Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/ZDVHFdgCtKcTVq6FqREKiT34k48.roa
File: ZDVHFdgCtKcTVq6FqREKiT34k48.roa (raw, json)
Hash identifier: 7HdGly734tT6G27vOCgSc2dzYthsn1Vc3S+3F2kTtMA=
Subject key identifier: 64:35:47:15:D8:02:B4:A7:13:56:AE:85:A9:11:0A:89:3D:F8:93:8F
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 018F1FA0DC27B29753D2B87855C6AEC9EB20
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/ZDVHFdgCtKcTVq6FqREKiT34k48.roa
Signing time: Sat 27 Apr 2024 12:56:26 +0000
ROA not before: Sat 27 Apr 2024 12:56:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215041
IP address blocks: 2a0a:79c0:300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:1f:a0:dc:27:b2:97:53:d2:b8:78:55:c6:ae:c9:eb:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Apr 27 12:56:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64354715d802b4a71356ae85a9110a893df8938f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e5:b8:99:be:e3:af:85:1e:99:94:74:c5:22:
20:15:c7:0c:b2:23:74:62:24:75:5e:83:a6:b3:3d:
6b:d3:73:bc:b0:de:67:86:d3:bf:88:cc:10:09:e1:
98:83:41:82:26:0b:f0:32:78:09:15:80:7a:08:bf:
96:ef:53:e6:d8:12:c8:66:cc:0a:01:fd:8f:2f:79:
16:e1:21:99:fe:67:87:31:2d:e7:f3:6c:9e:0e:49:
92:d0:ca:0f:03:1c:59:a4:a9:4d:24:7b:c6:63:e6:
6e:4c:1d:0b:aa:1a:66:6b:08:bd:b7:4f:1a:7d:c0:
b4:9b:da:3d:55:72:9c:30:97:a9:b8:b0:b6:2e:21:
5c:c0:5b:12:6b:ab:58:a5:a3:44:4a:24:e0:91:9f:
a2:99:89:e6:8b:74:75:77:9b:ad:c9:8c:23:73:a7:
84:49:e9:9b:5c:93:dd:1b:57:80:2b:c3:82:1f:60:
f5:a7:b2:4a:4e:d9:14:0b:61:4c:ad:75:52:f4:bf:
74:61:b3:66:18:9d:d4:89:d5:00:7d:ab:04:1b:ff:
8f:0e:83:99:3c:da:f8:3e:a3:56:7c:ce:df:ea:d8:
7c:f1:45:a5:f7:d2:39:fe:5d:ea:99:bc:5f:01:70:
bc:6d:1c:d7:c9:51:d9:d1:0e:4d:f5:1b:58:64:f9:
91:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:35:47:15:D8:02:B4:A7:13:56:AE:85:A9:11:0A:89:3D:F8:93:8F
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/ZDVHFdgCtKcTVq6FqREKiT34k48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:79c0:300::/40
Signature Algorithm: sha256WithRSAEncryption
68:e5:fb:34:49:8c:2a:dc:84:c8:84:cf:17:75:f0:0d:ff:04:
b2:45:cc:9a:5b:7c:8e:b7:75:0d:55:e7:eb:33:f8:95:b0:db:
32:9b:77:d3:09:bf:6e:ad:3f:0f:3d:36:cc:fb:29:67:b4:19:
5f:b5:87:60:47:d7:fa:b1:0b:80:e4:43:5a:ab:d9:95:2e:9f:
37:d2:da:c5:f4:91:94:35:b6:24:71:88:18:21:21:52:25:1a:
4c:59:58:56:d9:b6:8d:f7:d6:af:50:ea:38:f2:08:4c:f6:0e:
f0:60:48:e2:b2:08:42:76:9e:91:1f:ee:83:a2:b9:13:32:e9:
07:b6:c5:95:10:c0:b9:9c:ff:41:6a:8c:ac:7d:c8:be:4b:15:
e4:4a:2e:36:de:6f:94:ac:35:5a:a9:3b:62:43:03:38:c8:e5:
d4:b3:ad:5f:f2:e3:de:e0:fe:af:59:98:a3:b6:69:94:d4:1f:
a2:40:2a:df:aa:48:b2:c8:71:d6:96:3e:76:19:4f:3d:63:91:
e7:49:33:5a:55:39:c8:63:90:37:43:dd:89:6d:67:70:8d:41:
e7:16:59:6f:6e:56:4a:69:aa:e2:81:1a:3f:62:26:4e:1b:02:
98:cf:3b:e7:9d:3c:d6:4a:dc:79:61:1e:8f:2c:96:d6:cf:3d:
56:e8:d1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:39:33 2024 by rpki-client on console-ams.rpki-client.org