Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/ZkBcirLOhOnhqdoBl-ZW-f5Akn4.roa
File: ZkBcirLOhOnhqdoBl-ZW-f5Akn4.roa (raw, json)
Hash identifier: KxuWGoUbIgZK30+LO7jD06m5WlENSXW1D1LIk3p79iI=
Subject key identifier: 66:40:5C:8A:B2:CE:84:E9:E1:A9:DA:01:97:E6:56:F9:FE:40:92:7E
Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Certificate serial: 018CEDB880413FE999E2897CC78AF6C14F72
Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/ZkBcirLOhOnhqdoBl-ZW-f5Akn4.roa
Signing time: Tue 09 Jan 2024 10:15:40 +0000
ROA not before: Tue 09 Jan 2024 10:15:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212165
IP address blocks: 2a02:eb00:2::/48 maxlen: 48
2a11:f840::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 17:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:b8:80:41:3f:e9:99:e2:89:7c:c7:8a:f6:c1:4f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Validity
Not Before: Jan 9 10:15:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66405c8ab2ce84e9e1a9da0197e656f9fe40927e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:50:12:e4:26:b2:53:2b:e7:11:a6:50:b7:ce:
27:1c:bb:b8:14:d6:02:17:e2:48:0c:b0:f5:35:bd:
21:12:8a:dc:63:e0:de:f8:14:79:73:8a:e8:73:ea:
0f:64:9f:5a:b0:87:02:74:96:9e:e4:79:d3:6d:8b:
dd:18:d5:67:81:b1:86:06:bb:b9:33:a9:b4:70:42:
22:4a:88:3a:d4:40:fc:37:14:17:86:54:20:20:4e:
45:2d:86:8a:c9:43:8a:84:c5:9e:d7:51:6d:a6:36:
32:cd:fc:9e:7b:7a:dd:7a:d6:09:c1:4e:71:47:ef:
72:6b:d5:fa:64:7c:49:4a:de:71:ee:2b:84:df:0a:
f5:5b:0b:a7:fe:cf:eb:3f:9d:a3:4d:4f:7e:98:04:
10:34:ab:50:7a:e4:2e:00:09:79:17:36:9e:3c:1d:
af:d7:68:b9:e6:4a:78:ce:5d:99:8a:d3:cb:74:04:
23:7f:06:aa:f8:33:ed:29:22:12:25:25:04:20:2d:
f2:f1:fd:c5:01:f9:d8:6d:69:f2:a2:0e:6c:71:34:
85:21:1e:25:f7:5f:09:c5:af:53:a4:13:4d:69:fc:
4f:81:79:21:47:35:f3:15:b0:99:fd:40:27:1e:2e:
08:d0:31:58:65:b8:3b:4c:1a:81:3e:f8:41:ee:58:
98:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:40:5C:8A:B2:CE:84:E9:E1:A9:DA:01:97:E6:56:F9:FE:40:92:7E
X509v3 Authority Key Identifier:
keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/ZkBcirLOhOnhqdoBl-ZW-f5Akn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:eb00:2::/48
2a11:f840::/29
Signature Algorithm: sha256WithRSAEncryption
56:9b:26:f2:16:89:c1:5e:66:3b:3f:4d:fe:52:f1:9b:91:a9:
30:e5:da:8e:39:f5:ad:95:5c:19:b7:cd:e9:13:d8:43:0e:92:
88:c6:1c:3f:c9:61:9e:c9:dd:d5:26:36:0b:0f:ea:72:45:64:
e6:fa:00:47:59:de:8d:85:bc:be:f3:96:8c:87:2d:01:38:13:
b0:0c:73:a2:67:0b:20:c0:a0:5b:78:58:9e:91:b4:09:b3:3b:
37:2a:97:f6:21:79:f9:71:ef:7a:6a:f7:7f:5e:73:f7:ec:2c:
94:12:f5:a1:98:ac:38:24:2c:58:71:d1:2f:e4:68:4c:d7:68:
a7:f1:fb:0c:08:00:d9:5c:cb:eb:1f:8e:99:c2:d4:fe:2a:24:
d3:dc:46:12:e5:d8:8f:82:45:5a:75:d9:05:60:62:38:a7:30:
cb:bf:89:86:53:1b:97:07:df:cf:9b:5a:3e:f0:47:0f:fa:be:
1f:89:92:ae:79:3b:29:36:7c:98:21:11:53:61:6d:99:e0:cc:
92:01:66:d0:64:b1:f6:99:86:bd:f5:d0:a8:59:52:ac:0e:bd:
fe:60:20:83:9d:12:18:90:e9:b4:2f:1d:1a:ef:4b:c9:dd:dc:
b0:3f:d4:33:28:60:b9:bc:16:65:0d:0b:1f:b6:74:79:61:e8:
be:3d:7b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 03:32:16 2024 by rpki-client on console-fra.rpki-client.org