Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/zvdRMGPMRcKYTHMEowW6INu-Kmg.roa
File: zvdRMGPMRcKYTHMEowW6INu-Kmg.roa (raw, json)
Hash identifier: FdktyFpuO4kADrw4+jj8W2kk0ECEF1/Ly1o1KaNpUOg=
Subject key identifier: CE:F7:51:30:63:CC:45:C2:98:4C:73:04:A3:05:BA:20:DB:BE:2A:68
Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial: 018DB1DA7AACEEB62D2CC9E364B3AD9FCA2E
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/zvdRMGPMRcKYTHMEowW6INu-Kmg.roa
Signing time: Fri 16 Feb 2024 12:18:21 +0000
ROA not before: Fri 16 Feb 2024 12:18:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202
IP address blocks: 2a03:5000:1::/48 maxlen: 48
2a03:5000:2::/48 maxlen: 48
2a03:5000:11::/48 maxlen: 48
2a03:5000:12::/48 maxlen: 48
2a03:5000:20::/48 maxlen: 48
2a03:5000:21::/48 maxlen: 48
2a03:5000:22::/48 maxlen: 48
2a03:5000:30::/48 maxlen: 48
2a03:5000:31::/48 maxlen: 48
2a03:5000:32::/48 maxlen: 48
2a03:5000:41::/48 maxlen: 48
2a03:5000:42::/48 maxlen: 48
2a03:5000:51::/48 maxlen: 48
2a03:5000:52::/48 maxlen: 48
2a03:5000:61::/48 maxlen: 48
2a03:5000:62::/48 maxlen: 48
2a03:5000:71::/48 maxlen: 48
2a03:5000:72::/48 maxlen: 48
2a03:5000:81::/48 maxlen: 48
2a03:5000:82::/48 maxlen: 48
2a03:5000:91::/48 maxlen: 48
2a03:5000:92::/48 maxlen: 48
2a03:5000:101::/48 maxlen: 48
2a03:5000:102::/48 maxlen: 48
2a03:5000:111::/48 maxlen: 48
2a03:5000:112::/48 maxlen: 48
2a03:5000:121::/48 maxlen: 48
2a03:5000:122::/48 maxlen: 48
2a03:5000:131::/48 maxlen: 48
2a03:5000:132::/48 maxlen: 48
2a03:5000:141::/48 maxlen: 48
2a03:5000:142::/48 maxlen: 48
2a03:5000:151::/48 maxlen: 48
2a03:5000:152::/48 maxlen: 48
2a03:5000:161::/48 maxlen: 48
2a03:5000:162::/48 maxlen: 48
2a03:5000:171::/48 maxlen: 48
2a03:5000:172::/48 maxlen: 48
2a03:5000:181::/48 maxlen: 48
2a03:5000:182::/48 maxlen: 48
2a03:5000:191::/48 maxlen: 48
2a03:5000:192::/48 maxlen: 48
2a03:5000:201::/48 maxlen: 48
2a03:5000:202::/48 maxlen: 48
2a03:5000:211::/48 maxlen: 48
2a03:5000:212::/48 maxlen: 48
2a03:5000:221::/48 maxlen: 48
2a03:5000:222::/48 maxlen: 48
2a03:5000:231::/48 maxlen: 48
2a03:5000:232::/48 maxlen: 48
2a03:5000:241::/48 maxlen: 48
2a03:5000:242::/48 maxlen: 48
2a03:5000:251::/48 maxlen: 48
2a03:5000:252::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b1:da:7a:ac:ee:b6:2d:2c:c9:e3:64:b3:ad:9f:ca:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Validity
Not Before: Feb 16 12:18:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cef7513063cc45c2984c7304a305ba20dbbe2a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ec:36:25:c4:33:18:4d:22:5c:ac:77:d0:fa:
5e:d6:cf:1b:0b:d2:44:1c:c8:87:42:01:50:e7:d2:
c7:0e:8d:dd:05:13:e4:b2:ff:61:04:8e:cc:ac:06:
90:39:dc:53:93:9a:61:5a:1f:a4:e5:53:ff:6f:08:
6f:12:f3:8b:d0:ec:0b:20:c6:f8:08:c0:0f:95:c8:
e6:24:a2:48:35:ac:8e:3f:87:c2:dd:98:f0:9a:78:
96:4f:b4:e2:63:b3:13:19:7d:a9:41:a7:1b:c0:b8:
a2:e3:cc:60:be:69:cf:54:f0:e0:9d:96:04:08:3b:
b9:5d:9a:9d:93:61:7f:b2:3e:05:39:b7:27:13:81:
