Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/lZSHHyIf1Pt5mukLBTXmb9Htng8.roa
File: lZSHHyIf1Pt5mukLBTXmb9Htng8.roa (raw, json)
Hash identifier: SKNANHn0n4DJfcQ5HRrSuyKMsxiarP/ljfw2pANGwpo=
Subject key identifier: 95:94:87:1F:22:1F:D4:FB:79:9A:E9:0B:05:35:E6:6F:D1:ED:9E:0F
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 018FC61652547965CCB40ECE92DBCCDF7334
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/lZSHHyIf1Pt5mukLBTXmb9Htng8.roa
Signing time: Wed 29 May 2024 20:41:42 +0000
ROA not before: Wed 29 May 2024 20:41:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2281
IP address blocks: 2a01:c9c0:8020::/48 maxlen: 64
2a01:c9c0:802f::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 21:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c6:16:52:54:79:65:cc:b4:0e:ce:92:db:cc:df:73:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: May 29 20:41:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9594871f221fd4fb799ae90b0535e66fd1ed9e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9a:aa:e9:3a:89:72:cb:5b:e9:72:fb:ba:f4:
41:42:07:64:4e:8f:a2:15:b5:2c:21:75:08:87:4c:
1c:5b:b7:9c:27:0d:8a:13:29:bb:88:46:ec:79:54:
f7:11:02:a8:78:2d:9e:97:c8:69:0a:79:93:46:fa:
0f:aa:3c:b2:72:2c:3f:cd:fc:56:12:27:52:16:4a:
4d:c0:91:51:87:58:ab:2d:c6:54:de:e4:69:c3:06:
3f:93:b0:63:88:c2:7e:4d:6c:0d:4b:cf:76:b1:7a:
e5:a8:53:c1:54:77:3a:68:d8:29:c8:d8:c5:c4:40:
b5:54:ed:74:4d:4e:c4:13:71:cb:b3:e4:26:c9:1d:
01:77:78:f3:8c:08:a6:3d:84:b5:55:f1:bf:43:58:
73:25:40:4c:e2:39:05:5a:04:a1:cd:20:6f:cf:2b:
79:78:1f:10:cc:a9:a4:bd:5d:26:0e:d0:05:e4:12:
20:36:ea:f6:01:b3:db:db:d6:fb:73:df:61:b3:cb:
53:f1:3d:15:52:c5:ef:81:8c:77:f4:df:b4:fd:ad:
96:1f:d0:48:24:58:4a:ff:c2:eb:cc:7c:28:ba:be:
9b:47:e9:c0:bd:75:57:e4:8b:79:7c:92:12:fa:7a:
9c:07:c1:3d:14:da:15:c1:b1:0c:56:d0:f4:ec:15:
42:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:94:87:1F:22:1F:D4:FB:79:9A:E9:0B:05:35:E6:6F:D1:ED:9E:0F
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/lZSHHyIf1Pt5mukLBTXmb9Htng8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:c9c0:8020::/48
2a01:c9c0:802f::/48
Signature Algorithm: sha256WithRSAEncryption
74:ed:5c:b3:1f:64:36:d3:e0:bd:bf:df:e0:55:3b:86:1c:0a:
33:2c:75:d1:e4:e5:b8:69:10:7b:82:fc:d6:ee:5a:af:44:4c:
ae:ad:cb:d0:cb:64:e1:f7:c1:2f:54:1a:ab:31:49:ea:2a:fc:
56:74:62:3e:2b:bc:18:75:7a:5b:dd:fb:ed:2b:31:20:30:63:
d8:e2:04:6f:24:c6:7a:25:fb:4f:ca:7b:b6:37:3f:fe:98:92:
7d:80:9d:8d:ef:4d:54:51:19:38:b7:1d:c1:11:b5:76:3e:dc:
f2:c3:fe:ca:16:f0:ef:4b:dc:41:07:1e:a2:82:cf:57:68:15:
83:92:e7:15:97:cc:a0:ae:85:c0:9f:51:eb:b1:92:8d:87:89:
7b:96:2e:9e:c8:32:23:71:9a:e5:ab:12:75:98:cc:4f:47:87:
f4:3e:6c:62:0f:3c:4f:38:39:80:c2:f4:08:76:50:0f:93:e3:
80:b5:36:c0:2a:b2:95:09:6f:e0:27:fc:d2:35:ff:d0:33:5d:
64:48:70:30:af:30:66:e0:39:8d:2e:7b:3f:b4:c4:2f:4b:49:
09:13:a9:c1:ce:aa:22:67:90:d2:44:15:a8:d4:6f:09:d3:64:
0d:5f:db:6e:2d:a3:26:82:e2:48:66:ee:3e:87:8e:d9:49:ba:
ec:f2:09:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 05:04:18 2024 by rpki-client on console-ams.rpki-client.org