Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/ZvnG0g0DgKiGT3PGynoZevJ4iBk.roa
File: ZvnG0g0DgKiGT3PGynoZevJ4iBk.roa (raw, json)
Hash identifier: pAp5zOZrQ4rwAm4sPMB+HWMUqqo2Lz6+K/Tp3MeFfDY=
Subject key identifier: 66:F9:C6:D2:0D:03:80:A8:86:4F:73:C6:CA:7A:19:7A:F2:78:88:19
Certificate issuer: /CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Certificate serial: 01904A12A68FB7C4D00DEC860BD16BA0A48A
Authority key identifier: F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/ZvnG0g0DgKiGT3PGynoZevJ4iBk.roa
Signing time: Mon 24 Jun 2024 11:47:34 +0000
ROA not before: Mon 24 Jun 2024 11:47:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213220
IP address blocks: 2a11:5a40::/32 maxlen: 32
2a11:5a42::/32 maxlen: 32
2a11:5a46::/32 maxlen: 32
2a12:1541::/32 maxlen: 32
2a12:7301::/32 maxlen: 32
2a12:7304::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:09:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4a:12:a6:8f:b7:c4:d0:0d:ec:86:0b:d1:6b:a0:a4:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Validity
Not Before: Jun 24 11:47:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66f9c6d20d0380a8864f73c6ca7a197af2788819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3a:89:9c:b3:cc:d2:e3:ba:11:1b:e4:cb:4f:
7f:8b:c2:c4:86:99:be:8b:c1:0c:d8:a8:d4:3d:4f:
17:e6:9b:c2:21:76:1f:75:3c:a3:3b:87:57:79:fe:
53:05:b0:63:73:cb:ee:c9:a5:3d:ed:b2:62:53:67:
1e:9c:fd:08:79:38:61:90:6e:6f:13:2a:96:42:b0:
3c:0b:d6:12:3a:e6:bf:f3:d8:eb:be:ba:d5:13:b1:
dd:cb:97:30:9a:80:40:7d:88:17:6d:dc:b2:11:29:
22:3e:44:28:c3:1f:26:7c:5d:4b:54:e8:7a:f9:f1:
ad:f8:1a:b6:1d:66:9c:cd:86:b7:bb:81:57:9f:89:
06:59:39:c6:8b:12:da:e8:4f:a4:db:20:dc:fc:2a:
78:44:91:8e:24:c5:02:33:fc:44:94:94:ab:74:e5:
02:37:61:93:39:1c:9c:c0:a3:d7:44:82:4c:a3:b9:
cb:70:52:96:26:24:95:10:84:cc:93:4d:5e:6b:dc:
a7:5b:e5:72:4b:5d:c1:dc:7f:08:84:20:38:25:a6:
94:ba:e8:85:14:22:5b:41:a6:c7:2b:6d:85:77:8a:
36:70:a3:67:fc:f2:b7:ab:50:77:7e:3c:c5:4d:c9:
1e:50:22:26:83:00:cf:95:83:7d:bd:b8:a9:1c:80:
e8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F9:C6:D2:0D:03:80:A8:86:4F:73:C6:CA:7A:19:7A:F2:78:88:19
X509v3 Authority Key Identifier:
keyid:F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/ZvnG0g0DgKiGT3PGynoZevJ4iBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:5a40::/32
2a11:5a42::/32
2a11:5a46::/32
2a12:1541::/32
2a12:7301::/32
2a12:7304::/32
Signature Algorithm: sha256WithRSAEncryption
92:32:2f:fc:8c:4f:11:df:cd:b4:ec:26:64:61:3d:2a:77:66:
2b:cc:bf:93:d0:53:76:69:17:92:aa:15:2e:0d:82:dd:9f:82:
1e:43:88:58:8a:f3:dc:d1:61:0f:3c:e4:cd:2d:83:17:8d:07:
4d:a6:6d:38:74:78:f0:63:45:bb:69:5c:d8:7f:af:37:ef:00:
ac:73:df:a1:71:64:97:4b:a1:92:95:4f:e3:a8:01:96:f7:b1:
1d:b0:d8:79:d8:3a:6c:ff:47:dc:eb:7e:6d:a1:8a:75:ae:5b:
db:fb:45:95:b0:10:d6:e1:05:d1:59:39:73:3b:58:10:ef:75:
e6:18:37:45:50:da:5d:c1:8d:4b:a9:53:62:e7:85:1d:cd:bc:
3b:a4:c5:ec:f4:71:ee:e4:22:89:09:f3:c1:10:65:93:b8:99:
6d:e9:b7:97:b1:33:c9:ed:6d:31:21:eb:39:6e:39:71:d5:dd:
47:11:8b:a5:9c:09:90:2d:7f:87:2b:27:c3:f4:5a:a6:c6:76:
43:15:cd:ee:d2:33:ed:d4:5b:d4:68:93:b3:a0:a2:c2:61:00:
16:f4:41:7c:06:41:45:f1:28:bc:03:a9:2c:72:52:40:26:60:
aa:4f:6a:fc:c6:e8:7f:08:3b:b2:15:60:28:a1:4d:33:c9:c8:
1d:5f:97:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:39:01 2024 by rpki-client on console-fra.rpki-client.org