Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/ZcSUGZAIuEweH_SMJ_RKz-ZVJY4.roa
File: ZcSUGZAIuEweH_SMJ_RKz-ZVJY4.roa (raw, json)
Hash identifier: 0BaPXPQPUs3oOlWZZb1qMxrnLaeVEoedxBhNjUh3YZU=
Subject key identifier: 65:C4:94:19:90:08:B8:4C:1E:1F:F4:8C:27:F4:4A:CF:E6:55:25:8E
Certificate issuer: /CN=f374f734c3695e67906a7032eb2e59fb3eb41b22
Certificate serial: 018CC56E5D1238E6C01FE40031EF9174BA86
Authority key identifier: F3:74:F7:34:C3:69:5E:67:90:6A:70:32:EB:2E:59:FB:3E:B4:1B:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/ZcSUGZAIuEweH_SMJ_RKz-ZVJY4.roa
Signing time: Mon 01 Jan 2024 14:29:53 +0000
ROA not before: Mon 01 Jan 2024 14:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 192.162.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 17:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:5d:12:38:e6:c0:1f:e4:00:31:ef:91:74:ba:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f374f734c3695e67906a7032eb2e59fb3eb41b22
Validity
Not Before: Jan 1 14:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65c494199008b84c1e1ff48c27f44acfe655258e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:21:86:2a:4b:24:96:24:96:31:61:16:81:f2:
9b:39:e6:f1:44:4a:9c:8a:e7:13:7c:76:92:a9:9b:
60:7b:a7:9d:2e:40:c8:93:d5:13:fe:38:fe:24:d7:
54:a8:52:71:d0:bc:95:8e:9c:2a:e8:14:90:64:4a:
b3:ca:96:1f:03:ac:c8:4e:3c:66:2e:3a:ed:dc:eb:
f1:46:47:c8:e2:53:8f:75:6d:f6:58:da:2c:01:ee:
06:9e:5e:52:b4:2b:88:66:f1:c4:ad:76:01:83:e1:
96:1b:6e:e3:33:cd:86:fe:1d:15:b1:21:eb:5f:3d:
29:4f:74:83:e8:0e:d2:d5:dc:93:3d:71:08:d0:d3:
dc:e3:9b:7a:3a:dd:a0:75:45:fc:dc:69:04:ff:53:
e9:a4:59:fb:88:aa:16:2c:40:82:ba:af:e4:5d:b6:
38:b4:b7:6e:00:7b:11:7a:a4:c3:86:4b:13:d3:ef:
c3:94:73:ca:c7:89:e6:7a:f4:18:c9:35:31:f3:ee:
87:49:a5:ef:93:4c:4c:d4:8c:d9:34:2e:49:77:84:
34:6a:e9:5b:26:74:fb:93:db:b8:d7:49:e5:4f:24:
d8:0d:b3:18:eb:d3:ad:4d:fe:f1:73:c6:7c:c1:4b:
b2:45:8c:bc:69:bf:ee:4a:e2:28:c7:f3:36:ee:59:
c3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C4:94:19:90:08:B8:4C:1E:1F:F4:8C:27:F4:4A:CF:E6:55:25:8E
X509v3 Authority Key Identifier:
keyid:F3:74:F7:34:C3:69:5E:67:90:6A:70:32:EB:2E:59:FB:3E:B4:1B:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/ZcSUGZAIuEweH_SMJ_RKz-ZVJY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.162.219.0/24
Signature Algorithm: sha256WithRSAEncryption
09:c8:07:8f:da:bb:37:12:3f:18:44:17:fb:fc:af:1a:77:ad:
24:96:75:19:1f:52:27:56:d9:71:6f:ea:d5:68:40:2d:11:8e:
d2:11:fb:37:a5:bc:4c:a5:41:ef:61:2d:35:03:08:32:c1:59:
c0:6c:40:b7:45:fe:b3:2c:d0:4d:54:35:7e:78:96:43:98:9a:
74:78:15:3a:aa:57:83:38:5f:37:6a:96:b8:44:0a:35:fe:45:
65:fb:23:a0:bc:d6:f1:d7:bf:6f:81:dc:22:e9:18:77:1f:1d:
b4:8d:83:21:8f:dd:a1:69:43:3c:45:35:58:71:a0:69:78:a0:
07:06:76:62:19:42:a9:25:e3:60:e2:16:47:6f:20:22:3b:b4:
9d:db:3f:2e:ad:ce:02:5a:ee:7b:0c:e6:e9:5a:e8:77:1b:8f:
08:c8:c8:2f:14:ec:21:2a:9d:e8:99:0b:51:db:2a:86:fb:d3:
04:af:59:69:44:68:9e:6d:97:43:b8:d8:fc:45:1b:6a:57:74:
2c:f6:71:12:28:b2:e2:96:b8:41:91:74:af:c3:4e:5e:fb:e6:
1b:27:57:24:1e:33:3b:3e:9d:54:db:c4:81:25:4d:f5:56:da:
e2:17:41:1b:9d:d0:79:cd:cf:da:a3:26:82:9d:62:0b:83:87:
fb:d2:58:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:50:21 2024 by rpki-client on console-fra.rpki-client.org