Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/ZwJHob3TWz_HbBsJmV4sObDO0Fg.roa
File: ZwJHob3TWz_HbBsJmV4sObDO0Fg.roa (raw, json)
Hash identifier: xIlsHdZ22ccuaL0Zl6x3N1BUfVpu7bZ1vpclJ3gVhCM=
Subject key identifier: 67:02:47:A1:BD:D3:5B:3F:C7:6C:1B:09:99:5E:2C:39:B0:CE:D0:58
Certificate issuer: /CN=992b86095ce558d2e9618728a44228a27be9098f
Certificate serial: 018CC6B91D8A28929002889F99F6AF5EDF54
Authority key identifier: 99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/ZwJHob3TWz_HbBsJmV4sObDO0Fg.roa
Signing time: Mon 01 Jan 2024 20:31:09 +0000
ROA not before: Mon 01 Jan 2024 20:31:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50628
IP address blocks: 2a0e:d500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 01:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:1d:8a:28:92:90:02:88:9f:99:f6:af:5e:df:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992b86095ce558d2e9618728a44228a27be9098f
Validity
Not Before: Jan 1 20:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=670247a1bdd35b3fc76c1b09995e2c39b0ced058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f9:ef:93:e1:97:82:94:bb:0d:33:2b:c9:57:
fe:9d:ad:a8:80:4e:2f:61:b2:6c:0f:f7:3e:b4:f9:
91:98:5b:c0:00:c1:c3:05:e8:36:7d:ba:dd:f2:b0:
a9:a9:4d:83:25:ed:04:59:ee:b2:6f:46:fa:68:6f:
7c:8d:a2:98:3c:ff:57:79:d4:06:58:7f:ac:92:16:
24:26:17:ab:4d:6e:6c:53:20:4a:b6:9b:c1:29:a3:
0f:06:e7:f8:71:d0:3f:a2:18:9b:00:50:b5:85:38:
92:66:e2:82:16:0f:89:9a:14:a9:c6:57:22:ff:6c:
56:f2:41:8a:61:be:82:eb:c7:ff:51:fa:ea:d9:c4:
29:2b:3c:10:21:ed:24:03:29:5f:31:1d:94:22:7d:
27:ab:cc:81:00:35:e9:4a:85:a1:57:b7:ad:e7:ca:
e5:01:e0:62:2b:fa:71:e4:43:c1:14:d6:59:c9:57:
e4:41:90:be:bf:5d:fc:a0:05:20:5f:5b:d4:27:3f:
f5:5b:a6:45:f6:d0:83:48:99:18:3f:07:1e:fc:27:
6f:74:8d:3f:1c:ad:cc:ac:bf:e1:ac:e9:86:1a:6d:
5a:d6:09:00:05:43:66:bb:41:73:c4:6b:3f:1b:b2:
0a:ff:f3:3a:a0:ba:85:c3:d3:b6:47:e0:b2:0e:c4:
bd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:02:47:A1:BD:D3:5B:3F:C7:6C:1B:09:99:5E:2C:39:B0:CE:D0:58
X509v3 Authority Key Identifier:
keyid:99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/ZwJHob3TWz_HbBsJmV4sObDO0Fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:d500::/29
Signature Algorithm: sha256WithRSAEncryption
7a:24:f9:38:f6:79:c1:7d:61:12:31:08:45:41:0a:0e:0f:65:
f8:2a:7b:00:95:02:42:ec:89:4a:6e:de:f6:e9:6a:c6:56:fa:
4d:2b:18:fe:31:43:61:d1:98:a0:13:09:83:b0:a5:fe:c2:4f:
6c:53:ac:fd:d0:3b:06:2d:9e:cd:a7:00:a1:b5:f9:5d:40:89:
13:82:0e:be:19:db:45:4a:2a:02:f7:d1:fd:85:b6:76:73:ac:
48:ce:7f:fa:1f:94:39:99:7a:bf:2c:1a:00:f1:c7:7b:c6:90:
6b:71:71:96:f4:b3:51:29:f2:f3:76:26:19:ea:92:d0:2f:08:
11:33:51:10:85:59:58:80:c7:db:5a:71:6b:68:89:54:97:10:
91:ea:00:0a:b5:06:99:83:2f:c5:1e:a4:f6:57:ff:ec:fc:e4:
07:4d:42:1a:c7:29:59:e2:b4:74:91:10:c6:a1:49:26:11:19:
18:98:71:d2:d8:78:e5:30:73:98:1b:25:28:9d:16:24:7c:92:
7d:51:44:c6:4e:16:ce:9d:d1:59:67:2e:92:5e:19:77:2b:a9:
43:f0:d0:e6:68:04:89:11:9c:91:8d:cf:6a:e5:45:e9:e3:61:
5c:ca:49:25:c0:48:62:4b:6a:26:46:68:9b:51:8b:ac:e1:e4:
fe:68:32:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 05:31:52 2024 by rpki-client on console-fra.rpki-client.org