Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/ZEkzPNxHscxVkNYH8XpqIkGhtVk.roa
File: ZEkzPNxHscxVkNYH8XpqIkGhtVk.roa (raw, json)
Hash identifier: aulop5PmjLHAyVSuKivbcnY7+h5quk+e2ojTWG0vR/U=
Subject key identifier: 64:49:33:3C:DC:47:B1:CC:55:90:D6:07:F1:7A:6A:22:41:A1:B5:59
Certificate issuer: /CN=e1856c3082ab2fc8dd1b359a7b3991368538b4d0
Certificate serial: 0190B691E9DC45C19346BF34E3FB1EA56FD5
Authority key identifier: E1:85:6C:30:82:AB:2F:C8:DD:1B:35:9A:7B:39:91:36:85:38:B4:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/ZEkzPNxHscxVkNYH8XpqIkGhtVk.roa
Signing time: Mon 15 Jul 2024 13:25:34 +0000
ROA not before: Mon 15 Jul 2024 13:25:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214895
IP address blocks: 2a13:2a40::/29 maxlen: 29
2a13:3d40::/29 maxlen: 29
2a13:3dc0::/29 maxlen: 29
2a14:5900::/29 maxlen: 29
2a14:5b00::/29 maxlen: 29
2a14:5d00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b6:91:e9:dc:45:c1:93:46:bf:34:e3:fb:1e:a5:6f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1856c3082ab2fc8dd1b359a7b3991368538b4d0
Validity
Not Before: Jul 15 13:25:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6449333cdc47b1cc5590d607f17a6a2241a1b559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ec:d4:ff:c9:2d:4b:7e:46:96:4b:50:52:99:
fe:13:6b:fb:35:98:38:29:5e:f1:0e:da:a4:2c:fc:
fa:e3:a1:1d:84:79:82:0a:f6:43:0f:4a:60:d2:cf:
72:de:ef:46:8e:b5:05:d6:51:4d:8d:fb:9f:15:aa:
00:6d:11:02:65:1c:f7:25:5d:de:50:23:b1:5e:b7:
f1:c3:85:55:9d:51:6d:c5:17:29:84:18:f4:88:6a:
28:f2:78:ce:ae:9f:d6:db:01:fd:2c:80:39:b6:3c:
ed:da:7b:54:ea:31:5d:b9:50:fa:47:4d:36:6a:2a:
c5:5c:14:ff:53:e9:a3:01:de:63:d3:b9:8d:93:3a:
13:d3:59:5c:c5:8a:88:1d:27:8f:f9:04:5c:57:ca:
a7:63:11:44:0d:94:28:7d:9e:33:4b:fc:42:c9:75:
00:44:4e:ce:2f:f5:34:ad:e3:1d:ba:e9:cc:2a:68:
b6:e4:e7:6e:fc:96:14:a4:9c:1a:a2:ab:0c:67:1a:
7e:42:67:7d:9d:0e:a6:0c:3b:c8:9b:50:77:ae:89:
93:c9:ba:b0:93:3f:50:e5:e6:95:f6:7f:f6:ab:c2:
a8:1b:bd:2e:64:45:d7:37:eb:ae:6b:e1:a2:af:0b:
ba:86:f2:d6:0c:4d:c3:8d:68:a7:03:2e:44:3a:24:
9b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:49:33:3C:DC:47:B1:CC:55:90:D6:07:F1:7A:6A:22:41:A1:B5:59
X509v3 Authority Key Identifier:
keyid:E1:85:6C:30:82:AB:2F:C8:DD:1B:35:9A:7B:39:91:36:85:38:B4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/ZEkzPNxHscxVkNYH8XpqIkGhtVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:2a40::/29
2a13:3d40::/29
2a13:3dc0::/29
2a14:5900::/29
2a14:5b00::/29
2a14:5d00::/29
Signature Algorithm: sha256WithRSAEncryption
99:7b:7e:4e:f6:1d:5e:bc:05:35:65:2b:68:a2:7a:19:39:dd:
ed:40:4a:14:65:57:05:ab:72:c4:98:96:0b:f6:a6:70:f0:b6:
db:99:9a:ef:28:38:59:6c:92:3d:0d:eb:44:a9:a9:90:bd:4f:
0e:e4:8c:38:a4:7f:29:fc:bd:80:d5:84:92:fb:07:36:9e:e1:
26:43:20:83:13:33:10:d6:de:60:78:fa:26:d3:00:71:06:53:
6a:c3:bd:d6:74:71:ad:a0:16:fc:5d:93:52:51:01:96:30:d9:
17:6f:a9:cf:20:13:35:94:02:bd:df:c3:cf:c8:12:55:f7:91:
44:a1:2a:96:8e:76:d8:39:9f:70:17:0e:da:ed:d0:9f:d4:2a:
0b:ed:ba:78:a6:94:db:43:2c:8b:40:ad:8e:b7:31:91:35:28:
ed:5b:58:df:5c:7a:35:0b:78:3b:74:9b:61:07:c7:e8:e7:42:
07:23:a9:3c:88:23:ec:28:ce:81:fa:68:81:76:07:14:2f:d1:
80:b6:5d:17:1f:9d:e4:1c:da:59:7b:b1:46:83:4f:dc:45:dd:
e5:92:10:2d:32:5c:d3:b0:b0:eb:89:a3:81:d6:af:ae:7a:b8:
85:bb:c4:79:23:72:e0:ec:04:7c:5d:8b:2f:b1:5c:9e:29:6e:
8b:ee:a7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 20:12:01 2024 by rpki-client on console-ams.rpki-client.org