b:90:c6:54:17:b9:71:b4:85:1a:6e:0b:fe:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c603666719e979bef0921451a2ec264ed01209
Validity
Not Before: Jan 2 06:31:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5912e77bf7cdc7fb28180a58ed3271919f50f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ff:2d:95:64:29:61:10:fd:db:86:ec:50:a2:
0e:e2:8d:d1:34:be:92:59:3c:29:bb:25:a5:95:b9:
7c:6e:1d:fb:76:a7:ff:88:60:0b:0f:c6:38:1c:78:
a9:fc:b5:99:4b:52:38:3f:74:fe:a3:68:d1:fc:8a:
70:7b:65:8e:62:f0:ae:bf:bb:e1:e5:73:95:0e:59:
29:c0:5e:ee:ae:e5:9f:9a:1c:17:43:f8:8f:dd:03:
9a:0b:f1:44:0e:8b:c1:ed:96:93:e9:11:0f:35:93:
a3:22:03:62:d7:f1:03:f3:c0:86:81:63:8e:90:8c:
97:0f:cb:de:ec:db:8d:9c:75:3a:76:33:a2:46:93:
c1:3b:5e:3e:a5:49:c3:e8:9d:6d:01:db:6d:f8:9d:
e7:d0:66:de:5a:a0:ea:d2:02:ce:c1:a7:34:c0:2c:
ad:d4:5c:69:63:13:95:bb:f9:66:89:ec:ca:f6:43:
73:1f:df:3c:ec:57:74:df:c0:44:3d:d2:00:98:29:
23:e8:79:f3:60:a9:75:c5:7b:d9:a9:bf:24:17:e4:
96:39:39:ba:aa:f6:77:af:5d:77:06:7a:83:1b:79:
10:b1:4f:68:03:58:b8:4f:5d:2a:bd:fd:2d:09:89:
f0:1e:ec:8c:1d:f6:09:98:93:fa:4f:53:86:db:7a:
55:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:91:2E:77:BF:7C:DC:7F:B2:81:80:A5:8E:D3:27:19:19:F5:0F:95
X509v3 Authority Key Identifier:
keyid:12:C6:03:66:67:19:E9:79:BE:F0:92:14:51:A2:EC:26:4E:D0:12:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/pZEud7983H-ygYCljtMnGRn1D5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.28.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:b3:91:3c:4f:61:f3:68:0b:44:7e:77:c1:aa:07:94:dc:4f:
fb:4c:05:5d:6c:8f:04:bd:c5:3a:ee:57:68:d7:14:7a:91:0b:
c6:af:6c:c0:eb:14:67:6d:15:c3:a9:f1:33:0d:f4:f4:32:77:
61:5b:ea:ec:72:e0:79:c2:b2:66:9a:03:91:0f:ea:47:0a:59:
fe:36:45:60:24:fc:21:ab:9b:38:d3:27:aa:c1:ed:d5:4c:6b:
de:93:65:7d:63:96:80:85:b2:10:c9:bf:42:e6:a3:48:2e:ba:
6b:4c:61:e8:12:ea:cc:61:7f:5d:4d:ad:d2:62:d7:8c:43:3b:
b4:ef:59:73:b3:e0:07:85:49:b0:72:6d:94:81:56:2a:8a:bd:
26:8f:ff:12:b5:88:cb:fa:f3:73:9d:62:d9:29:68:5f:e7:72:
91:8b:6f:97:4b:55:89:58:c3:04:7e:ab:7c:18:91:84:c3:04:
b5:92:10:92:6d:d6:2c:33:fb:43:81:8c:af:2c:fd:b9:8e:02:
e6:91:5e:c9:a2:5c:65:e4:3a:bf:4b:f4:f7:4c:18:ea:b5:d6:
70:f7:b2:0a:aa:ea:3c:4f:47:49:d5:68:a9:9f:97:54:9d:f4:
a4:85:34:d6:c0:70:82:79:cc:ab:2d:ac:47:22:a2:b3:18:27:
cf:d3:47:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 09:28:30 2024 by rpki-client on console-ams.rpki-client.org