Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/ZMTNr9Z6SK7OLfJb2WyBSPAMneM.roa
File: ZMTNr9Z6SK7OLfJb2WyBSPAMneM.roa (raw, json)
Hash identifier: ufYhDzG7xbA4ShIq2LqoWkoqwLuai4j65WKm4eaguQU=
Subject key identifier: 64:C4:CD:AF:D6:7A:48:AE:CE:2D:F2:5B:D9:6C:81:48:F0:0C:9D:E3
Certificate issuer: /CN=69a28c2f84c75e8d0388694355152dd2b731f249
Certificate serial: 01924891D1D9DE5AE7D61C94423F2232A543
Authority key identifier: 69:A2:8C:2F:84:C7:5E:8D:03:88:69:43:55:15:2D:D2:B7:31:F2:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaKML4THXo0DiGlDVRUt0rcx8kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/ZMTNr9Z6SK7OLfJb2WyBSPAMneM.roa
Signing time: Tue 01 Oct 2024 14:52:48 +0000
ROA not before: Tue 01 Oct 2024 14:52:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9056
IP address blocks: 2a00:7c00:8001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaKML4THXo0DiGlDVRUt0rcx8kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:48:91:d1:d9:de:5a:e7:d6:1c:94:42:3f:22:32:a5:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a28c2f84c75e8d0388694355152dd2b731f249
Validity
Not Before: Oct 1 14:52:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64c4cdafd67a48aece2df25bd96c8148f00c9de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:da:ba:b2:86:0e:89:af:ed:f4:f4:9c:18:e1:
79:53:a9:b4:8c:d3:d9:ed:54:5c:0a:bb:f0:22:3d:
8d:78:35:d8:58:e1:d0:6c:d9:03:b0:22:c4:c3:52:
9a:aa:bd:47:e2:99:06:83:30:1d:96:30:ad:ba:c1:
64:7f:1b:bd:4d:32:2d:34:f3:b0:b9:9d:0a:91:3a:
7a:a6:42:c1:c9:20:81:29:e6:07:dc:c0:ee:95:2a:
dd:67:61:34:4b:13:ad:cb:ed:81:39:df:59:60:88:
ba:77:dc:ec:f9:a1:44:e8:e7:3a:7f:20:de:e3:4f:
60:47:ad:14:fd:aa:55:27:bf:a1:1f:db:e7:22:ac:
ed:50:17:85:0a:fd:10:50:e8:a6:1b:47:4e:98:d6:
5b:37:3f:b4:27:25:8f:8e:01:08:60:d9:74:f9:1a:
85:46:05:f8:e1:98:85:7b:fc:58:65:79:85:77:10:
7f:8b:4d:11:f7:20:5d:90:91:31:22:e5:cb:4d:2f:
f1:da:c7:81:52:70:f7:8b:6d:bb:7c:36:fa:38:17:
fc:20:ed:3c:e0:b7:f1:de:64:12:cd:04:41:41:ae:
92:d5:e2:c9:19:86:e5:7c:66:d6:c9:ed:93:f8:d8:
3e:f0:27:27:e9:53:3c:7d:4f:dc:64:5e:1a:b2:8c:
e1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C4:CD:AF:D6:7A:48:AE:CE:2D:F2:5B:D9:6C:81:48:F0:0C:9D:E3
X509v3 Authority Key Identifier:
keyid:69:A2:8C:2F:84:C7:5E:8D:03:88:69:43:55:15:2D:D2:B7:31:F2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaKML4THXo0DiGlDVRUt0rcx8kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/ZMTNr9Z6SK7OLfJb2WyBSPAMneM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:7c00:8001::/48
Signature Algorithm: sha256WithRSAEncryption
