Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/zS_f_Zqo9G9pzbf77Q6BLBtUGOI.roa
File: zS_f_Zqo9G9pzbf77Q6BLBtUGOI.roa (raw, json)
Hash identifier: Ie0iFIFpz//23kjn1ZTqjflTheL9juBbcWqSF6uRLTg=
Subject key identifier: CD:2F:DF:FD:9A:A8:F4:6F:69:CD:B7:FB:ED:0E:81:2C:1B:54:18:E2
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 019077C07060379FE09FE83EE3281486CEC0
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/zS_f_Zqo9G9pzbf77Q6BLBtUGOI.roa
Signing time: Wed 03 Jul 2024 08:40:18 +0000
ROA not before: Wed 03 Jul 2024 08:40:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30788
IP address blocks: 2a0e:4780::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:77:c0:70:60:37:9f:e0:9f:e8:3e:e3:28:14:86:ce:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jul 3 08:40:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd2fdffd9aa8f46f69cdb7fbed0e812c1b5418e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:81:de:28:d5:0e:b4:af:8c:a0:e7:b6:ed:55:
6e:ef:53:f3:4e:10:15:19:81:80:1f:5b:b3:c7:c9:
fd:ea:86:bd:70:44:e1:89:60:91:05:2e:de:fb:05:
9e:33:ee:8c:3b:ac:b5:54:73:7a:ce:a3:24:9d:84:
a2:ed:d3:b2:e0:91:f6:13:1b:c8:7f:95:69:39:5d:
98:63:28:7d:19:20:52:cf:1a:4a:e5:9b:38:4d:9e:
4e:88:97:89:2d:3b:9b:4e:8e:26:af:27:b9:b8:55:
30:22:37:c3:e5:0a:94:b1:b2:2b:3d:a2:38:f8:9e:
65:b4:2f:7e:76:c7:c6:66:5c:db:08:c7:9d:e9:16:
68:b7:41:53:07:f2:7e:65:59:6f:59:4d:fd:ea:9d:
02:50:45:a7:a8:5f:ab:d1:f2:ba:f7:87:c1:7e:12:
7f:f8:b4:80:59:a2:59:6b:4a:4e:96:c3:cf:85:04:
cd:0f:38:d6:de:0c:2c:a3:41:a5:a7:49:2b:cb:93:
33:72:a1:cd:ae:5b:b2:b5:6c:ac:83:51:ad:cf:38:
f3:be:74:b1:7a:23:59:9e:6e:e2:53:f5:b3:6a:a9:
e1:a2:71:a5:77:a1:f7:37:8c:ff:7c:1f:78:2f:50:
0e:1b:2f:f2:c2:94:5c:82:0c:b5:f5:70:12:5c:bd:
75:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2F:DF:FD:9A:A8:F4:6F:69:CD:B7:FB:ED:0E:81:2C:1B:54:18:E2
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/zS_f_Zqo9G9pzbf77Q6BLBtUGOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4780::/29
Signature Algorithm: sha256WithRSAEncryption
34:12:17:ca:d2:46:9b:ed:c1:8b:04:5f:31:1b:2f:e2:f2:f0:
a4:7c:c8:49:18:16:cb:9e:78:bf:d2:68:0f:0e:af:ea:a1:6b:
47:b5:4f:b9:aa:28:28:58:ff:aa:07:a8:c1:1e:df:ff:19:99:
f2:9e:b8:5e:c7:69:5b:6a:25:0f:4f:8d:04:a9:cb:c8:8a:b4:
69:56:cd:00:fc:00:d2:34:c0:49:99:31:3b:16:9f:14:ab:ab:
9e:17:67:60:70:f4:6e:7a:c5:5d:0b:ed:20:c7:d2:6f:85:2e:
7e:03:55:a1:43:f2:37:db:ee:12:fd:b3:77:76:e8:e8:ad:26:
fd:97:11:38:43:47:35:d4:f8:da:8b:da:0f:9d:b7:fa:b2:d9:
f4:f1:6b:c9:1b:8d:70:7c:24:b5:29:79:b6:2a:c6:fd:ba:b4:
19:b7:c6:cf:a1:cf:6d:01:34:05:a3:32:4b:32:c8:3e:cb:e6:
05:23:3a:25:49:4f:c9:50:ab:16:4c:74:3d:c3:53:47:66:da:
7e:61:a8:29:0f:81:31:98:9a:22:7a:04:07:e8:a1:80:4c:6c:
15:00:b6:e7:31:90:f0:4b:89:f7:e9:81:4f:39:b7:dd:2c:ba:
25:84:eb:e2:ed:8f:0f:31:31:d0:bd:6b:30:18:89:1f:f1:53:
23:81:1f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:49:47 2024 by rpki-client on console-fra.rpki-client.org