Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ZKrJ-o0jQc3fZjYn7OKZf_S2TZ8.roa
File: ZKrJ-o0jQc3fZjYn7OKZf_S2TZ8.roa (raw, json)
Hash identifier: SBNokp+31CrMurCRM/fjcheDjzeBSs+7ZWjYWmS4GZk=
Subject key identifier: 64:AA:C9:FA:8D:23:41:CD:DF:66:36:27:EC:E2:99:7F:F4:B6:4D:9F
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018F26A6E50E36C8D7B33D2826A03CD14F10
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ZKrJ-o0jQc3fZjYn7OKZf_S2TZ8.roa
Signing time: Sun 28 Apr 2024 21:40:22 +0000
ROA not before: Sun 28 Apr 2024 21:40:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 2a0c:9a40:8060::/44 maxlen: 44
2a0c:9a40:9c10::/44 maxlen: 48
2a0c:9a40:9c20::/44 maxlen: 48
2a0c:9a40:9c90::/44 maxlen: 48
2a0c:9a40:9ca0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:26:a6:e5:0e:36:c8:d7:b3:3d:28:26:a0:3c:d1:4f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Apr 28 21:40:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64aac9fa8d2341cddf663627ece2997ff4b64d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:87:0a:da:10:dd:29:30:9e:70:cc:39:b4:fb:
c9:87:c1:87:58:b6:97:78:ed:a6:87:84:cf:cd:83:
84:a9:ec:b3:9a:0e:b0:ca:40:ec:c0:80:12:e5:9f:
e1:70:47:f9:f0:22:d9:c0:f6:ed:1b:79:a7:59:b6:
5f:0c:40:0a:e0:97:01:35:15:0b:67:dd:3a:2c:10:
c4:d1:41:8b:8c:5f:f0:e3:c0:f7:56:b4:4f:fb:12:
e3:a3:bb:94:22:19:61:41:0f:06:e1:ae:83:36:56:
27:3e:7b:bf:87:5a:e7:c9:0b:55:85:81:88:d5:b4:
b6:59:22:5a:8d:36:94:38:3c:e9:2d:55:6b:9b:19:
a2:50:50:63:e7:20:93:b8:2f:e1:64:18:be:de:0a:
63:9c:86:27:1d:2a:0e:d7:5e:ce:72:4d:f5:89:10:
2b:92:54:72:8c:25:25:bd:ad:f7:c6:ec:e4:85:f5:
13:f0:8a:33:1c:64:30:41:93:32:93:eb:70:cf:3e:
d8:b2:d6:22:96:b3:96:43:69:3e:c2:8a:0b:66:8f:
e2:3a:48:70:c0:ab:e8:cd:0f:12:61:8a:55:21:e9:
b0:7b:e8:2c:46:89:e8:ff:91:72:26:84:17:25:04:
ad:82:00:cf:11:5d:ea:31:83:ef:77:31:58:be:83:
2a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AA:C9:FA:8D:23:41:CD:DF:66:36:27:EC:E2:99:7F:F4:B6:4D:9F
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ZKrJ-o0jQc3fZjYn7OKZf_S2TZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8060::/44
2a0c:9a40:9c10::-2a0c:9a40:9c2f:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:9c90::-2a0c:9a40:9caf:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
ce:4e:40:c0:d6:0e:06:39:d1:e8:8e:9f:e8:3e:59:d1:8a:90:
17:b3:43:a5:45:7d:09:e7:60:00:9c:d0:8c:c3:b6:ef:8d:09:
27:6b:a0:cb:96:d8:27:65:18:ec:a4:d0:39:77:2d:01:bc:7e:
13:d9:de:87:a6:4d:43:cb:bd:f7:30:12:40:46:3f:13:3e:18:
c1:e4:c4:5b:bf:bd:06:f5:19:28:b2:f8:cf:60:c3:bf:6b:dc:
5d:6d:de:00:92:4c:7c:7c:4d:d6:b0:86:2a:a3:55:e4:b9:40:
f9:99:39:5d:e8:f8:c9:71:99:15:e7:79:aa:ac:28:4d:38:d0:
28:60:8a:4e:19:66:8a:df:d9:c1:27:72:07:24:5f:51:37:3c:
3a:7b:f2:cb:69:52:ed:b6:b3:da:41:b4:c5:59:95:35:0f:ec:
31:24:a7:b9:9e:66:86:a5:bf:c4:b0:33:f5:2c:41:82:b0:50:
22:73:86:42:0a:db:ff:bc:b2:cb:e3:b4:20:6b:42:c0:ae:30:
2e:19:4a:91:ea:23:45:cd:c8:32:a3:d7:44:0e:27:45:98:66:
c3:01:32:2a:b6:40:75:11:60:ee:7c:ad:db:e2:8f:17:b7:0a:
8f:9c:66:17:26:e2:a6:6b:d7:a1:b9:aa:a7:32:34:93:ba:a9:
18:c6:ff:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:07:51 2024 by rpki-client on console-fra.rpki-client.org