Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/Tz9DFUQ81o4ILZ4GHfDFbxliX2M.roa
File: Tz9DFUQ81o4ILZ4GHfDFbxliX2M.roa (raw, json)
Hash identifier: Y8wVNY5QD1pW/a+6DGP5FlQ1grb8hf1mNtMWzsEoN44=
Subject key identifier: 4F:3F:43:15:44:3C:D6:8E:08:2D:9E:06:1D:F0:C5:6F:19:62:5F:63
Certificate issuer: /CN=6d579d1d5fa7fd2a445b5dd8ee8f2637b41f0d40
Certificate serial: 018E4298F874B35C2A42F430AC7CC1BA8880
Authority key identifier: 6D:57:9D:1D:5F:A7:FD:2A:44:5B:5D:D8:EE:8F:26:37:B4:1F:0D:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bVedHV-n_SpEW13Y7o8mN7QfDUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/Tz9DFUQ81o4ILZ4GHfDFbxliX2M.roa
Signing time: Fri 15 Mar 2024 14:51:44 +0000
ROA not before: Fri 15 Mar 2024 14:51:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49565
IP address blocks: 2a14:2180:1::/48 maxlen: 48
2a14:2180:2::/48 maxlen: 48
2a14:2180:3::/48 maxlen: 48
2a14:2180:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bVedHV-n_SpEW13Y7o8mN7QfDUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:42:98:f8:74:b3:5c:2a:42:f4:30:ac:7c:c1:ba:88:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d579d1d5fa7fd2a445b5dd8ee8f2637b41f0d40
Validity
Not Before: Mar 15 14:51:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f3f4315443cd68e082d9e061df0c56f19625f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:49:38:60:95:a1:1c:b7:16:ac:13:77:1d:54:
c6:1b:28:21:46:f5:3a:f5:b9:30:a4:05:2c:e5:17:
c8:d8:38:19:85:17:da:1c:44:cd:90:7c:d8:0c:84:
14:37:a5:15:54:18:d1:46:18:2f:d0:1f:50:0d:04:
3d:7f:2e:c4:8f:e7:45:e2:5d:a0:06:b1:e1:12:d2:
d2:37:a3:c3:21:a2:1f:09:15:e6:6f:11:ce:9a:d2:
4a:45:df:ca:e3:f0:db:10:66:e6:7b:68:ce:35:6f:
41:20:c5:80:81:26:b5:d5:98:a6:cb:8e:78:ce:60:
76:1d:3d:a9:1b:84:bd:a6:2c:81:c0:9d:f7:73:99:
11:23:6d:35:b5:e0:8a:bb:62:68:4f:67:1e:cb:97:
79:2d:eb:34:a2:4e:a8:b6:7e:96:23:87:a6:fb:c7:
9d:51:59:45:3d:bd:d7:f4:2a:a8:a5:09:fa:62:34:
37:03:f8:ff:f4:c1:f2:de:cb:a4:6c:d1:41:b8:27:
3f:14:9e:80:e4:89:bf:0d:fa:20:fd:92:5c:4d:84:
04:6d:22:48:9e:71:a8:02:6b:23:1c:65:93:36:7a:
79:a5:c5:aa:c3:6b:03:3d:33:62:c1:a3:81:60:a6:
a4:30:b1:a7:80:6e:fe:c1:3c:b2:de:64:92:5f:b9:
36:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3F:43:15:44:3C:D6:8E:08:2D:9E:06:1D:F0:C5:6F:19:62:5F:63
X509v3 Authority Key Identifier:
keyid:6D:57:9D:1D:5F:A7:FD:2A:44:5B:5D:D8:EE:8F:26:37:B4:1F:0D:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVedHV-n_SpEW13Y7o8mN7QfDUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/Tz9DFUQ81o4ILZ4GHfDFbxliX2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:2180:1::-2a14:2180:4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
