Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/ZkWqSLNEX0hnt15ZiotyZBfmPow.roa
File: ZkWqSLNEX0hnt15ZiotyZBfmPow.roa (raw, json)
Hash identifier: +LfvG6wJi+4LJfX/C0wFxkVu5FqDQ0l8L4C8zybV3Dg=
Subject key identifier: 66:45:AA:48:B3:44:5F:48:67:B7:5E:59:8A:8B:72:64:17:E6:3E:8C
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 019178B60EA253B7C3EC04C55385AD54A8B3
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/ZkWqSLNEX0hnt15ZiotyZBfmPow.roa
Signing time: Thu 22 Aug 2024 06:11:22 +0000
ROA not before: Thu 22 Aug 2024 06:11:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 2a11:f240::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:78:b6:0e:a2:53:b7:c3:ec:04:c5:53:85:ad:54:a8:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Aug 22 06:11:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6645aa48b3445f4867b75e598a8b726417e63e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:16:d5:e9:7f:b1:38:54:c0:57:9d:b7:c0:3d:
26:bd:cd:61:b3:1a:4d:ba:15:a5:cc:fc:4e:58:c6:
c8:3a:96:95:c3:ad:f5:ac:77:eb:37:5d:87:b0:cf:
20:7f:f6:43:3a:60:ec:97:74:23:3f:89:43:ab:55:
a7:1d:26:e8:c4:2a:52:0c:94:14:2e:6d:4e:c6:8f:
91:57:1a:b7:2f:b7:83:0c:9a:c6:ae:36:75:7c:f5:
75:72:a8:f4:b0:d2:bb:dc:5a:68:1b:15:58:b1:21:
7b:19:b2:56:84:df:7d:db:d4:97:1a:8b:6f:cd:ae:
1f:de:fb:0f:14:9e:55:74:56:b2:23:87:f2:3f:2f:
13:18:48:48:6c:f8:25:ea:d8:e4:0d:cb:8a:40:eb:
44:92:a3:99:be:74:04:10:07:ac:98:3b:bf:90:98:
52:f7:24:c0:95:ae:8e:3d:a3:c5:38:05:ce:62:f9:
ca:29:06:ff:4e:5e:01:47:b6:1a:c9:47:b0:64:1a:
8a:68:8d:e6:d1:7a:31:8f:a6:68:27:22:b9:65:a6:
2d:2c:6b:10:5d:2e:4d:56:e9:0f:ec:a1:8f:06:ab:
07:7e:11:bd:51:d1:4c:4b:9c:53:84:e8:83:b7:18:
20:78:ca:e9:81:2d:d9:e0:fc:03:6a:c0:e4:a5:d2:
19:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:45:AA:48:B3:44:5F:48:67:B7:5E:59:8A:8B:72:64:17:E6:3E:8C
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/ZkWqSLNEX0hnt15ZiotyZBfmPow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f240::/29
Signature Algorithm: sha256WithRSAEncryption
2b:93:f7:a5:39:af:54:a5:1a:25:df:50:c0:96:0b:70:a6:47:
69:77:ac:f8:19:26:e8:b3:df:ea:7f:ab:52:ef:23:c4:64:e9:
53:a7:78:9b:ef:49:9a:97:8e:5d:f9:ac:07:6e:33:14:89:09:
2e:78:e6:f8:eb:08:e4:61:4f:57:93:63:e2:1e:4e:1d:15:56:
14:dc:bf:7a:21:0a:17:26:a5:8f:39:2e:49:6f:7d:3f:4a:0c:
ba:9e:05:da:eb:07:7d:e2:ce:11:9a:e3:1c:e3:e9:3b:90:91:
d2:bf:84:e9:c0:ff:27:d2:5e:0a:01:60:0a:5a:e3:49:4c:6c:
d4:34:f2:0b:5c:50:d2:6e:07:70:59:3e:fb:87:80:74:19:03:
c8:01:32:a3:cc:ab:3e:d1:be:02:3b:b6:e0:f5:5b:cd:0d:29:
dd:7d:b8:b8:df:51:c1:b7:dc:02:d1:2f:d6:45:7f:6a:68:a3:
4e:f9:f6:38:0a:ab:61:c4:7c:3f:f3:e3:83:09:94:6a:3e:20:
d6:69:25:70:20:29:dd:87:15:0b:40:1e:9c:90:51:44:10:6e:
20:0c:75:d7:2b:93:44:29:84:70:30:d2:df:7d:2c:85:4c:e9:
f7:6d:86:ea:42:d1:68:a2:63:57:cf:6b:ce:78:8a:ec:53:00:
26:cb:bf:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:36:39 2024 by rpki-client on console-fra.rpki-client.org