Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/dZXrjWz7MUUO9iyTZobjY-7W_k8.roa
File: dZXrjWz7MUUO9iyTZobjY-7W_k8.roa (raw, json)
Hash identifier: nXCHmpFL9VO+4JFUabcdh0iMBzWCTaTcYwZMt6ThTn8=
Subject key identifier: 75:95:EB:8D:6C:FB:31:45:0E:F6:2C:93:66:86:E3:63:EE:D6:FE:4F
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 018F4EA796C2751D336D0E6F2C4BBF5695AD
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/dZXrjWz7MUUO9iyTZobjY-7W_k8.roa
Signing time: Mon 06 May 2024 16:05:56 +0000
ROA not before: Mon 06 May 2024 16:05:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215427
IP address blocks: 2a0e:a780::/29 maxlen: 29
2a10:9600::/29 maxlen: 29
2a13:c0c0::/29 maxlen: 29
2a13:c140::/29 maxlen: 29
2a13:d240::/29 maxlen: 29
2a14:35c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4e:a7:96:c2:75:1d:33:6d:0e:6f:2c:4b:bf:56:95:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: May 6 16:05:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7595eb8d6cfb31450ef62c936686e363eed6fe4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6e:c7:15:d7:7f:99:13:07:23:f7:ce:58:22:
97:8c:2f:4c:df:42:7f:40:b2:43:f6:48:40:c3:4d:
0b:f0:b8:b7:d3:06:58:50:de:b9:de:27:6e:24:63:
e5:df:17:f2:fc:cb:6a:6c:5d:f6:58:7a:fb:a8:c6:
8c:f8:37:bf:48:d9:4f:81:05:ca:56:91:d3:14:03:
5a:b6:c5:ac:fc:5a:9a:77:0c:bf:e9:5b:ec:29:73:
61:33:cf:b9:a5:11:f7:b6:75:12:0c:c0:f1:4a:63:
03:6a:d2:5b:f3:4f:02:43:f3:2b:ae:ae:91:91:e4:
fd:43:7d:dc:26:6c:57:12:d7:b1:e7:57:1c:d0:a0:
eb:a8:0d:45:55:2f:17:13:2d:d4:33:54:80:8e:85:
6a:d6:9e:13:09:10:99:7a:70:cf:ab:0f:bd:00:05:
45:15:f9:f8:91:cb:e4:90:49:20:ff:d9:42:b9:cc:
18:d5:ba:4f:88:68:7e:2a:02:07:57:c2:ea:e9:4a:
ee:c6:94:a4:de:50:0f:dc:c5:04:b2:93:74:ad:76:
9a:4e:e3:fe:f0:88:6d:ea:19:65:94:6b:28:b0:18:
fb:05:2c:76:d2:2e:1e:98:f3:da:9e:9c:36:c0:be:
4f:5a:5f:23:35:c8:89:c5:4e:37:fa:bd:51:02:5a:
dd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:95:EB:8D:6C:FB:31:45:0E:F6:2C:93:66:86:E3:63:EE:D6:FE:4F
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/dZXrjWz7MUUO9iyTZobjY-7W_k8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:a780::/29
2a10:9600::/29
2a13:c0c0::/29
2a13:c140::/29
2a13:d240::/29
2a14:35c0::/29
Signature Algorithm: sha256WithRSAEncryption
06:e5:38:be:55:18:e1:32:31:40:88:c9:4a:ed:6b:38:f3:29:
42:44:c7:b9:8a:c1:b1:5e:06:e4:28:65:0f:7f:3c:e3:4b:a3:
9b:e5:79:af:01:3a:e3:f4:b1:23:b5:33:60:73:9c:35:3b:11:
2c:05:df:ce:e0:53:71:a2:39:59:9d:b9:c4:62:9b:f6:9c:09:
76:a9:5a:0c:d5:f8:52:d6:67:68:64:0b:2f:e9:19:ad:3c:04:
2d:a3:0b:4e:c2:d5:3e:19:c9:c2:11:fa:ca:2d:2d:d6:f1:d9:
64:6b:34:00:b9:9f:f7:af:83:3b:8d:6d:f9:7e:80:34:2f:97:
d1:90:de:c9:10:30:23:88:fa:ab:46:18:b9:4b:8d:aa:e0:3c:
9e:9b:a6:97:5c:f4:23:51:57:05:42:81:c8:51:76:f3:12:d4:
15:2c:2f:ae:61:62:cc:89:9e:94:c6:52:02:df:96:0a:3f:08:
7a:99:d0:bc:79:9b:34:bf:8e:14:12:1b:36:c5:3f:6f:a9:14:
84:56:9c:6c:a3:5c:32:84:59:8f:24:84:bd:02:92:e8:b7:8e:
9f:cc:fa:0b:c5:16:df:07:2b:08:74:56:04:6d:18:3a:e7:a7:
39:46:a9:08:da:88:d5:68:34:88:fa:4e:29:62:e1:58:6f:0d:
ef:ae:27:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:49:55 2024 by rpki-client on console-fra.rpki-client.org