Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/ZBoBZ9VlZvcEbhg57ijrMQkYAWg.roa
File: ZBoBZ9VlZvcEbhg57ijrMQkYAWg.roa (raw, json)
Hash identifier: JUud99FApEFJG6It1Nve+K0wQ7bBQcFwV8AgCBZtPSk=
Subject key identifier: 64:1A:01:67:D5:65:66:F7:04:6E:18:39:EE:28:EB:31:09:18:01:68
Certificate issuer: /CN=6ddd8f1e38c91f5b17c3d1a7234e49c9c70dc324
Certificate serial: 018CC870ABC4C2DF6FED7358576187C1F990
Authority key identifier: 6D:DD:8F:1E:38:C9:1F:5B:17:C3:D1:A7:23:4E:49:C9:C7:0D:C3:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/ZBoBZ9VlZvcEbhg57ijrMQkYAWg.roa
Signing time: Tue 02 Jan 2024 04:31:16 +0000
ROA not before: Tue 02 Jan 2024 04:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212543
IP address blocks: 192.38.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:ab:c4:c2:df:6f:ed:73:58:57:61:87:c1:f9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddd8f1e38c91f5b17c3d1a7234e49c9c70dc324
Validity
Not Before: Jan 2 04:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=641a0167d56566f7046e1839ee28eb3109180168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:58:c5:07:33:8e:61:e4:0d:c2:b6:04:91:75:
0c:26:fe:2d:15:17:74:19:c5:22:00:c1:79:e6:08:
e1:bd:95:a3:03:18:df:03:b1:15:62:5a:6a:bd:ee:
6c:25:e9:b6:40:e3:f6:12:de:bb:43:af:62:5d:35:
92:9b:96:45:6a:3f:22:41:f2:1b:50:5b:9d:92:4c:
e6:4c:e0:6f:ac:94:e5:97:c6:82:6a:50:50:87:27:
45:0d:f4:e8:00:00:48:ae:91:a3:e5:fa:7e:0c:49:
ad:85:91:d9:7e:d3:c9:a5:14:31:71:61:80:9c:7c:
e0:d7:df:82:97:3e:a1:39:58:f7:d8:fa:2a:8f:5e:
5f:5b:0c:af:9e:8f:1f:95:3e:10:08:71:5b:33:3e:
d6:cb:51:09:21:86:e3:f4:64:1c:22:47:0b:3f:eb:
c1:a5:a9:13:2d:95:c1:34:68:b9:6d:5a:4d:47:fe:
af:de:eb:87:ae:8e:80:96:7c:44:f3:74:2a:e0:47:
9d:12:96:10:dc:e2:97:c0:92:7f:41:0b:6e:fa:2c:
2d:4a:49:dd:aa:58:46:eb:42:6b:d4:1c:30:99:fe:
a8:7a:c3:4e:19:bb:fe:11:55:26:35:e8:9b:60:85:
09:2f:c7:5d:e6:4a:17:18:09:18:70:0b:82:7d:d2:
95:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1A:01:67:D5:65:66:F7:04:6E:18:39:EE:28:EB:31:09:18:01:68
X509v3 Authority Key Identifier:
keyid:6D:DD:8F:1E:38:C9:1F:5B:17:C3:D1:A7:23:4E:49:C9:C7:0D:C3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/ZBoBZ9VlZvcEbhg57ijrMQkYAWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.38.0.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:87:9a:67:38:b7:24:fb:62:de:f7:68:17:38:60:45:24:1c:
7a:94:2b:4b:ca:cd:5e:6d:c7:ce:f4:8a:3a:ae:ea:f0:ee:c7:
67:16:74:05:52:2f:c2:d5:ac:2a:1f:24:bf:73:c1:63:66:17:
38:ad:06:bf:85:ae:33:e9:69:0e:d5:57:99:23:42:3a:2e:0a:
5a:a0:e5:38:d0:1e:6e:d2:f0:e5:76:9a:c6:ca:17:e8:fc:07:
11:39:2a:0e:83:3c:d8:6c:f6:a7:41:92:aa:d0:11:03:63:db:
97:d3:7f:82:73:63:cd:1d:a9:00:e5:b1:c3:cc:a5:b2:8c:97:
95:5f:67:57:76:09:4b:10:e5:5f:d6:10:ae:4a:ab:05:cf:25:
a6:6e:89:b3:a9:93:6e:46:4f:a7:51:7a:69:5d:69:cf:e7:f4:
10:35:c3:12:d8:01:b9:4f:89:e3:e8:53:15:f7:76:dc:a6:fa:
04:a3:84:48:3b:95:bc:d6:75:f9:ea:04:2c:a5:b3:34:39:2d:
8e:f2:85:88:a2:c4:dd:65:9b:3d:b5:b3:c8:af:f1:0c:bb:51:
22:50:82:59:e0:c3:e9:f4:27:a7:35:85:e5:17:e4:b6:34:f9:
73:31:91:95:c6:28:26:2e:00:08:3f:c5:e3:03:1e:62:91:bd:
b0:db:d9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:57:28 2024 by rpki-client on console-fra.rpki-client.org