Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zlO3UzekC22YZtEGNQ1Ta06waME.roa
File: zlO3UzekC22YZtEGNQ1Ta06waME.roa (raw, json)
Hash identifier: JRV/EdQx89eJZJD/0VXFhGels8qLH0LQrAW4craVNSA=
Subject key identifier: CE:53:B7:53:37:A4:0B:6D:98:66:D1:06:35:0D:53:6B:4E:B0:68:C1
Certificate issuer: /CN=ce08fe33a5f0ba0b286253505bbfb293220f5816
Certificate serial: 018CC492FCA67FE63D8F07BD93421B87B0D4
Authority key identifier: CE:08:FE:33:A5:F0:BA:0B:28:62:53:50:5B:BF:B2:93:22:0F:58:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zgj-M6XwugsoYlNQW7-ykyIPWBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zlO3UzekC22YZtEGNQ1Ta06waME.roa
Signing time: Mon 01 Jan 2024 10:30:16 +0000
ROA not before: Mon 01 Jan 2024 10:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28985
IP address blocks: 195.47.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zgj-M6XwugsoYlNQW7-ykyIPWBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:fc:a6:7f:e6:3d:8f:07:bd:93:42:1b:87:b0:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce08fe33a5f0ba0b286253505bbfb293220f5816
Validity
Not Before: Jan 1 10:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce53b75337a40b6d9866d106350d536b4eb068c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:49:b5:0c:14:13:b3:59:f4:3d:52:0b:5e:5b:
d3:f5:f1:1b:76:ea:e9:16:4c:8f:f5:ba:e8:8b:28:
de:8b:36:b2:4a:83:68:8a:27:31:78:92:00:70:43:
d8:25:5f:04:3b:24:b3:5a:77:74:92:5f:8d:2f:a3:
1a:b5:12:2a:21:b4:1c:ba:16:5e:fb:c1:15:e0:77:
dc:58:b5:59:77:ef:ab:33:1b:35:41:e8:50:52:c5:
9c:41:30:2f:1c:1e:3d:ee:02:a3:1d:65:51:ae:7a:
45:f2:9a:7c:a1:65:29:de:96:e3:50:da:c4:12:87:
2f:d4:81:d3:1b:0f:62:ff:09:ad:80:f9:e7:12:45:
71:d8:25:df:12:38:b8:e9:a1:04:82:d0:8d:e7:93:
d6:9c:cd:b9:bf:af:98:fb:a6:89:a0:33:1d:07:d7:
70:a5:c4:6a:09:4c:4d:82:7b:58:25:75:e8:26:db:
7c:9c:5a:5c:0d:8c:9b:3c:0c:e8:50:f3:03:16:f3:
2b:0c:3e:a9:e9:56:99:31:42:85:a0:9d:4b:21:a2:
cf:15:b9:03:1b:55:34:49:0e:7e:69:8f:ba:ba:eb:
bc:25:d5:e7:ed:0a:30:b0:24:48:08:b0:5c:61:88:
24:6f:b5:05:b2:94:48:42:18:14:81:49:13:b4:b3:
68:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:53:B7:53:37:A4:0B:6D:98:66:D1:06:35:0D:53:6B:4E:B0:68:C1
X509v3 Authority Key Identifier:
keyid:CE:08:FE:33:A5:F0:BA:0B:28:62:53:50:5B:BF:B2:93:22:0F:58:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgj-M6XwugsoYlNQW7-ykyIPWBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zlO3UzekC22YZtEGNQ1Ta06waME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.47.211.0/24
Signature Algorithm: sha256WithRSAEncryption
24:8d:60:61:0b:de:cc:b1:c9:c9:ff:e1:c7:60:cb:15:6e:73:
1e:5e:74:3f:a8:38:8a:15:f0:ff:a3:61:c5:03:27:83:a3:0a:
e5:a0:fc:14:0d:37:67:8b:62:0a:0a:0d:d5:0e:37:cd:a6:a4:
3a:97:ad:ff:69:fb:17:e0:32:34:49:81:ee:99:14:2e:16:59:
43:66:f3:1e:25:69:35:21:99:d8:3c:82:06:b9:7d:a1:00:a9:
92:d9:cf:d2:93:d7:31:06:6d:a4:e1:66:f2:5d:ef:1a:cf:53:
f7:c8:76:6f:b0:e4:cb:aa:ba:45:40:bd:c1:16:e7:90:8e:36:
16:b9:39:7f:d5:d4:1e:ae:d3:fd:fc:a7:4f:e8:39:b4:9c:56:
71:1b:fa:40:b0:b9:cf:34:f6:c9:56:19:3b:80:e4:15:e0:20:
85:4b:5f:85:38:bb:0f:90:c2:b2:27:65:a0:41:00:48:49:7c:
03:94:13:1a:0a:6b:13:20:38:7b:ed:4f:bc:a8:cf:bf:c0:5b:
48:6e:f1:3b:bb:d5:c9:c2:aa:cf:4e:67:be:36:8e:3e:45:ac:
67:70:70:54:87:67:b1:f3:45:31:1a:13:d6:76:4b:ab:06:42:
cc:0e:aa:fc:e5:fc:b2:6c:33:17:8d:25:16:ec:59:37:26:0f:
15:df:c0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:41:24 2024 by rpki-client on console-ams.rpki-client.org