Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/ZyWNHgf3WU_ACwAZPbuNSo36Vvs.roa
File: ZyWNHgf3WU_ACwAZPbuNSo36Vvs.roa (raw, json)
Hash identifier: KTOiuw1FUp0g4CIaZwT3RhKIy0H3mdzU1ro2sUINjic=
Subject key identifier: 67:25:8D:1E:07:F7:59:4F:C0:0B:00:19:3D:BB:8D:4A:8D:FA:56:FB
Certificate issuer: /CN=b5026c9974092e220542401281f9bdfd356c2842
Certificate serial: 018CC8DEAF16ACA25EDEB4A1640822AFEA9A
Authority key identifier: B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/ZyWNHgf3WU_ACwAZPbuNSo36Vvs.roa
Signing time: Tue 02 Jan 2024 06:31:26 +0000
ROA not before: Tue 02 Jan 2024 06:31:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212109
IP address blocks: 2a10:8702::/32 maxlen: 32
2a10:8701::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 18:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:af:16:ac:a2:5e:de:b4:a1:64:08:22:af:ea:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5026c9974092e220542401281f9bdfd356c2842
Validity
Not Before: Jan 2 06:31:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67258d1e07f7594fc00b00193dbb8d4a8dfa56fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:82:d8:56:c8:b3:f6:b7:61:56:14:03:50:62:
d7:b2:48:07:dd:29:e5:87:a0:cf:a9:e0:17:57:bb:
b5:59:96:fa:31:25:fa:18:eb:77:f8:a1:03:74:dd:
98:47:dd:75:31:f8:b8:5e:85:20:7b:99:e5:fb:d2:
06:e1:98:d8:06:cb:fc:07:a2:5e:a7:66:3d:53:27:
d9:c7:43:81:4d:6a:18:26:cd:3e:70:7a:12:df:36:
58:0c:56:ee:83:5d:3c:d1:56:b9:a5:44:62:5c:06:
38:94:5b:ec:5c:63:ad:8b:e0:83:a8:64:fa:61:b6:
33:ce:4f:51:d3:30:65:21:8a:5e:61:9b:90:50:f7:
dc:e9:d8:b5:08:96:a1:c6:9c:e1:9d:9b:2e:7d:e5:
24:0d:27:aa:e7:dd:99:e4:d2:64:70:63:9f:c7:9c:
6c:93:c0:ad:fd:08:47:0b:eb:87:72:e7:aa:33:63:
98:f0:be:c3:a8:a4:fd:4f:bf:4c:54:91:3a:34:9e:
cc:13:ce:02:09:94:86:b2:58:49:cc:c3:89:8c:35:
15:66:db:a9:97:b7:56:0e:cb:c1:bd:7b:3d:79:ea:
fc:ce:47:54:bf:1c:2e:74:2c:15:8e:a3:7e:17:b3:
0f:a6:39:17:2d:3e:fb:af:99:ff:87:9e:04:cc:a3:
fd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:25:8D:1E:07:F7:59:4F:C0:0B:00:19:3D:BB:8D:4A:8D:FA:56:FB
X509v3 Authority Key Identifier:
keyid:B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/ZyWNHgf3WU_ACwAZPbuNSo36Vvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:8701::-2a10:8702:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8f:2d:19:21:57:5f:30:e0:55:11:39:b4:78:fb:19:5f:23:62:
e5:5a:cf:f3:f5:49:c6:ad:60:19:10:33:b2:13:0b:08:40:46:
7f:d1:59:59:62:3c:e5:07:ee:c8:68:52:c0:5e:51:db:bd:06:
13:08:87:46:30:7e:25:78:f8:97:b9:8f:be:5f:ab:cc:82:93:
2f:df:b9:2a:38:02:68:a7:e2:d8:38:e9:04:aa:a0:1c:52:99:
55:a0:6e:69:bd:bf:6e:13:1a:3a:a8:2a:19:d3:ec:90:b4:53:
40:4a:44:be:da:af:79:1f:cc:65:9f:08:0f:bf:64:4b:59:3a:
86:67:77:35:5f:ba:e8:09:4f:02:bd:4c:49:71:5b:c9:2f:04:
83:f4:f2:89:ba:73:e3:a9:35:21:6b:34:8a:ec:88:3f:a6:8c:
bd:61:ae:4e:36:7a:bc:e5:97:fc:aa:d3:fe:10:18:ed:15:45:
46:a6:26:ea:a1:f2:8d:3c:24:e7:0e:5a:5a:d3:c3:20:42:16:
02:0b:39:f5:95:33:44:61:cd:16:8f:f1:d1:c8:04:c0:7c:24:
93:a4:c1:72:ad:fa:cc:51:eb:2d:52:c4:e3:e7:2b:64:63:ba:
f3:00:f6:88:e5:ce:3b:30:05:d5:de:8b:b4:48:d5:6d:21:48:
44:ed:16:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:11:14 2024 by rpki-client on console-ams.rpki-client.org