Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/ZNrSMEspmr3rhwH5gLnFsaCz-3g.roa
File: ZNrSMEspmr3rhwH5gLnFsaCz-3g.roa (raw, json)
Hash identifier: aI3GbAurggjW5p1Gi9syCuCgRbBDA8eKSVAIOFSakm0=
Subject key identifier: 64:DA:D2:30:4B:29:9A:BD:EB:87:01:F9:80:B9:C5:B1:A0:B3:FB:78
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 018CC4936A22E5F062132157323F31D940C6
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/ZNrSMEspmr3rhwH5gLnFsaCz-3g.roa
Signing time: Mon 01 Jan 2024 10:30:44 +0000
ROA not before: Mon 01 Jan 2024 10:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3170
IP address blocks: 5.252.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:6a:22:e5:f0:62:13:21:57:32:3f:31:d9:40:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 10:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64dad2304b299abdeb8701f980b9c5b1a0b3fb78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a2:25:0e:4d:aa:0a:70:9d:c8:83:33:01:4d:
c0:1c:c6:85:d8:5a:b2:47:1e:0b:39:96:d6:c3:de:
f9:11:40:35:09:d5:bf:f5:5b:d0:00:43:ef:56:34:
cb:99:0c:5c:af:5f:2d:03:fa:83:29:3d:d8:47:4e:
96:c6:df:21:35:23:01:d9:bd:e5:a9:1c:d5:d3:36:
b5:ca:4e:f0:29:09:81:a5:62:8d:28:36:76:a7:fe:
f4:c8:d8:8d:68:46:a8:d8:81:e3:48:70:ce:f1:84:
63:3a:41:8b:85:a9:31:54:d0:39:37:1b:ad:ce:d5:
a9:4c:8f:87:62:5a:6f:d4:8b:1b:5c:a0:ce:ef:cc:
e2:00:77:54:57:eb:dd:5b:50:b0:dc:12:9a:dd:0e:
6d:bd:3f:a5:0f:83:7a:a9:29:cb:f3:19:a0:10:bd:
11:e7:b3:d1:a8:e7:ab:3c:3b:d7:97:43:fc:0f:92:
c5:c3:ee:92:67:cf:d4:80:df:97:f4:28:a5:22:41:
5e:4e:85:f4:15:20:f2:c1:18:31:4a:58:56:c6:52:
9a:04:f4:ab:00:af:64:61:f3:31:92:70:2a:b8:a4:
90:99:7b:2b:b4:53:57:df:59:89:38:cc:b1:2d:d5:
d9:49:e4:0b:50:7e:12:d7:39:4a:2f:ff:47:ce:dc:
f2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:DA:D2:30:4B:29:9A:BD:EB:87:01:F9:80:B9:C5:B1:A0:B3:FB:78
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/ZNrSMEspmr3rhwH5gLnFsaCz-3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.235.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:0e:52:8e:fb:e7:25:af:35:19:30:ce:bc:fd:18:62:37:28:
6f:46:72:81:63:d8:f1:12:fc:a3:70:97:4c:5b:08:0c:0d:a1:
85:fb:67:38:9e:99:00:72:6c:37:80:e2:09:db:4f:ba:41:74:
a6:c0:01:73:8b:5a:bd:99:c9:b4:ef:42:78:34:a3:a3:43:be:
26:06:31:8d:88:44:88:19:1d:30:40:83:5f:b7:38:4d:92:53:
3a:a4:b5:ee:13:b4:59:97:ce:38:6d:7e:0f:cf:13:67:38:12:
75:bd:62:64:f4:7b:c7:d9:b9:97:94:73:7a:90:37:f1:f3:8c:
1e:80:e9:02:8f:3f:73:ac:31:bf:3d:87:bc:48:b9:e5:43:e0:
21:88:dc:57:4a:f0:17:be:db:f1:94:f6:ba:30:4c:50:18:df:
c7:3b:9d:1f:19:a7:99:f0:f4:5a:c8:06:a4:c0:8f:19:45:62:
3e:5a:cb:cf:1a:0e:1a:32:c0:77:03:6f:58:dd:a1:a5:fb:e9:
a2:32:74:c2:9e:44:0c:03:c2:0e:ff:43:b7:8b:75:91:1d:7c:
08:ea:ba:90:b4:7e:be:2a:98:76:6d:67:cb:d1:8f:52:29:8b:
d2:c3:3e:26:a6:02:33:e2:19:a4:a4:05:27:9c:37:d1:3a:f0:
48:3d:63:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:08:59 2024 by rpki-client on console-ams.rpki-client.org