Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ZExh3bqOYpyHPeP-QmcTtaHx5aY.roa
File: ZExh3bqOYpyHPeP-QmcTtaHx5aY.roa (raw, json)
Hash identifier: GHEzH2x+dEcgDVxM80KAqPZ3MUuVNaRegN1MeRIU6X0=
Subject key identifier: 64:4C:61:DD:BA:8E:62:9C:87:3D:E3:FE:42:67:13:B5:A1:F1:E5:A6
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 0192B0957289E7192DE264C945DD69DBC884
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ZExh3bqOYpyHPeP-QmcTtaHx5aY.roa
Signing time: Mon 21 Oct 2024 19:37:17 +0000
ROA not before: Mon 21 Oct 2024 19:37:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216157
IP address blocks: 2a0e:7300::/29 maxlen: 29
2a12:6100::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:09:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b0:95:72:89:e7:19:2d:e2:64:c9:45:dd:69:db:c8:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Oct 21 19:37:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=644c61ddba8e629c873de3fe426713b5a1f1e5a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a1:ef:c9:e1:0f:e3:33:ba:01:be:7b:18:99:
58:e6:81:ea:30:e7:ce:8e:93:45:6f:00:7b:b8:95:
b4:58:0b:6d:6a:61:a1:e3:ae:02:b7:d0:00:32:66:
e3:04:63:b4:09:4c:b5:fb:92:1d:93:54:c5:58:21:
47:e1:27:0b:f9:59:a9:04:95:b8:37:a5:98:1c:ff:
8d:a8:8d:23:42:9a:e8:62:b4:53:c1:44:c1:5b:35:
ae:a4:af:86:f3:29:83:41:a4:77:4d:fe:1a:ec:f7:
6e:63:15:d2:cc:39:24:9e:42:da:ed:07:28:09:a9:
3e:4f:b7:f6:16:32:06:72:f0:24:a2:6c:09:7f:24:
8c:91:8b:0b:c2:97:18:1d:84:54:31:b7:3a:e7:3b:
42:79:4c:1a:2e:85:e5:4d:24:2f:7d:8d:2f:53:00:
0d:95:01:b4:d4:0b:32:59:4b:5a:4b:37:e5:79:f0:
a3:66:93:03:51:80:6f:76:44:47:99:7b:8f:f6:22:
0f:75:6f:a1:46:ea:22:69:16:d9:31:1d:8d:5c:c9:
35:68:8d:17:c6:48:9a:62:7e:6a:5e:ed:6b:41:9f:
7e:1f:02:a6:ae:e3:c8:16:42:a3:3b:2d:72:c7:65:
9d:f9:96:fb:a4:6f:3c:75:d2:ad:1f:b1:5d:a6:b4:
53:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4C:61:DD:BA:8E:62:9C:87:3D:E3:FE:42:67:13:B5:A1:F1:E5:A6
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/ZExh3bqOYpyHPeP-QmcTtaHx5aY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:7300::/29
2a12:6100::/29
Signature Algorithm: sha256WithRSAEncryption
52:2e:1c:4b:5e:60:c9:ae:8a:50:81:7f:f5:20:48:64:4a:08:
cd:14:3d:e3:20:da:c2:77:da:80:ba:3d:29:0b:92:49:ae:40:
52:f2:e4:98:49:b5:66:3f:72:0a:3a:81:9b:3b:6f:a8:37:ec:
a0:7a:1f:2c:56:bc:d2:90:7a:7f:b2:53:55:59:59:bd:18:66:
a8:89:81:6f:f9:24:ea:01:2d:cc:dd:95:63:98:5f:3e:7e:05:
b1:ce:57:a9:93:ee:27:aa:26:7d:8e:cf:b5:99:73:97:5b:b2:
5d:69:ed:89:67:28:22:f4:c9:bf:89:24:00:cd:2a:d1:29:41:
56:f7:ac:d3:3e:83:4a:ce:73:76:23:d6:ce:c3:31:b7:70:fe:
69:93:15:fb:0f:ad:63:54:54:3a:6c:93:e0:c8:09:c2:62:67:
a0:60:ff:a1:43:8b:05:62:f7:c7:c8:d8:5a:3f:63:5c:99:0e:
c5:97:1a:2e:ee:ce:84:2b:ba:bc:9d:b2:e2:e8:5b:f1:3b:88:
47:10:a6:fc:7a:29:d6:d9:d0:71:d8:fe:e8:fe:68:a6:7b:65:
2a:d2:9e:ad:bd:1a:68:10:50:c0:96:4a:54:09:95:6e:e6:73:
38:4b:89:32:2b:67:b2:3e:bc:fe:b4:88:5b:34:ff:e6:0d:72:
55:3a:ae:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:43:18 2024 by rpki-client on console-fra.rpki-client.org