Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/6zy-yGteu_QOVFVheLJN_EIBs-s.roa
File: 6zy-yGteu_QOVFVheLJN_EIBs-s.roa (raw, json)
Hash identifier: ZAlLfdGsy3DtB3HP6kSfOQPV49frEoIuZGrOEiK2PSU=
Subject key identifier: EB:3C:BE:C8:6B:5E:BB:F4:0E:54:55:61:78:B2:4D:FC:42:01:B3:EB
Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial: 018CC50157060F1794D7E52EE3311CC9EB16
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/6zy-yGteu_QOVFVheLJN_EIBs-s.roa
Signing time: Mon 01 Jan 2024 12:30:48 +0000
ROA not before: Mon 01 Jan 2024 12:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48292
IP address blocks: 2a0f:6580:9::/48 maxlen: 48
2a0f:6580:4::/48 maxlen: 48
2a0f:6580:f::/48 maxlen: 48
2a0f:6580:a::/48 maxlen: 48
2a0f:6580:d::/48 maxlen: 48
2a0f:6580:8::/48 maxlen: 48
2a0f:6580:103::/48 maxlen: 48
2a0f:6580:3::/48 maxlen: 48
2a0f:6580:e::/48 maxlen: 48
2a0f:6580:101::/48 maxlen: 48
2a0f:6580:1::/48 maxlen: 48
2a0f:6580:c::/48 maxlen: 48
2a0f:6580:7::/48 maxlen: 48
2a0f:6580:102::/48 maxlen: 48
2a0f:6580:2::/48 maxlen: 48
2a0f:6580:5::/48 maxlen: 48
2a0f:6580::/48 maxlen: 48
2a0f:6580:b::/48 maxlen: 48
2a0f:6580:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:57:06:0f:17:94:d7:e5:2e:e3:31:1c:c9:eb:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
Validity
Not Before: Jan 1 12:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb3cbec86b5ebbf40e54556178b24dfc4201b3eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e1:c3:a6:11:a6:f3:7a:c0:42:dd:15:b5:7c:
99:e1:b7:54:5b:27:83:42:a1:04:94:52:1e:54:7f:
82:61:9f:4b:71:45:1f:81:ea:de:6b:4a:f0:6f:5f:
43:88:8a:8b:b6:29:8f:bd:22:e6:9b:bd:89:ec:63:
f0:7c:60:c0:40:f0:8d:53:79:55:c2:c3:87:4d:15:
df:56:5f:b1:78:ac:ad:1f:38:1f:63:6d:43:0e:8d:
66:85:1d:ef:3b:b2:f5:d6:65:35:58:e2:dd:cb:1c:
59:1a:c5:6b:7d:7b:0c:56:26:6b:e1:86:44:60:b4:
da:e6:54:aa:5a:1b:d7:c1:7c:42:b7:d3:61:83:a9:
b0:af:84:04:e9:46:5a:ea:89:70:05:81:64:fe:3d:
2f:10:c7:14:59:42:8e:ea:79:c5:e2:65:db:76:e6:
79:06:dc:45:88:7d:22:6c:73:8e:eb:8c:c2:a3:d1:
ac:48:39:6b:3e:d3:66:23:be:f5:c7:e8:4e:21:e3:
46:a0:5e:44:2b:46:b1:d3:d3:92:32:63:0c:70:07:
6f:b5:d6:17:9a:31:9f:9c:23:b9:8b:95:5d:a3:57:
ff:83:f5:06:c4:39:0d:b4:1d:3d:e3:f8:94:3c:0b:
f7:1f:4b:c3:43:c5:43:2f:d5:67:86:92:d9:ce:ff:
5f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3C:BE:C8:6B:5E:BB:F4:0E:54:55:61:78:B2:4D:FC:42:01:B3:EB
X509v3 Authority Key Identifier:
keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/6zy-yGteu_QOVFVheLJN_EIBs-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6580::/44
2a0f:6580:101::-2a0f:6580:103:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
11:64:26:5d:41:1f:41:3b:93:ba:dc:2e:74:b8:14:03:69:b3:
a2:fc:e8:74:bb:37:aa:81:8d:52:88:55:34:a2:9a:07:cf:8a:
36:53:f4:35:f2:5c:35:38:e8:5d:51:b3:1b:b5:e8:cf:49:b9:
ec:4b:50:a1:fe:0a:de:99:f9:66:1b:51:23:21:25:d4:a2:de:
2d:d6:c5:ba:a0:37:27:cd:3b:73:a4:13:02:fd:7d:c2:3b:42:
86:81:52:17:9f:5c:8d:bc:d2:5c:c3:6e:10:1b:e0:55:6d:a5:
08:5a:b1:58:d1:14:45:d2:a9:2b:ef:ef:33:9f:47:e1:9f:2d:
bd:25:a0:10:9f:cc:d9:b5:5d:81:77:e9:e5:e0:76:8e:a2:35:
a8:c6:87:c0:aa:80:c9:73:4d:0c:08:51:f5:a5:f2:f4:d4:f7:
e3:d6:b9:d1:f6:a3:ab:ed:f2:00:dc:87:6c:38:3e:ab:72:f6:
be:82:2e:eb:04:5e:eb:fd:22:1c:25:9d:4f:22:6b:58:80:cd:
9e:97:13:ad:2e:fc:f7:8d:0c:eb:f4:be:96:ab:a5:78:e4:42:
e0:a0:65:58:47:e6:df:36:e4:f3:e9:04:f1:f5:c6:b7:5f:57:
ee:da:8a:e1:77:a1:5c:5d:99:81:55:db:9b:1f:c5:69:e7:c7:
51:ad:d3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 02:41:38 2024 by rpki-client on console-fra.rpki-client.org