Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/zj6xxdt0mpcs-hDyQHF3dyWq-qU.roa
File: zj6xxdt0mpcs-hDyQHF3dyWq-qU.roa (raw, json)
Hash identifier: Brjk/iGa+c6w7sEet1EWyjnE1iZhFqj1ftyXEgYyL6E=
Subject key identifier: CE:3E:B1:C5:DB:74:9A:97:2C:FA:10:F2:40:71:77:77:25:AA:FA:A5
Certificate issuer: /CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Certificate serial: 018CC2DB3EE2EC542F60212AEE848CDD8583
Authority key identifier: 6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/zj6xxdt0mpcs-hDyQHF3dyWq-qU.roa
Signing time: Mon 01 Jan 2024 02:29:57 +0000
ROA not before: Mon 01 Jan 2024 02:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8560
IP address blocks: 2a0d:7f00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:3e:e2:ec:54:2f:60:21:2a:ee:84:8c:dd:85:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Validity
Not Before: Jan 1 02:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce3eb1c5db749a972cfa10f24071777725aafaa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fd:0f:ec:d7:b7:d9:90:33:fe:fe:4f:1b:39:
5d:78:33:e7:f5:8e:b7:fd:54:ca:44:1e:c4:4c:7e:
ff:f9:f0:77:53:67:cb:ab:6c:2e:e2:5e:e1:2a:c5:
47:f0:b5:4a:2a:48:b5:e2:13:cc:91:97:d4:49:3e:
b9:b5:3b:8c:9b:56:d7:02:9f:ef:b9:a0:6b:ba:85:
50:bd:7b:b9:2b:ba:f7:d8:c6:8a:03:6e:b9:bc:8d:
82:5a:50:54:10:40:71:73:0b:8e:ea:49:d9:46:94:
3a:ca:3a:4b:29:e5:ad:35:8b:1f:d7:83:4d:60:e2:
8d:83:81:cf:e3:6e:3d:a7:a5:82:26:f0:63:80:4d:
6e:4f:c7:09:25:9a:df:1c:60:3a:c2:86:c6:a5:30:
62:bc:2f:e7:1a:e1:32:c9:61:83:7c:22:dc:34:a7:
bc:9c:f9:c2:79:91:54:2d:a6:3c:80:bb:75:0a:3d:
6d:9b:44:58:7a:94:13:7e:de:43:3d:8f:93:23:da:
be:a3:50:ed:c8:9e:bf:34:ab:af:bf:13:77:6c:e0:
99:98:90:ec:c6:1f:8a:87:68:73:e7:53:77:d1:03:
aa:ba:fb:5c:0c:8a:8d:2a:a5:93:28:77:09:0d:4d:
e8:30:5c:57:02:b8:0b:e1:a6:ad:75:85:d5:a0:d7:
43:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3E:B1:C5:DB:74:9A:97:2C:FA:10:F2:40:71:77:77:25:AA:FA:A5
X509v3 Authority Key Identifier:
keyid:6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/zj6xxdt0mpcs-hDyQHF3dyWq-qU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:7f00::/29
Signature Algorithm: sha256WithRSAEncryption
a2:63:e2:ef:70:0f:45:dc:03:3a:0a:0d:d2:3b:8d:6b:24:ef:
df:66:56:e8:07:ae:b4:a5:af:4d:61:1e:1f:d8:70:fc:f4:99:
03:4c:a5:d7:63:57:85:42:e8:8e:f4:51:15:70:71:33:c7:bf:
31:73:9e:ef:24:e5:30:8c:ef:3e:3f:39:cc:71:0f:1a:20:43:
f1:96:a8:68:c8:18:11:08:49:5c:b9:03:95:82:b2:30:19:76:
4a:79:71:2b:f6:82:81:f8:29:d5:c5:f8:ec:c7:60:75:53:59:
e0:c9:d0:44:11:77:e5:6b:16:a6:8d:00:52:cc:84:3e:1e:59:
bc:76:75:8d:87:40:a2:8e:20:f8:23:90:74:4b:63:79:51:61:
c7:a9:f3:94:14:fb:9b:34:6c:9c:a3:1d:68:68:1c:5b:0e:62:
b0:e2:5f:b0:1a:0f:1e:a6:ff:bf:79:b6:54:b7:f8:b5:e9:4e:
eb:75:7e:24:bd:f1:e5:4f:39:a1:82:cc:3a:37:26:f4:4d:f7:
52:c6:0e:70:64:0b:c6:4a:59:c8:34:11:e6:0a:12:56:0c:aa:
e8:47:f8:6b:1f:64:93:7a:9c:7b:a4:91:36:a6:81:9a:a2:65:
20:50:df:2e:c8:31:6b:ae:b1:e2:44:d7:92:4d:5b:0e:f4:35:
44:65:4d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 08:51:48 2024 by rpki-client on console-ams.rpki-client.org