Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/z7OJOKzMDMAcdXN5-uPtcT8NImo.roa
File: z7OJOKzMDMAcdXN5-uPtcT8NImo.roa (raw, json)
Hash identifier: KyUfjZSbXpi20VV3q+R3+Ib0uPC3Dq+ScYd70gIjOzA=
Subject key identifier: CF:B3:89:38:AC:CC:0C:C0:1C:75:73:79:FA:E3:ED:71:3F:0D:22:6A
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 018CC26D238BD097E18035D3F7E3D992F719
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/z7OJOKzMDMAcdXN5-uPtcT8NImo.roa
Signing time: Mon 01 Jan 2024 00:29:41 +0000
ROA not before: Mon 01 Jan 2024 00:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48266
IP address blocks: 2a0e:aa07:e033::/48 maxlen: 48
2a0e:aa07:4100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:23:8b:d0:97:e1:80:35:d3:f7:e3:d9:92:f7:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 00:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cfb38938accc0cc01c757379fae3ed713f0d226a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:00:48:e1:99:cf:84:b8:4d:57:0c:f7:59:26:
bd:ce:f4:99:9f:7f:3e:2a:b0:6f:e5:5d:31:7e:5e:
c9:b5:31:3a:6e:00:71:de:ec:0a:f5:d6:70:20:ce:
6c:c8:61:df:c5:53:e6:32:10:09:8e:6f:09:cf:f2:
b9:4c:bc:fd:0c:88:a4:d2:c1:1b:15:a6:aa:04:7c:
c2:c1:bf:fd:45:29:7d:5f:f1:dc:54:d0:ed:6c:78:
af:49:95:21:62:25:5d:83:c9:15:33:37:bc:ea:04:
03:d0:51:3c:f4:af:75:80:11:98:09:90:12:80:e9:
c1:5e:72:a6:4f:19:21:35:ba:81:90:5a:3d:a5:e2:
a5:b4:a2:55:c8:35:e0:fd:2b:a7:a1:54:39:c9:b4:
77:b7:2d:8d:ee:c4:e4:54:d6:41:d8:aa:b8:b7:f3:
f7:54:b9:36:52:97:4b:8e:d4:00:82:20:0c:14:10:
53:ae:49:5d:53:2d:c2:07:b8:1d:2e:38:7b:a7:5b:
5b:25:0c:3a:cd:54:87:b9:32:fa:bd:bd:76:62:e2:
0f:89:9f:4d:0d:6e:82:ef:a3:d0:3f:3c:d8:6b:47:
cb:72:cd:76:ea:60:9a:82:7f:39:e3:c5:fa:1a:48:
b2:ac:50:da:2e:d4:ed:10:37:54:75:86:6c:e2:1a:
8c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B3:89:38:AC:CC:0C:C0:1C:75:73:79:FA:E3:ED:71:3F:0D:22:6A
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/z7OJOKzMDMAcdXN5-uPtcT8NImo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:4100::/40
2a0e:aa07:e033::/48
Signature Algorithm: sha256WithRSAEncryption
2f:81:1c:71:ca:eb:5c:ba:1e:1c:86:5c:ff:35:0d:9c:d6:14:
d1:04:05:78:87:a6:cd:e4:66:8c:52:26:64:f9:67:4a:65:c9:
2e:79:cd:e3:fa:f9:2f:9e:02:dc:11:ff:c2:33:d7:73:b7:15:
30:50:c1:67:c5:72:b7:1c:99:52:b0:e9:2c:65:9a:04:b0:ff:
1a:24:8e:0e:27:e3:8b:5b:29:ad:2a:dc:f4:39:9f:5a:6e:27:
c4:12:95:04:fc:d0:77:9f:12:1a:d6:cf:dc:f5:d3:45:2d:52:
71:8a:61:d1:7d:cc:cd:ae:12:b0:0d:82:05:33:2b:eb:32:0a:
45:a9:0a:b6:11:77:64:e6:6b:c1:80:1a:03:34:f8:8f:21:f4:
da:8f:a5:08:fa:15:3d:67:65:0f:ce:82:91:3a:fa:2a:a8:6b:
b6:dd:3f:d5:38:1a:46:c5:cd:aa:08:94:46:72:f4:a8:96:ad:
a4:7a:29:ee:8e:b7:12:bc:3e:a8:0e:be:41:b2:3e:58:5f:58:
00:47:4a:f9:8b:0f:8b:58:00:da:e6:b7:9d:81:4b:03:44:20:
56:78:3b:01:93:70:30:4d:4e:b5:f9:c2:86:f1:49:17:87:9b:
7a:52:59:f4:99:4c:7d:da:4e:fa:69:4c:aa:28:44:fe:9a:48:
4c:5a:32:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 18:35:15 2024 by rpki-client on console-fra.rpki-client.org