69:b5:d7:0d:a6:09:40:0c:0c:16:cf:ac:9c:38:a7:
53:99:8c:e6:0b:6b:9c:81:4d:7a:8c:e2:f8:bb:83:
f5:a3:e6:12:e2:f7:55:b2:42:a9:62:b4:84:90:02:
bb:ef:27:35:20:7d:b4:76:c6:54:83:df:fb:70:96:
a7:97:12:d3:57:06:b6:62:c5:e0:d1:e8:f2:7c:44:
c9:a0:e8:c6:3c:79:b6:5b:5c:d6:4b:05:7e:63:17:
ae:26:71:cd:4f:9f:9f:1a:73:c5:5c:b0:fe:c0:58:
f8:21:e7:11:15:42:68:77:23:44:93:3a:47:ce:a9:
d3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F7:51:30:63:CC:45:C2:98:4C:73:04:A3:05:BA:20:DB:BE:2A:68
X509v3 Authority Key Identifier:
keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/zvdRMGPMRcKYTHMEowW6INu-Kmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5000:1::-2a03:5000:2:ffff:ffff:ffff:ffff:ffff
2a03:5000:11::-2a03:5000:12:ffff:ffff:ffff:ffff:ffff
2a03:5000:20::-2a03:5000:22:ffff:ffff:ffff:ffff:ffff
2a03:5000:30::-2a03:5000:32:ffff:ffff:ffff:ffff:ffff
2a03:5000:41::-2a03:5000:42:ffff:ffff:ffff:ffff:ffff
2a03:5000:51::-2a03:5000:52:ffff:ffff:ffff:ffff:ffff
2a03:5000:61::-2a03:5000:62:ffff:ffff:ffff:ffff:ffff
2a03:5000:71::-2a03:5000:72:ffff:ffff:ffff:ffff:ffff
2a03:5000:81::-2a03:5000:82:ffff:ffff:ffff:ffff:ffff
2a03:5000:91::-2a03:5000:92:ffff:ffff:ffff:ffff:ffff
2a03:5000:101::-2a03:5000:102:ffff:ffff:ffff:ffff:ffff
2a03:5000:111::-2a03:5000:112:ffff:ffff:ffff:ffff:ffff
2a03:5000:121::-2a03:5000:122:ffff:ffff:ffff:ffff:ffff
2a03:5000:131::-2a03:5000:132:ffff:ffff:ffff:ffff:ffff
2a03:5000:141::-2a03:5000:142:ffff:ffff:ffff:ffff:ffff
2a03:5000:151::-2a03:5000:152:ffff:ffff:ffff:ffff:ffff
2a03:5000:161::-2a03:5000:162:ffff:ffff:ffff:ffff:ffff
2a03:5000:171::-2a03:5000:172:ffff:ffff:ffff:ffff:ffff
2a03:5000:181::-2a03:5000:182:ffff:ffff:ffff:ffff:ffff
2a03:5000:191::-2a03:5000:192:ffff:ffff:ffff:ffff:ffff
2a03:5000:201::-2a03:5000:202:ffff:ffff:ffff:ffff:ffff
2a03:5000:211::-2a03:5000:212:ffff:ffff:ffff:ffff:ffff
2a03:5000:221::-2a03:5000:222:ffff:ffff:ffff:ffff:ffff
2a03:5000:231::-2a03:5000:232:ffff:ffff:ffff:ffff:ffff
2a03:5000:241::-2a03:5000:242:ffff:ffff:ffff:ffff:ffff
2a03:5000:251::-2a03:5000:252:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
6b:ac:c8:0e:51:9c:e1:2d:70:50:77:3b:0a:d0:19:32:6a:0c:
93:6b:cc:6e:c9:16:5c:e7:a8:9a:2b:0d:12:8b:56:52:54:6c:
a2:7b:f7:32:a1:7f:bc:d1:dd:7d:b7:b5:7d:0c:f5:65:67:a6:
ac:18:8a:5c:d1:8d:c9:dc:65:07:11:16:ec:ae:f7:76:c8:92:
77:c0:42:f5:e2:bc:b2:7e:05:e8:63:78:30:9e:ab:4d:32:52:
52:12:08:ae:b8:e2:11:92:1b:0b:6f:65:c5:0a:90:d7:2e:d6:
a5:48:2d:59:81:5a:d5:d9:4e:56:62:67:b1:1f:35:b7:40:92:
e5:ef:2e:08:4f:c8:59:13:5f:fe:d2:67:3c:60:37:65:7b:25:
9f:b5:34:1f:e5:fb:60:54:54:fd:4c:91:ef:7c:35:a1:71:84:
67:28:90:0f:d3:51:bd:ca:65:9a:13:f7:18:54:5e:87:6f:97:
b0:53:a9:ae:e2:b0:dd:a5:77:33:99:57:5e:d7:44:a4:12:c6:
71:8c:9c:52:ac:68:1e:a8:4e:96:ef:53:5e:1a:2a:2e:15:c0:
ee:ef:49:b8:33:6b:95:61:18:71:25:f1:6c:f1:e7:e2:ae:32:
fa:a5:98:76:80:c5:f0:85:f9:b9:5a:2d:96:37:1e:8c:f0:2f:
5c:d5:7f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:54:45 2024 by rpki-client on console-fra.rpki-client.org