Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/tZmJ0ZEiIH9o_foCBGfzKKwhCMM.roa
File: tZmJ0ZEiIH9o_foCBGfzKKwhCMM.roa (raw, json)
Hash identifier: /tZeCFwXY/X0dJxM6X4aOENCTJU5Q6w4HStLviWNqRU=
Subject key identifier: B5:99:89:D1:91:22:20:7F:68:FD:FA:02:04:67:F3:28:AC:21:08:C3
Certificate issuer: /CN=8cfff21538e225618314615e4f0d0688b7b0dd5a
Certificate serial: 018E147B7EF4072E5A12814DDBDECBD31DDC
Authority key identifier: 8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/tZmJ0ZEiIH9o_foCBGfzKKwhCMM.roa
Signing time: Wed 06 Mar 2024 15:57:01 +0000
ROA not before: Wed 06 Mar 2024 15:57:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51923
IP address blocks: 2a01:1b0:c000::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 13:03:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:14:7b:7e:f4:07:2e:5a:12:81:4d:db:de:cb:d3:1d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cfff21538e225618314615e4f0d0688b7b0dd5a
Validity
Not Before: Mar 6 15:57:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b59989d19122207f68fdfa020467f328ac2108c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9c:40:57:7d:75:65:c8:d5:d7:4f:ff:c9:85:
aa:87:49:d5:c0:79:df:1b:73:6d:2b:d2:2c:18:3f:
fc:40:01:b5:40:3d:44:12:ec:84:57:eb:aa:06:0a:
db:92:e9:1d:b5:6f:02:29:11:60:e8:37:26:49:95:
f3:f0:96:cf:6b:26:e7:83:6c:97:88:93:0d:43:6e:
df:2e:5f:76:7d:b8:79:61:91:6c:53:4a:bb:0e:44:
a4:02:31:69:43:c0:60:be:bc:e1:17:02:f4:ee:eb:
4b:50:db:e1:61:ca:7f:5b:45:96:00:09:8e:69:45:
dd:7c:57:45:14:50:45:56:7c:2b:7e:fd:b7:2d:86:
c6:ee:bd:35:69:2c:1a:01:1c:be:f1:22:12:33:e4:
6a:c3:7f:f1:e3:2d:7e:5e:15:b9:82:17:73:fc:9e:
1c:ad:a1:c7:80:a4:d9:a7:22:68:57:ab:7b:43:46:
32:3e:7c:98:73:4b:66:da:c8:fa:b1:4b:a7:76:0f:
6b:cf:b2:fe:0e:88:b2:d8:75:09:6f:2a:e6:67:e1:
fc:72:0e:75:a9:59:a0:82:4e:f2:50:03:1f:a8:b4:
ca:bd:3e:ff:bb:c0:7b:3f:78:05:92:39:3b:9f:94:
34:f2:83:20:ac:43:05:64:c8:fd:78:51:f3:2f:58:
37:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:99:89:D1:91:22:20:7F:68:FD:FA:02:04:67:F3:28:AC:21:08:C3
X509v3 Authority Key Identifier:
keyid:8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/tZmJ0ZEiIH9o_foCBGfzKKwhCMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:1b0:c000::/44
Signature Algorithm: sha256WithRSAEncryption
d6:0f:f4:9e:3e:2a:15:13:29:cb:bb:da:be:0a:9e:bb:d2:be:
c8:dc:76:3f:4b:43:45:69:98:85:17:6e:24:c6:b7:7c:e7:d0:
8c:46:a1:81:e3:88:41:14:57:15:08:b0:71:86:4f:7d:94:38:
69:2f:70:4e:65:b3:ce:53:70:96:0c:de:18:a9:6c:0f:78:61:
5b:1b:62:15:df:0c:59:71:0b:07:d0:9f:ec:91:e2:e9:a7:9a:
57:72:60:2f:15:77:d6:86:e1:bc:e0:03:c2:a2:7b:d1:5f:76:
fc:ce:c9:dd:87:87:13:57:e0:52:30:5d:6f:4a:7b:9b:03:dc:
58:27:01:fc:ae:4d:8b:84:ee:9b:4b:57:e6:f1:df:62:fc:08:
6b:77:d6:d8:3e:ef:00:b5:70:3e:3f:ea:c0:ec:81:28:bc:17:
2f:6e:bb:fb:0a:8f:4c:24:64:e0:c9:49:d7:d3:94:54:ad:a0:
ed:6b:56:b2:91:32:a6:70:7d:aa:44:04:23:25:ab:38:81:b4:
73:16:9c:14:82:9e:0b:c1:ee:db:e7:e7:31:b2:0a:2b:90:21:
05:10:1b:e9:de:ec:50:1f:bd:82:8c:45:fe:da:79:72:cd:14:
fd:6f:3b:d6:79:01:c1:b4:9a:a0:e1:f7:55:03:b8:e6:e2:10:
46:f5:1a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 23:37:50 2024 by rpki-client on console-ams.rpki-client.org