Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d35d28-8ac1-459a-9129-3f7039345289/1/zA0_8vG5_gDTm6qEjzR1hOBFGuQ.roa
File: zA0_8vG5_gDTm6qEjzR1hOBFGuQ.roa (raw, json)
Hash identifier: DZLKJj+sMOrVKr6wbHMisJlNCYc01k9O/C8iMXuenm4=
Subject key identifier: CC:0D:3F:F2:F1:B9:FE:00:D3:9B:AA:84:8F:34:75:84:E0:45:1A:E4
Certificate issuer: /CN=496e79694637ee05579e1804c14d851e382a14c8
Certificate serial: 018CC8014098410208B1AA15185355C45097
Authority key identifier: 49:6E:79:69:46:37:EE:05:57:9E:18:04:C1:4D:85:1E:38:2A:14:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SW55aUY37gVXnhgEwU2FHjgqFMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d35d28-8ac1-459a-9129-3f7039345289/1/zA0_8vG5_gDTm6qEjzR1hOBFGuQ.roa
Signing time: Tue 02 Jan 2024 02:29:34 +0000
ROA not before: Tue 02 Jan 2024 02:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51659
IP address blocks: 2a09:3700::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d35d28-8ac1-459a-9129-3f7039345289/1/SW55aUY37gVXnhgEwU2FHjgqFMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d35d28-8ac1-459a-9129-3f7039345289/1/SW55aUY37gVXnhgEwU2FHjgqFMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SW55aUY37gVXnhgEwU2FHjgqFMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:40:98:41:02:08:b1:aa:15:18:53:55:c4:50:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=496e79694637ee05579e1804c14d851e382a14c8
Validity
Not Before: Jan 2 02:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc0d3ff2f1b9fe00d39baa848f347584e0451ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:83:c4:3c:c2:bb:c5:eb:85:4e:56:37:9d:e2:
59:33:74:a9:70:59:a9:04:50:b4:b3:f1:ff:7d:42:
ca:c1:51:23:0a:29:83:2f:b0:45:96:50:a1:c0:db:
5c:6c:e4:15:c9:85:16:e1:bd:95:13:ac:52:e6:c8:
6e:7b:c4:64:81:91:b0:0c:9d:9d:b1:23:62:7d:34:
57:27:9e:93:fa:b8:77:58:20:ee:e0:5d:f5:35:83:
43:5d:27:dc:1a:29:02:95:48:5d:51:55:7d:a1:38:
fd:22:32:a0:3a:28:b9:e0:72:25:0f:5b:82:42:db:
42:0d:cc:5f:68:b9:85:0a:d6:4d:df:44:40:bd:07:
af:49:7a:a7:b5:98:f1:4f:bb:b2:b1:9c:c8:25:5e:
58:b4:93:81:df:c1:b2:ed:55:57:be:0e:a3:3d:43:
c3:f7:eb:f4:57:82:b8:5d:77:3d:1b:63:23:d3:4d:
74:12:c0:88:b6:d8:cb:28:ae:91:6d:4f:81:42:ee:
72:06:27:ec:cd:f6:5c:49:4d:49:ca:e6:e0:4c:55:
ff:d0:b4:d2:8b:14:31:08:3b:69:44:b5:a2:cc:37:
a1:4e:3d:b7:7b:71:29:d8:0b:93:64:c5:0f:e2:12:
7b:f0:6a:67:5f:ad:f1:5a:60:c9:65:d7:2a:92:8a:
a2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0D:3F:F2:F1:B9:FE:00:D3:9B:AA:84:8F:34:75:84:E0:45:1A:E4
X509v3 Authority Key Identifier:
keyid:49:6E:79:69:46:37:EE:05:57:9E:18:04:C1:4D:85:1E:38:2A:14:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SW55aUY37gVXnhgEwU2FHjgqFMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d35d28-8ac1-459a-9129-3f7039345289/1/zA0_8vG5_gDTm6qEjzR1hOBFGuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d35d28-8ac1-459a-9129-3f7039345289/1/SW55aUY37gVXnhgEwU2FHjgqFMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3700::/32
Signature Algorithm: sha256WithRSAEncryption
31:81:43:fd:21:5a:98:52:48:82:d5:e3:bf:9e:9b:4e:a7:a8:
2e:81:4f:5c:45:54:c7:14:f2:e4:b7:1e:05:a8:99:21:d7:91:
c6:79:60:c7:77:d6:46:02:2e:9c:79:b3:d3:52:83:5b:38:96:
08:e4:d7:41:d5:fe:85:4c:5a:42:66:52:52:c9:93:2b:dd:d6:
05:41:34:7f:f8:4d:0f:34:af:ad:95:b6:3e:ce:2e:22:6c:ab:
79:a6:72:04:5a:f5:9f:bd:82:d6:fb:97:f0:3c:89:15:d3:67:
2e:e2:40:3f:e5:c1:3e:75:a4:b0:2e:48:87:6d:f8:6d:d0:5f:
b9:b3:ab:ba:25:be:02:18:02:72:4e:8e:01:60:e9:a8:2c:7d:
94:f8:09:82:12:65:68:df:5b:c6:7c:15:0d:27:83:27:c4:c8:
58:14:0a:29:ab:9d:a4:09:1c:35:d9:81:35:de:c3:8f:b2:d0:
57:33:1c:a3:da:01:1a:93:0a:13:65:ba:a1:23:74:6f:1e:37:
af:97:61:20:fe:48:57:4f:4c:06:1b:45:6b:72:22:8a:51:da:
ee:15:91:df:a5:dd:d7:4c:07:f1:59:ac:b2:63:0a:0c:06:50:
f4:cb:2c:6b:ba:4f:ba:23:f9:c6:14:1d:cd:2f:bf:fa:66:ce:
b3:10:c5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:46:07 2024 by rpki-client on console-ams.rpki-client.org