Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/z2uqutJQgXPaSGHqrq8ChGOUbRs.roa
File: z2uqutJQgXPaSGHqrq8ChGOUbRs.roa (raw, json)
Hash identifier: AAK/K6USmhAkHlpNdgA75L/3Cfw9NMjMShnX6vrxfZw=
Subject key identifier: CF:6B:AA:BA:D2:50:81:73:DA:48:61:EA:AE:AF:02:84:63:94:6D:1B
Certificate issuer: /CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Certificate serial: 019164B58438569CD28E91EE9AE459C39732
Authority key identifier: 4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/z2uqutJQgXPaSGHqrq8ChGOUbRs.roa
Signing time: Sun 18 Aug 2024 08:58:22 +0000
ROA not before: Sun 18 Aug 2024 08:58:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203038
IP address blocks: 2a0d:bbc0:1::/48 maxlen: 48
2a0d:bbc0:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 20:25:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:64:b5:84:38:56:9c:d2:8e:91:ee:9a:e4:59:c3:97:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Validity
Not Before: Aug 18 08:58:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf6baabad2508173da4861eaaeaf028463946d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:70:3e:73:94:73:f2:36:38:de:c3:98:29:46:
4f:d3:57:e2:40:26:5e:fe:19:9b:78:d2:44:9f:e7:
b4:a8:f1:0a:1e:43:0b:0b:51:2a:51:d3:30:6d:fb:
a0:8f:3a:77:1b:d9:bb:b8:d4:29:af:0d:b0:8d:c3:
e5:54:80:e1:4e:72:59:c7:51:56:30:ae:fa:75:80:
aa:ac:0b:48:90:22:21:16:c6:5d:bc:e3:f4:aa:28:
49:5a:09:20:f0:98:7f:01:e8:fd:57:a4:ca:c3:55:
8b:a7:1e:1c:1e:b8:65:08:a1:f2:27:f0:a1:eb:22:
27:0a:67:8f:fe:c6:11:d8:27:99:87:df:34:2d:68:
80:54:e9:03:bf:3b:d5:2e:f0:9c:5a:e8:db:7b:b8:
55:2d:c0:bd:ed:24:92:a2:e1:a0:b2:44:ad:b2:8c:
3f:4f:68:af:60:2b:d4:cc:25:74:b4:bf:84:bd:72:
b9:ca:53:85:47:2a:44:a9:54:0a:3d:41:49:18:c1:
f7:27:cc:01:d8:38:8c:2b:1e:d4:c9:5a:ba:2d:03:
66:eb:15:ef:3a:25:fa:66:be:b0:5e:4a:25:9f:7b:
56:65:e3:03:7a:97:69:f8:d9:88:2e:b7:63:d3:8c:
17:21:c7:18:d9:bc:76:db:97:2a:05:41:01:01:1b:
71:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:6B:AA:BA:D2:50:81:73:DA:48:61:EA:AE:AF:02:84:63:94:6D:1B
X509v3 Authority Key Identifier:
keyid:4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/z2uqutJQgXPaSGHqrq8ChGOUbRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:bbc0:1::-2a0d:bbc0:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
69:99:12:08:44:a2:be:c5:8e:b6:6e:3c:77:e3:99:13:97:c8:
a4:95:7a:91:b2:6f:c9:b6:3b:00:14:d3:56:b3:a1:96:2c:21:
3f:3b:95:d7:44:c7:ca:19:04:5f:08:44:94:db:a3:0b:5c:a0:
b6:ab:b5:82:37:c8:2b:c1:4e:d7:35:f9:ee:36:be:e6:b3:f8:
1e:dd:cb:95:b5:b6:e9:79:14:1a:63:43:ec:cf:b5:29:74:52:
eb:29:f7:87:49:d2:fa:67:f1:ce:be:d6:80:bb:48:56:9e:c3:
1b:c5:66:aa:dc:cf:32:be:e0:c7:0d:a7:a4:b2:64:5d:87:90:
ce:a5:30:fb:14:9a:4d:60:f9:e6:ee:5d:1b:82:9e:65:26:c2:
70:92:13:79:17:ce:2a:b9:e0:f0:cc:ac:23:c1:ba:3d:e3:60:
ea:0e:e2:95:0a:17:aa:af:92:99:8f:b8:4c:74:a0:4f:58:72:
00:8c:fb:cb:81:fd:89:7a:b1:cc:04:57:3f:ed:d9:06:43:8f:
c0:23:00:82:d4:fc:bb:3b:d0:9c:af:52:d2:5c:a5:7b:95:3d:
11:b4:27:16:d6:35:f6:b4:02:28:ba:3d:73:4f:95:c4:69:db:
f5:02:1f:18:71:92:b5:9d:00:08:6a:b9:7f:f4:e9:b6:b4:40:
a5:27:a8:dc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 20 00:22:45 2024 by rpki-client on console-fra.rpki-client.org