Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/zoMg-eVv_Fko_7pjm43jApEI0LM.roa
File: zoMg-eVv_Fko_7pjm43jApEI0LM.roa (raw, json)
Hash identifier: dqwNM+OzUgZsR7hx81M8LQhNWOVxyzNR6TvV9OmUkFY=
Subject key identifier: CE:83:20:F9:E5:6F:FC:59:28:FF:BA:63:9B:8D:E3:02:91:08:D0:B3
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 018CC26D3C4E5C20339D66AEB2482A42603B
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/zoMg-eVv_Fko_7pjm43jApEI0LM.roa
Signing time: Mon 01 Jan 2024 00:29:47 +0000
ROA not before: Mon 01 Jan 2024 00:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210320
IP address blocks: 2a0e:aa07:e02e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 18:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:3c:4e:5c:20:33:9d:66:ae:b2:48:2a:42:60:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 00:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce8320f9e56ffc5928ffba639b8de3029108d0b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:bf:fb:8a:44:0f:16:fa:a0:84:29:b3:2f:34:
7d:d1:88:9e:c3:cc:c5:15:0a:b6:62:c3:95:a5:32:
55:0d:3c:9b:7c:85:f4:45:d4:78:47:3e:02:66:6c:
d3:66:1f:92:23:81:24:d1:21:f4:d8:10:e4:36:e3:
33:f7:f4:8a:c7:42:25:3a:ab:8a:34:9d:51:18:ef:
51:41:ca:f1:59:0a:06:18:6c:38:fd:4a:88:06:14:
1c:8c:aa:34:c3:57:3b:5d:f5:74:e9:9a:1a:df:d1:
f4:00:66:27:58:53:5a:74:40:ba:09:b3:8b:24:02:
0d:76:5d:2c:05:58:03:eb:21:a4:70:fb:9b:27:8a:
32:a0:04:3c:4d:e6:f5:d4:70:91:06:de:e3:7a:bd:
17:19:a8:50:74:bd:25:48:f4:17:59:6c:0c:5e:46:
38:a3:7c:83:86:96:ab:3b:c1:6b:2b:56:45:44:2c:
6e:8b:63:2e:1c:db:0b:08:74:63:62:51:33:5f:97:
8e:d0:22:94:28:a6:86:2c:17:ef:7a:d3:bf:1c:43:
71:ae:35:cd:8a:35:5d:71:37:1f:36:4d:46:f3:36:
7a:94:01:73:5c:b5:a8:c8:a2:20:27:6e:cf:4e:64:
ff:2a:5b:d7:ee:3e:ae:20:56:74:fa:bc:bd:4d:88:
0d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:83:20:F9:E5:6F:FC:59:28:FF:BA:63:9B:8D:E3:02:91:08:D0:B3
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/zoMg-eVv_Fko_7pjm43jApEI0LM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e02e::/48
Signature Algorithm: sha256WithRSAEncryption
91:e7:2d:43:1d:e2:2f:6d:f5:8f:0a:c3:f3:d8:a4:a6:7a:3e:
90:e2:4e:53:e9:92:85:d8:d4:f8:25:1c:82:4c:35:bd:67:c4:
45:77:97:67:86:17:7d:ec:06:c3:4b:f0:6d:9e:68:b8:ee:7e:
2d:85:4b:8e:a8:23:6c:5d:24:56:35:52:49:14:1c:d7:e2:64:
15:87:bb:68:da:d9:8f:f7:f2:0f:c0:29:60:ac:12:52:98:f4:
6d:4f:37:a9:94:39:ed:a9:39:a2:3b:c4:dc:05:cc:02:b9:1a:
45:d2:1a:6c:c2:b2:5f:07:4d:3c:25:ed:c9:0b:fb:85:ce:37:
01:8e:98:23:5a:07:d6:65:0b:99:c4:e7:58:0f:42:59:bf:eb:
e2:01:2e:dd:b5:66:7b:d2:59:8f:2d:2d:85:1b:00:98:38:5f:
c4:0a:3a:5a:b2:ab:52:00:01:12:ab:56:f9:5f:4f:25:aa:64:
d3:e7:00:b5:b9:d9:93:64:68:fa:fa:c0:1f:42:76:78:1d:e6:
de:3e:5b:38:6a:2b:9a:33:d7:2a:ec:17:b6:73:d2:9a:a8:1d:
ca:4e:20:c9:eb:c6:39:55:a6:95:0e:3f:2c:1a:62:23:8e:c5:
7f:27:04:00:c7:19:4c:f9:88:77:40:9d:1c:b1:7b:80:1f:e9:
fe:15:38:cc
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzCbTxOXCAznWauskgqQmA7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0
ZWYzYWEwHhcNMjQwMTAxMDAyOTQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTgzMjBmOWU1NmZmYzU5MjhmZmJhNjM5YjhkZTMwMjkxMDhkMGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7/7ikQPFvqghCmzLzR90Yiew8zF
FQq2YsOVpTJVDTybfIX0RdR4Rz4CZmzTZh+SI4Ek0SH02BDkNuMz9/SKx0IlOquK
NJ1RGO9RQcrxWQoGGGw4/UqIBhQcjKo0w1c7XfV06Zoa39H0AGYnWFNadEC6CbOL
JAINdl0sBVgD6yGkcPubJ4oyoAQ8Teb11HCRBt7jer0XGahQdL0lSPQXWWwMXkY4
o3yDhparO8FrK1ZFRCxui2MuHNsLCHRjYlEzX5eO0CKUKKaGLBfvetO/HENxrjXN
ijVdcTcfNk1G8zZ6lAFzXLWoyKIgJ27PTmT/KlvX7j6uIFZ0+ry9TYgNwQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFM6DIPnlb/xZKP+6Y5uN4wKRCNCzMB8GA1UdIwQY
MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt
YTU0MWQxYmNlZTE5LzEvem9NZy1lVnZfRmtvXzdwam00M2pBcEVJMExNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5
LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6qB+Au
MA0GCSqGSIb3DQEBCwUAA4IBAQCR5y1DHeIvbfWPCsPz2KSmej6Q4k5T6ZKF2NT4
JRyCTDW9Z8RFd5dnhhd97AbDS/Btnmi47n4thUuOqCNsXSRWNVJJFBzX4mQVh7to
2tmP9/IPwClgrBJSmPRtTzeplDntqTmiO8TcBcwCuRpF0hpswrJfB008Je3JC/uF
zjcBjpgjWgfWZQuZxOdYD0JZv+viAS7dtWZ70lmPLS2FGwCYOF/ECjpasqtSAAES
q1b5X08lqmTT5wC1udmTZGj6+sAfQnZ4HebePls4aiuaM9cq7Be2c9KaqB3KTiDJ
68Y5VaaVDj8sGmIjjsV/JwQAxxlM+Yh3QJ0csXuAH+n+FTjM
-----END CERTIFICATE-----
Generated at Sat May 4 00:18:40 2024 by rpki-client on console-ams.rpki-client.org