86:83:18:97:9d:00:59:e6:0f:e4:7d:8a:33:0d:a6:20:84:6a:
bd:6c:e2:f5:b9:55:04:34:b2:6e:eb:fc:b8:e0:39:25:ef:b2:
0a:e8:c3:26:00:68:51:db:41:ca:fd:70:67:5f:c0:49:0a:f5:
a9:40:62:97:f1:4f:6c:ee:07:ca:cd:44:a3:1a:62:61:04:34:
67:f1:49:af:ec:2f:52:73:38:64:17:69:8a:82:07:24:cc:01:
96:6d:b6:b3:7c:2d:d4:d7:77:05:78:be:bf:86:1e:99:33:6d:
8e:fb:5f:74:27:ed:27:98:9e:f0:b3:46:8a:ee:e2:40:f6:fe:
0b:78:ff:b4:c5:20:63:73:59:2a:27:01:42:82:71:cd:01:14:
cc:ed:36:80:df:4c:1f:90:44:7c:14:ef:36:77:ba:bc:f0:68:
e9:a8:d3:8a:d7:2f:ba:a8:e4:0e:ba:ca:64:95:b0:2d:70:24:
3a:5e:e5:ae:2e:db:4e:10:7d:39:2b:86:41:1e:86:86:da:c3:
99:ff:df:52:74:52:40:ff:be:06:34:6a:d6:e2:08:cc:4a:97:
24:5c:5b:27:78:c7:08:52:52:7e:6e:9d:87:d5:3e:8f:6b:0b:
18:2d:88:ea:4d:a6:a4:c9:f6:ab:7b:fc:34:aa:5f:be:05:4e:
a7:8c:a8:49
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZJIkdHZ3lrn1hyUQj8iMqVDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YTI4YzJmODRjNzVlOGQwMzg4Njk0MzU1MTUyZGQyYjcz
MWYyNDkwHhcNMjQxMDAxMTQ1MjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGM0Y2RhZmQ2N2E0OGFlY2UyZGYyNWJkOTZjODE0OGYwMGM5ZGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dq6soYOia/t9PScGOF5U6m0jNPZ
7VRcCrvwIj2NeDXYWOHQbNkDsCLEw1Kaqr1H4pkGgzAdljCtusFkfxu9TTItNPOw
uZ0KkTp6pkLBySCBKeYH3MDulSrdZ2E0SxOty+2BOd9ZYIi6d9zs+aFE6Oc6fyDe
409gR60U/apVJ7+hH9vnIqztUBeFCv0QUOimG0dOmNZbNz+0JyWPjgEIYNl0+RqF
RgX44ZiFe/xYZXmFdxB/i00R9yBdkJExIuXLTS/x2seBUnD3i227fDb6OBf8IO08
4Lfx3mQSzQRBQa6S1eLJGYblfGbWye2T+Ng+8Ccn6VM8fU/cZF4asozh+wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGTEza/Wekiuzi3yW9lsgUjwDJ3jMB8GA1UdIwQY
MBaAFGmijC+Ex16NA4hpQ1UVLdK3MfJJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWFLTUw0VEhYbzBEaUdsRFZSVXQwcmN4OGtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS84OWZmNDctMGI3Yi00MzA5LWE4YWYt
MmNiZDU1ZjlhOGVlLzEvWk1UTnI5WjZTSzdPTGZKYjJXeUJTUEFNbmVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS84OWZmNDctMGI3Yi00MzA5LWE4YWYtMmNiZDU1ZjlhOGVl
LzEvYWFLTUw0VEhYbzBEaUdsRFZSVXQwcmN4OGtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgB8AIAB
MA0GCSqGSIb3DQEBCwUAA4IBAQCGgxiXnQBZ5g/kfYozDaYghGq9bOL1uVUENLJu
6/y44Dkl77IK6MMmAGhR20HK/XBnX8BJCvWpQGKX8U9s7gfKzUSjGmJhBDRn8Umv
7C9SczhkF2mKggckzAGWbbazfC3U13cFeL6/hh6ZM22O+190J+0nmJ7ws0aK7uJA
9v4LeP+0xSBjc1kqJwFCgnHNARTM7TaA30wfkER8FO82d7q88GjpqNOK1y+6qOQO
uspklbAtcCQ6XuWuLttOEH05K4ZBHoaG2sOZ/99SdFJA/74GNGrW4gjMSpckXFsn
eMcIUlJ+bp2H1T6PawsYLYjqTaakyfare/w0ql++BU6njKhJ
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:07:16 2024 by rpki-client on console-fra.rpki-client.org