Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/259ad9-3678-4318-8a09-faaf94fcc834/1/ztMFBySgYeNK1WuO7wte9mx5890.roa
File: ztMFBySgYeNK1WuO7wte9mx5890.roa (raw, json)
Hash identifier: w8LECpTRTUjWqqiHNN9TrgV+zcgO6O2DaAPc6BiPc/s=
Subject key identifier: CE:D3:05:07:24:A0:61:E3:4A:D5:6B:8E:EF:0B:5E:F6:6C:79:F3:DD
Certificate issuer: /CN=a1be907379f06beb4cb3512cc4aaee048134a3c6
Certificate serial: 018CC64AE8886BE74C76D7BE748A084B58F8
Authority key identifier: A1:BE:90:73:79:F0:6B:EB:4C:B3:51:2C:C4:AA:EE:04:81:34:A3:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ob6Qc3nwa-tMs1EsxKruBIE0o8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/259ad9-3678-4318-8a09-faaf94fcc834/1/ztMFBySgYeNK1WuO7wte9mx5890.roa
Signing time: Mon 01 Jan 2024 18:30:47 +0000
ROA not before: Mon 01 Jan 2024 18:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49835
IP address blocks: 2a0f:54c0::/30 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/259ad9-3678-4318-8a09-faaf94fcc834/1/ob6Qc3nwa-tMs1EsxKruBIE0o8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/259ad9-3678-4318-8a09-faaf94fcc834/1/ob6Qc3nwa-tMs1EsxKruBIE0o8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ob6Qc3nwa-tMs1EsxKruBIE0o8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 10:03:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:e8:88:6b:e7:4c:76:d7:be:74:8a:08:4b:58:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1be907379f06beb4cb3512cc4aaee048134a3c6
Validity
Not Before: Jan 1 18:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ced3050724a061e34ad56b8eef0b5ef66c79f3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a1:90:51:dc:27:73:b9:0a:45:93:d6:17:1e:
78:33:47:65:d3:8a:c6:c6:24:73:1b:ae:ef:5e:5e:
61:77:6f:ca:31:65:4a:ce:b8:4f:60:a0:6a:d9:8d:
40:9a:06:e3:92:0b:62:fd:3b:d1:42:21:df:8d:41:
08:d0:35:31:41:4c:33:ac:ee:df:ff:fa:e8:db:36:
f0:47:39:84:25:3e:19:e1:de:95:69:b7:11:63:af:
3d:ff:d9:b5:d0:f5:b5:dd:2e:4a:25:07:91:e9:8d:
34:6d:08:05:1b:a6:67:47:d6:37:a2:ea:96:cc:8c:
0c:1d:41:95:59:e3:bd:cb:58:2d:b6:a7:bc:08:26:
f3:30:0e:43:1e:c9:69:7c:9f:9e:f9:cc:d8:1c:c7:
bd:23:c5:54:6d:f6:2f:62:0a:30:fa:4f:e7:6a:c5:
96:e7:1c:0c:f6:8c:f9:08:4c:92:f0:5b:f6:22:07:
30:b5:c4:4a:fd:0c:f6:e6:c9:a2:51:f1:69:e4:22:
4f:cb:d2:5d:40:f2:e4:2d:5b:12:75:18:96:14:fd:
82:36:ec:97:76:f7:e5:01:ff:d0:12:fa:36:e2:48:
07:39:f2:3f:66:51:d2:4a:73:13:5f:ae:70:69:be:
63:7a:ac:54:4c:4a:60:f7:f1:d3:93:0f:94:c3:b0:
bc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D3:05:07:24:A0:61:E3:4A:D5:6B:8E:EF:0B:5E:F6:6C:79:F3:DD
X509v3 Authority Key Identifier:
keyid:A1:BE:90:73:79:F0:6B:EB:4C:B3:51:2C:C4:AA:EE:04:81:34:A3:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ob6Qc3nwa-tMs1EsxKruBIE0o8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/259ad9-3678-4318-8a09-faaf94fcc834/1/ztMFBySgYeNK1WuO7wte9mx5890.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/259ad9-3678-4318-8a09-faaf94fcc834/1/ob6Qc3nwa-tMs1EsxKruBIE0o8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:54c0::/30
Signature Algorithm: sha256WithRSAEncryption
40:a4:90:88:b8:37:63:55:83:be:41:37:52:82:8c:3b:56:60:
96:e4:f1:21:d7:a4:82:4d:a7:93:f6:fb:04:f8:3e:e9:b2:cb:
51:1d:78:30:dd:dc:11:71:48:4d:bc:92:75:f3:f3:46:16:c0:
32:74:89:6b:90:60:80:7b:d4:f8:e1:d5:15:c8:ea:f5:45:39:
54:1b:ff:79:0c:3c:f5:82:e8:49:d5:ab:3e:4b:c6:4c:d8:53:
eb:3d:e5:d0:6c:d7:6b:09:2a:8c:95:fb:fb:cd:a9:57:a8:f0:
c8:f2:7d:a6:f5:9d:58:b8:a0:e1:2b:ae:21:9b:70:21:df:fc:
c6:2a:c8:03:05:02:d8:37:fc:dd:a6:c7:a3:4c:52:89:ce:1d:
ce:76:a3:ee:3e:b7:f0:15:48:ec:b1:02:4d:0b:9d:fe:17:6f:
18:fa:60:3b:4c:1d:9f:9f:f0:2f:51:f0:d4:5a:0e:d6:11:7f:
4d:cc:6d:ad:ea:aa:83:cd:ed:b1:30:13:96:86:21:27:4b:9c:
a2:9a:30:99:f7:bf:aa:db:6a:ef:a4:37:d6:d3:2a:f0:61:ef:
90:d9:c0:60:5d:9f:9d:6c:f2:45:55:43:f6:13:07:6c:af:a8:
2b:a5:6f:ff:aa:99:fb:5c:63:1d:f5:bb:0d:0d:f4:c7:43:19:
4d:5f:c0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 18:11:38 2024 by rpki-client on console-fra.rpki-client.org