Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/zse0o_iVmfmbFipTgxMTrqtUOPw.roa
File: zse0o_iVmfmbFipTgxMTrqtUOPw.roa (raw, json)
Hash identifier: u9fjSRENGQLwjGKJrLE533a5i4ytxRMwChFqJFMv5n4=
Subject key identifier: CE:C7:B4:A3:F8:95:99:F9:9B:16:2A:53:83:13:13:AE:AB:54:38:FC
Certificate issuer: /CN=d6e535ef216ebe6f7fc55cfbdc31532b912d8e63
Certificate serial: 018CC86F31EA50E87D777BE06B353FFD733B
Authority key identifier: D6:E5:35:EF:21:6E:BE:6F:7F:C5:5C:FB:DC:31:53:2B:91:2D:8E:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/zse0o_iVmfmbFipTgxMTrqtUOPw.roa
Signing time: Tue 02 Jan 2024 04:29:39 +0000
ROA not before: Tue 02 Jan 2024 04:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31736
IP address blocks: 192.162.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:31:ea:50:e8:7d:77:7b:e0:6b:35:3f:fd:73:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6e535ef216ebe6f7fc55cfbdc31532b912d8e63
Validity
Not Before: Jan 2 04:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cec7b4a3f89599f99b162a53831313aeab5438fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cf:9d:b4:b3:55:e4:cb:18:4d:18:d2:6a:d7:
a7:ee:0f:2a:d0:96:8c:a2:3d:3a:f0:b8:e6:9d:62:
f6:f2:2a:aa:a1:13:16:a4:a3:e9:36:ff:b8:ae:f7:
5d:7c:0b:af:52:e2:f8:f1:d6:b6:54:1d:93:65:2f:
46:4f:e8:5b:be:7f:de:3c:eb:f8:a9:fc:a6:1e:e6:
a7:06:08:65:65:5b:ce:f9:69:7a:b0:94:44:f7:03:
88:3d:37:45:cd:b1:6b:00:d4:69:b1:c6:ca:b9:e6:
4b:29:b4:45:7b:28:1f:2e:93:ec:f6:39:ce:8b:41:
c0:f5:64:95:7a:91:43:9e:9a:6a:74:a6:af:d4:29:
d0:ab:af:62:64:ef:a3:80:14:05:f6:5a:ab:b8:1b:
db:30:1d:11:60:a6:12:91:13:fd:bc:30:fd:25:70:
80:25:1c:1e:78:ea:05:0d:8a:10:2b:5e:af:8e:6c:
ce:66:bc:5e:47:48:80:2a:9b:bf:e0:f5:73:05:3a:
e3:c3:f5:31:29:ef:67:e3:05:20:66:84:78:49:3d:
f7:f4:8c:b1:b5:99:ab:dd:c4:93:67:8b:55:92:26:
da:94:ac:29:a0:54:84:c4:31:08:91:31:f3:81:f0:
fd:fc:68:b1:04:4a:d0:79:2f:f3:6d:50:41:3a:fa:
86:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C7:B4:A3:F8:95:99:F9:9B:16:2A:53:83:13:13:AE:AB:54:38:FC
X509v3 Authority Key Identifier:
keyid:D6:E5:35:EF:21:6E:BE:6F:7F:C5:5C:FB:DC:31:53:2B:91:2D:8E:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/zse0o_iVmfmbFipTgxMTrqtUOPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.162.28.0/22
Signature Algorithm: sha256WithRSAEncryption
35:db:10:e5:10:aa:a9:86:46:0b:5c:e7:7f:0e:c8:64:a0:1e:
eb:8e:b2:5b:eb:36:b2:ee:d7:16:62:fc:a8:bc:13:14:2a:33:
14:f6:de:82:fc:30:15:19:0a:8a:b9:76:df:e6:64:b8:a8:30:
66:26:46:fe:9b:dc:97:96:48:eb:80:8d:04:0f:82:1b:cd:28:
b0:59:82:8b:6a:f8:47:35:ee:b7:49:69:16:7d:92:78:24:2d:
d4:71:75:7b:17:6d:0a:a5:50:97:db:66:bc:31:d2:9d:21:f8:
a9:85:01:f7:16:ea:0a:3a:00:29:42:c7:96:af:c6:71:5b:c3:
9f:31:60:25:0e:bb:ff:a5:9f:ee:c0:e9:0a:5b:7b:b8:5d:9f:
a0:98:9f:93:4b:e6:b2:3a:79:91:64:e8:1b:1a:89:a1:20:04:
8f:3d:b6:8a:59:0c:4c:73:54:eb:a4:c3:df:03:55:cd:55:14:
5e:a0:c9:27:2e:19:c8:e9:51:d3:2a:47:84:ab:cd:2f:69:7f:
41:73:4c:6c:b6:ad:13:0c:3c:37:84:2a:86:7b:56:79:01:5d:
3a:9f:f4:fa:4c:6e:8a:ea:a5:2a:9c:d7:81:ba:db:f5:15:58:
1d:48:13:f9:42:c1:0b:ee:03:ef:b7:f0:4e:8f:52:4a:60:4d:
a8:65:46:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 05:49:41 2024 by rpki-client on console-ams.rpki-client.org