Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/ZSBpCirylz1vkki7QdtDm6OhFSQ.roa
File: ZSBpCirylz1vkki7QdtDm6OhFSQ.roa (raw, json)
Hash identifier: rNpFQ21SxVMLxDNKWrcn6pH4vM5IERMajBrOrJ9Qgus=
Subject key identifier: 65:20:69:0A:2A:F2:97:3D:6F:92:48:BB:41:DB:43:9B:A3:A1:15:24
Certificate issuer: /CN=5a376c8008d6abd962341563dd2a4dccaf153cba
Certificate serial: 019285FB9AF7FA22CBC1B621EC020BF39276
Authority key identifier: 5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/ZSBpCirylz1vkki7QdtDm6OhFSQ.roa
Signing time: Sun 13 Oct 2024 13:05:11 +0000
ROA not before: Sun 13 Oct 2024 13:05:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214677
IP address blocks: 2a05:bec0:34::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:85:fb:9a:f7:fa:22:cb:c1:b6:21:ec:02:0b:f3:92:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a376c8008d6abd962341563dd2a4dccaf153cba
Validity
Not Before: Oct 13 13:05:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6520690a2af2973d6f9248bb41db439ba3a11524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:24:4d:a7:8c:7c:ca:f7:68:9f:f1:df:d8:26:
7e:09:ee:09:8c:89:35:48:c3:73:b1:3f:02:f8:93:
69:01:a4:49:fd:3d:a5:1d:b8:26:7f:52:1a:94:ea:
e6:64:62:3b:75:bb:f6:a5:e3:08:56:4d:d9:12:cf:
8f:c4:ed:5d:a8:9e:4d:06:ef:ba:9d:01:9b:0a:90:
ae:f0:6c:9d:5d:1e:49:33:b6:e6:bb:b6:88:5a:ea:
dd:0b:e1:ed:b4:ed:e1:36:2f:39:46:7e:b4:7c:9f:
9b:92:73:93:47:d9:83:71:fa:1f:e7:d6:bb:a2:d6:
c4:54:70:e5:1f:c5:66:9b:08:8b:73:03:6d:ca:fb:
e4:1b:59:41:ba:d2:98:dc:81:cd:79:d3:26:9c:40:
28:ba:9e:7b:79:38:0d:f5:8c:0c:38:9d:f7:dd:5c:
2a:3d:ea:c8:eb:ec:74:da:b2:ab:c6:fb:c3:a6:67:
07:98:47:37:56:8f:b5:2c:af:9c:50:3a:05:2e:46:
2d:1b:d6:a0:a0:78:fb:72:72:ff:72:d6:8b:11:f0:
7f:11:04:b1:1f:21:62:a3:6d:be:e8:39:f4:11:63:
59:71:84:38:71:ec:4a:a3:de:5d:02:6e:ad:48:5c:
6d:cc:e0:c4:d7:46:35:f5:fb:d5:e9:ce:17:98:0f:
6d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:20:69:0A:2A:F2:97:3D:6F:92:48:BB:41:DB:43:9B:A3:A1:15:24
X509v3 Authority Key Identifier:
keyid:5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/ZSBpCirylz1vkki7QdtDm6OhFSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:bec0:34::/48
Signature Algorithm: sha256WithRSAEncryption
55:20:ae:03:c5:b8:de:74:46:94:83:44:54:b8:eb:4d:62:06:
9e:9a:14:4d:66:82:28:ef:9e:cc:0c:a0:c1:d7:fd:da:d6:a4:
2c:31:d7:a0:3f:7f:f6:74:6c:10:9c:94:48:6d:a0:a6:b5:52:
07:a8:93:3e:72:a5:a1:b5:62:2f:0e:92:53:f3:4f:9b:92:b6:
de:ea:11:d6:1f:0a:e0:31:db:73:6d:cc:19:38:46:32:0a:48:
a0:24:a3:c5:16:42:36:c3:06:08:e7:d2:16:3c:8a:94:5b:fb:
34:c1:86:80:d8:07:be:b6:9e:83:9c:4b:78:8c:0e:dc:b2:4a:
a5:fa:4c:90:7d:d9:47:c2:e1:8d:83:dd:b4:25:5e:23:1b:04:
22:ac:1d:c5:86:17:1a:af:37:1f:51:00:05:cb:69:1e:36:93:
25:d9:31:7c:89:23:bc:75:c3:5b:ff:13:da:ae:1e:c9:33:ae:
89:e7:de:c8:5c:c5:fd:f6:42:3f:02:2d:23:3b:83:e9:36:bf:
51:ed:b2:ad:fb:8a:a7:c6:63:ba:83:7d:e9:cb:b4:c4:68:dd:
c5:aa:3d:d7:0c:b0:8b:4e:80:9b:fe:0a:1e:eb:53:c0:e4:3e:
fc:1c:57:b4:50:88:c7:1b:12:b4:b2:61:47:21:3c:7c:40:ff:
d8:05:b0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:38:50 2024 by rpki-client on console-fra.rpki-client.org