Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/ZQ5OAAV6EJIJn3rL4kGgiIXzy88.roa
File: ZQ5OAAV6EJIJn3rL4kGgiIXzy88.roa (raw, json)
Hash identifier: LEB3SN5mpwdKHZE8ZTUlpUajjQB1sefUlhOdKM1MwR8=
Subject key identifier: 65:0E:4E:00:05:7A:10:92:09:9F:7A:CB:E2:41:A0:88:85:F3:CB:CF
Certificate issuer: /CN=83286fa6da7d252e7828f84923f55919142b007f
Certificate serial: 018F53938C7600A8FA4A1631E4C8E02A2320
Authority key identifier: 83:28:6F:A6:DA:7D:25:2E:78:28:F8:49:23:F5:59:19:14:2B:00:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyhvptp9JS54KPhJI_VZGRQrAH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/ZQ5OAAV6EJIJn3rL4kGgiIXzy88.roa
Signing time: Tue 07 May 2024 15:02:09 +0000
ROA not before: Tue 07 May 2024 15:02:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199714
IP address blocks: 2a05:400::/29 maxlen: 29
2a05:400::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyhvptp9JS54KPhJI_VZGRQrAH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:53:93:8c:76:00:a8:fa:4a:16:31:e4:c8:e0:2a:23:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83286fa6da7d252e7828f84923f55919142b007f
Validity
Not Before: May 7 15:02:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=650e4e00057a1092099f7acbe241a08885f3cbcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:59:20:3c:25:6c:61:75:27:51:01:b1:57:0d:
4e:b8:9a:d6:6c:cd:af:14:32:cf:f2:5b:fb:3d:3d:
2f:72:4c:c5:aa:c3:ee:a9:62:2e:10:a8:0b:8f:1a:
be:0d:95:a3:8b:9b:44:b3:06:f0:bd:f5:13:33:41:
1b:9b:40:8d:f0:9b:b3:57:28:de:68:86:b9:47:93:
74:f7:f3:4a:19:ea:96:8f:c8:e0:a3:c0:44:23:a6:
6f:27:1b:ad:1c:77:d3:a0:b7:d1:32:f5:23:46:8a:
d2:97:91:f4:af:94:1d:fa:2f:61:86:e5:ad:b2:6e:
c6:61:21:6d:7b:66:d1:4a:bc:28:9b:94:64:8e:84:
9f:98:6e:f7:7a:1a:99:5c:1e:f7:79:95:19:99:7a:
51:b5:b1:29:c6:b1:de:9d:0a:78:c4:a4:e6:6b:0b:
03:71:90:05:72:9e:85:4f:ed:33:99:70:3e:ea:d0:
b9:7f:66:d6:25:02:6f:8a:21:27:cd:56:0f:08:08:
fc:53:c2:f4:0d:01:cd:99:03:04:5c:79:cc:4f:45:
39:ae:07:0a:f5:b0:98:53:6f:fc:96:a9:af:e2:2b:
d1:a4:26:57:10:2e:72:ef:3d:33:87:c0:c4:ba:cc:
b7:d2:d4:b6:d8:d7:c9:f5:da:49:b5:90:77:c4:a7:
38:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0E:4E:00:05:7A:10:92:09:9F:7A:CB:E2:41:A0:88:85:F3:CB:CF
X509v3 Authority Key Identifier:
keyid:83:28:6F:A6:DA:7D:25:2E:78:28:F8:49:23:F5:59:19:14:2B:00:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyhvptp9JS54KPhJI_VZGRQrAH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/ZQ5OAAV6EJIJn3rL4kGgiIXzy88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:400::/29
Signature Algorithm: sha256WithRSAEncryption
