Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/Zg9y5VE1ip1W_zr3sJGo7UKwSBA.roa
File: Zg9y5VE1ip1W_zr3sJGo7UKwSBA.roa (raw, json)
Hash identifier: 3lblbwQKf5+qO1hOF2taPaUqeneGedzIAZ0mvWfe3Kc=
Subject key identifier: 66:0F:72:E5:51:35:8A:9D:56:FF:3A:F7:B0:91:A8:ED:42:B0:48:10
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 018CC8DE3160A000F446816522A166EE7372
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/Zg9y5VE1ip1W_zr3sJGo7UKwSBA.roa
Signing time: Tue 02 Jan 2024 06:30:54 +0000
ROA not before: Tue 02 Jan 2024 06:30:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47728
IP address blocks: 2a0d:c107:7::/48 maxlen: 48
2a0d:c107:4::/48 maxlen: 48
2a0d:c107:1::/48 maxlen: 48
2a0d:c107:9::/48 maxlen: 48
2a0d:c107:6::/48 maxlen: 48
2a0d:c107:3::/48 maxlen: 48
2a0d:c107::/32 maxlen: 32
2a0d:c107::/48 maxlen: 48
2a0d:c107:8::/48 maxlen: 48
2a0d:c107:5::/48 maxlen: 48
2a0d:c107:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 20:23:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:31:60:a0:00:f4:46:81:65:22:a1:66:ee:73:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 2 06:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=660f72e551358a9d56ff3af7b091a8ed42b04810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5e:f1:1d:af:aa:50:48:ef:7c:26:cf:bd:df:
27:35:86:ba:51:01:35:9e:a1:26:d2:11:2a:1f:bc:
a6:88:31:42:f6:6d:14:b5:84:4f:16:5d:70:f1:2f:
db:31:3d:b3:75:7d:ba:2b:3a:1d:32:0a:41:92:41:
57:52:73:cf:e3:03:2f:36:66:c5:0a:7c:87:a9:bc:
f5:df:d1:a3:c0:8a:b9:97:2d:01:ba:7a:e5:91:88:
f4:5f:88:2c:32:0a:5c:a4:39:5d:aa:88:63:1e:7e:
5d:82:6b:95:83:3b:75:cd:4c:d9:57:d7:98:47:22:
6f:cf:5f:41:c0:ec:f4:f1:19:ec:3c:5c:5c:92:9b:
83:89:0a:c4:2a:5e:3b:c9:64:44:5f:c1:ed:67:79:
f6:e2:e1:3f:5a:b0:47:ff:24:ca:d8:b8:c5:c9:4d:
65:bd:e9:6d:fd:17:c1:35:40:0d:3c:62:ad:c4:0d:
a8:bf:b3:71:37:90:8e:15:ff:53:73:d7:54:aa:d0:
ed:d2:4c:09:0a:88:ac:69:c3:9c:4e:63:da:b2:64:
d2:94:df:65:86:d3:8b:6f:75:bb:91:ce:2c:fb:b8:
41:69:27:7a:1b:fe:cc:e6:9b:0c:9e:f6:f4:cc:08:
3a:bf:a1:8c:84:1e:24:ab:0d:c2:48:4e:18:a6:b4:
3f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0F:72:E5:51:35:8A:9D:56:FF:3A:F7:B0:91:A8:ED:42:B0:48:10
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/Zg9y5VE1ip1W_zr3sJGo7UKwSBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:c107::/32
Signature Algorithm: sha256WithRSAEncryption
4b:4e:eb:94:95:ec:53:9a:6c:4e:ad:49:60:f5:23:94:91:ec:
96:e9:11:07:65:d0:6f:39:89:64:f3:10:01:6d:30:e4:98:e8:
dd:0e:b0:75:74:70:e0:48:96:2c:ba:ba:24:fa:26:e2:00:e5:
78:64:0b:8b:fb:9a:35:6e:b8:40:c9:f6:60:d6:61:72:9d:6d:
a0:a3:1a:dd:64:0b:30:fa:28:07:32:b9:35:e8:de:8c:b9:69:
b5:c6:71:4a:ae:4d:f5:b9:b0:63:cd:de:56:79:d5:76:27:27:
e5:66:fa:11:ec:8e:3e:be:45:6b:7f:64:ce:65:00:ea:f8:dc:
0a:b1:d1:af:da:01:ab:44:51:4b:40:48:e1:99:88:13:80:b0:
45:55:b4:59:53:18:80:84:30:ad:49:2f:0d:65:9b:c2:1b:fe:
5d:69:f0:39:e9:ec:f4:06:7a:5c:dc:79:3a:c3:88:1d:bb:d6:
f8:d3:40:c6:9d:10:92:fe:2b:f1:4a:c8:7b:ab:b2:27:8d:cc:
f8:a8:63:72:93:62:fc:65:04:2f:92:d0:23:3e:e6:d9:24:57:
c3:c3:10:29:c7:e4:af:e7:52:09:6c:9d:60:36:70:7b:7e:06:
c7:bf:a3:dd:79:02:bb:19:9b:b4:31:21:0e:b5:ae:8b:43:c9:
fa:13:cf:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 04:56:30 2024 by rpki-client on console-ams.rpki-client.org