34:65:01:01:49:d3:d7:e1:b4:89:29:13:ac:63:68:2e:a8:cc:
1f:11:4a:fa:6c:41:bd:8e:11:e0:97:fd:d9:b7:15:bc:72:db:
de:c6:9b:b0:b0:8f:2b:60:4b:15:ae:fb:f4:5f:20:76:59:3c:
f1:9c:ee:a5:34:23:ba:73:e3:13:15:0a:2c:2f:e9:8c:12:90:
aa:95:c7:17:8c:05:18:38:d5:14:03:f1:d2:2e:06:9b:15:82:
c4:b3:04:5e:13:12:e3:be:fa:69:ff:73:e3:77:eb:83:8e:ea:
b7:16:2f:5a:6a:cd:5b:17:f0:50:23:73:9b:e9:40:00:a1:0d:
15:fb:cf:28:91:44:25:cb:50:a1:51:e9:1e:e2:a7:a1:ae:6d:
98:38:ca:c0:01:2e:07:c9:7c:b7:fa:db:60:90:f4:51:32:21:
8c:82:5c:6d:b1:73:b6:81:60:eb:c4:ef:cd:e8:39:07:5c:65:
82:10:aa:96:f6:2c:ad:4f:3a:67:3c:72:bc:17:14:13:0d:fd:
4e:1e:38:ac:52:87:22:36:0d:7f:fd:2c:41:5d:8e:cd:3a:f2:
95:bc:41:b1:97:61:aa:c7:8c:70:2f:1e:59:20:9f:3c:a8:05:
74:16:e2:b4:77:68:ff:27:6d:b8:ec:08:74:bc:ec:7c:b3:14:
c4:3d:3d:ce
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAY5CmPh0s1wqQvQwrHzBuoiAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNTc5ZDFkNWZhN2ZkMmE0NDViNWRkOGVlOGYyNjM3YjQx
ZjBkNDAwHhcNMjQwMzE1MTQ1MTQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjNmNDMxNTQ0M2NkNjhlMDgyZDllMDYxZGYwYzU2ZjE5NjI1ZjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEk4YJWhHLcWrBN3HVTGGyghRvU6
9bkwpAUs5RfI2DgZhRfaHETNkHzYDIQUN6UVVBjRRhgv0B9QDQQ9fy7Ej+dF4l2g
BrHhEtLSN6PDIaIfCRXmbxHOmtJKRd/K4/DbEGbme2jONW9BIMWAgSa11Zimy454
zmB2HT2pG4S9piyBwJ33c5kRI201teCKu2JoT2cey5d5Les0ok6otn6WI4em+8ed
UVlFPb3X9CqopQn6YjQ3A/j/9MHy3sukbNFBuCc/FJ6A5Im/Dfog/ZJcTYQEbSJI
nnGoAmsjHGWTNnp5pcWqw2sDPTNiwaOBYKakMLGngG7+wTyy3mSSX7k2KwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFE8/QxVEPNaOCC2eBh3wxW8ZYl9jMB8GA1UdIwQY
MBaAFG1XnR1fp/0qRFtd2O6PJje0Hw1AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlZlZEhWLW5fU3BFVzEzWTdvOG1ON1FmRFVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9jNWVlN2QtZTU0NC00MjFhLWFmNDct
ZjYzOTU4NjBmYzk4LzEvVHo5REZVUTgxbzRJTFo0R0hmREZieGxpWDJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9jNWVlN2QtZTU0NC00MjFhLWFmNDctZjYzOTU4NjBmYzk4
LzEvYlZlZEhWLW5fU3BFVzEzWTdvOG1ON1FmRFVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAqFCGA
AAEDBwAqFCGAAAQwDQYJKoZIhvcNAQELBQADggEBADRlAQFJ09fhtIkpE6xjaC6o
zB8RSvpsQb2OEeCX/dm3Fbxy297Gm7CwjytgSxWu+/RfIHZZPPGc7qU0I7pz4xMV
Ciwv6YwSkKqVxxeMBRg41RQD8dIuBpsVgsSzBF4TEuO++mn/c+N364OO6rcWL1pq
zVsX8FAjc5vpQAChDRX7zyiRRCXLUKFR6R7ip6GubZg4ysABLgfJfLf622CQ9FEy
IYyCXG2xc7aBYOvE783oOQdcZYIQqpb2LK1POmc8crwXFBMN/U4eOKxShyI2DX/9
LEFdjs068pW8QbGXYarHjHAvHlkgnzyoBXQW4rR3aP8nbbjsCHS87HyzFMQ9Pc4=
-----END CERTIFICATE-----
Generated at Fri Jun 7 16:46:37 2024 by rpki-client on console-ams.rpki-client.org