Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/ZGFDPpoXHmUdR7LDhL45S3ojs3s.roa
File: ZGFDPpoXHmUdR7LDhL45S3ojs3s.roa (raw, json)
Hash identifier: U6aeKAX7h4jvimhg4ramgZh0VVsI9HiYjleS8tZfiyQ=
Subject key identifier: 64:61:43:3E:9A:17:1E:65:1D:47:B2:C3:84:BE:39:4B:7A:23:B3:7B
Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial: 018CC9BBFAEE952174B73A60DE78FEAD94D2
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/ZGFDPpoXHmUdR7LDhL45S3ojs3s.roa
Signing time: Tue 02 Jan 2024 10:33:08 +0000
ROA not before: Tue 02 Jan 2024 10:33:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 141039
IP address blocks: 2a13:240:4100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 18:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:fa:ee:95:21:74:b7:3a:60:de:78:fe:ad:94:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
Validity
Not Before: Jan 2 10:33:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6461433e9a171e651d47b2c384be394b7a23b37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:77:a7:3c:2e:f9:3f:36:55:77:78:4a:11:cd:
0c:db:80:76:f5:da:1c:30:d3:86:e7:0a:da:57:aa:
43:fa:c0:f2:1a:d2:e8:53:e8:ce:03:07:96:13:63:
c3:65:58:5e:c1:18:d1:03:99:ec:88:b0:f3:fe:9e:
a7:62:e5:78:ec:14:80:18:e2:8c:9d:d6:66:9d:e8:
ae:43:4e:80:a7:f3:bc:8b:80:52:86:bd:0c:5b:49:
10:9f:52:9b:2a:1e:15:65:b5:af:b9:aa:75:e3:6a:
2f:f5:61:24:82:95:0b:d6:82:53:81:5b:06:66:28:
12:d8:8c:42:d4:bc:e0:18:b8:8a:e7:de:9c:cf:64:
dd:bd:ee:f8:b2:36:d2:4b:15:8f:85:ff:b0:a4:41:
31:5a:00:df:8e:a8:39:d4:cd:f8:ce:7c:d9:66:39:
fe:e0:c6:6e:c3:28:95:43:a3:13:aa:ba:00:10:b4:
f5:aa:4f:0f:79:40:c9:5f:cd:98:7c:e3:26:07:98:
41:0e:6c:df:aa:29:13:31:1d:30:f1:81:05:58:3c:
03:dc:a6:06:b7:d0:90:d8:cb:31:8e:5c:3f:29:27:
35:3e:8e:66:16:7b:6d:33:81:84:8e:e2:40:c1:7b:
5e:30:a6:58:2b:cb:3a:46:61:7b:43:37:78:d1:f7:
6a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:61:43:3E:9A:17:1E:65:1D:47:B2:C3:84:BE:39:4B:7A:23:B3:7B
X509v3 Authority Key Identifier:
keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/ZGFDPpoXHmUdR7LDhL45S3ojs3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:240:4100::/40
Signature Algorithm: sha256WithRSAEncryption
a2:aa:03:be:55:5b:2c:2c:86:e1:be:37:70:03:07:8a:33:83:
c2:2e:7c:f6:4d:64:dc:bb:ce:3c:1d:41:c8:5c:ca:ef:3f:a8:
af:f9:9f:ab:dc:db:8c:8a:4f:a3:11:fb:5c:63:f9:0c:ed:d0:
92:32:58:2e:ac:03:47:e1:c8:13:49:fb:b6:a7:50:40:31:a3:
d6:e6:e2:41:86:53:1d:27:11:66:12:e1:4a:36:1d:6c:cf:87:
66:fd:ff:34:3d:cc:36:24:82:5d:91:3b:2c:06:c9:cf:f5:8e:
9f:ca:bd:25:30:32:26:7f:bb:28:8e:c5:bb:7f:a6:d8:02:9f:
71:ba:dd:85:59:24:d1:a9:8a:8a:dd:ce:69:0e:06:89:39:ef:
fc:74:85:d4:9b:6a:d2:1f:54:67:be:64:4a:14:49:a3:d1:da:
c0:8c:34:51:6b:29:d4:ff:27:2c:c6:63:58:40:8b:b2:e2:4a:
8e:4b:ef:bb:ab:1f:1e:e5:9a:b3:e4:67:ce:a7:09:ae:cd:b6:
00:63:3c:b7:10:90:7d:cf:2a:cc:e6:44:cb:8e:a9:49:b8:0b:
c1:42:4c:1b:c4:b9:2a:e1:09:d3:3c:9a:92:d3:c3:37:46:f3:
aa:36:b4:ce:48:0d:ea:6b:4b:68:af:1d:85:31:47:34:3e:1b:
e7:e3:0b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 23:00:34 2024 by rpki-client on console-ams.rpki-client.org