28:76:95:11:f1:2a:b4:aa:24:ad:07:f4:ba:04:da:ed:b9:a7:
25:b8:85:1a:a5:2d:3c:b8:16:41:89:80:d1:b0:39:27:ff:c2:
03:e5:86:ce:3d:ce:f7:42:bf:da:5d:99:b8:92:c1:1f:62:ef:
dc:32:de:f0:10:b6:ce:20:73:12:4f:80:a7:d6:01:74:2a:5c:
4e:b4:a6:c6:5e:e3:01:59:5a:dd:f1:1b:d7:0c:50:c7:e4:ed:
e4:e8:ce:ff:32:84:cc:2d:b9:27:0b:0b:64:e9:6c:45:7c:08:
fc:b3:83:80:db:f6:5a:4b:73:e5:a9:61:00:29:01:3e:8c:6e:
bd:38:76:e3:fe:37:96:85:c6:bf:1c:05:0a:54:39:15:13:5a:
9d:85:08:1c:99:7c:74:f6:8d:ed:9b:b7:a8:32:90:1b:16:97:
19:77:8b:3f:b9:75:08:3a:cb:31:91:6c:1e:fa:e6:93:fc:5f:
2c:8b:6a:99:b8:d3:83:5c:fa:60:98:2f:31:36:86:8a:54:6a:
ee:48:fe:bf:e4:da:c6:93:40:d1:c0:1c:a7:b9:fd:79:fb:bc:
ac:b9:5d:1e:84:a2:46:2c:bb:38:1c:78:77:35:73:73:53:e0:
8a:10:98:b5:7e:9a:26:75:9b:4a:3f:29:f9:55:e6:e0:5f:20:
de:6a:fe:e1
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAY9Tk4x2AKj6ShYx5MjgKiMgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMjg2ZmE2ZGE3ZDI1MmU3ODI4Zjg0OTIzZjU1OTE5MTQy
YjAwN2YwHhcNMjQwNTA3MTUwMjA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTBlNGUwMDA1N2ExMDkyMDk5ZjdhY2JlMjQxYTA4ODg1ZjNjYmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFkgPCVsYXUnUQGxVw1OuJrWbM2v
FDLP8lv7PT0vckzFqsPuqWIuEKgLjxq+DZWji5tEswbwvfUTM0Ebm0CN8JuzVyje
aIa5R5N09/NKGeqWj8jgo8BEI6ZvJxutHHfToLfRMvUjRorSl5H0r5Qd+i9hhuWt
sm7GYSFte2bRSrwom5RkjoSfmG73ehqZXB73eZUZmXpRtbEpxrHenQp4xKTmawsD
cZAFcp6FT+0zmXA+6tC5f2bWJQJviiEnzVYPCAj8U8L0DQHNmQMEXHnMT0U5rgcK
9bCYU2/8lqmv4ivRpCZXEC5y7z0zh8DEusy30tS22NfJ9dpJtZB3xKc49wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFGUOTgAFehCSCZ96y+JBoIiF88vPMB8GA1UdIwQY
MBaAFIMob6bafSUueCj4SSP1WRkUKwB/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3lodnB0cDlKUzU0S1BoSklfVlpHUlFyQUg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9lYzU4M2QtMWFiYS00Nzk4LTg4MTct
ZDZjOWM2ZTg2OTIzLzEvWlE1T0FBVjZFSklKbjNyTDRrR2dpSVh6eTg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9lYzU4M2QtMWFiYS00Nzk4LTg4MTctZDZjOWM2ZTg2OTIz
LzEvZ3lodnB0cDlKUzU0S1BoSklfVlpHUlFyQUg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgUEADAN
BgkqhkiG9w0BAQsFAAOCAQEAKHaVEfEqtKokrQf0ugTa7bmnJbiFGqUtPLgWQYmA
0bA5J//CA+WGzj3O90K/2l2ZuJLBH2Lv3DLe8BC2ziBzEk+Ap9YBdCpcTrSmxl7j
AVla3fEb1wxQx+Tt5OjO/zKEzC25JwsLZOlsRXwI/LODgNv2Wktz5alhACkBPoxu
vTh24/43loXGvxwFClQ5FRNanYUIHJl8dPaN7Zu3qDKQGxaXGXeLP7l1CDrLMZFs
Hvrmk/xfLItqmbjTg1z6YJgvMTaGilRq7kj+v+TaxpNA0cAcp7n9efu8rLldHoSi
Riy7OBx4dzVzc1PgihCYtX6aJnWbSj8p+VXm4F8g3mr+4Q==
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:51:07 2024 by rpki-client on console-ams.rpki-client.org