Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/zR8kZ0rmxAl32VQV2vM-e-W0dXM.roa
File: zR8kZ0rmxAl32VQV2vM-e-W0dXM.roa (raw, json)
Hash identifier: VuLFHAQ2ZDkH9HN2DsLqtvgCKE0aNB4190QD9jJc8Xs=
Subject key identifier: CD:1F:24:67:4A:E6:C4:09:77:D9:54:15:DA:F3:3E:7B:E5:B4:75:73
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 018FE31FC3FE25288CF92824789B8D742037
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/zR8kZ0rmxAl32VQV2vM-e-W0dXM.roa
Signing time: Tue 04 Jun 2024 12:01:00 +0000
ROA not before: Tue 04 Jun 2024 12:01:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205745
IP address blocks: 2a09:140::/29 maxlen: 29
2a0d:e0c0::/29 maxlen: 29
2a0e:1b40::/29 maxlen: 29
2a10:240::/29 maxlen: 29
2a10:240::/30 maxlen: 30
2a10:244::/30 maxlen: 30
2a10:740::/29 maxlen: 29
2a10:f40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 07:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e3:1f:c3:fe:25:28:8c:f9:28:24:78:9b:8d:74:20:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Jun 4 12:01:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd1f24674ae6c40977d95415daf33e7be5b47573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3a:5e:55:dd:89:ea:dd:d4:5f:25:6c:e5:3d:
66:3b:c3:43:0f:71:84:af:96:b8:2a:a4:1c:93:b3:
76:6f:bb:4f:c2:30:85:d4:1a:ec:d4:c4:04:81:ac:
c0:52:55:20:a7:6f:5c:65:20:55:70:24:0e:28:92:
aa:68:8d:53:e1:04:6e:9c:12:4c:5f:4d:0e:fa:98:
95:9b:7e:a2:5a:4d:3a:21:b8:2f:7d:2c:56:b5:e0:
2e:f6:c4:74:41:98:b6:07:08:b1:0d:1e:4a:bc:2f:
ff:ce:84:01:5c:03:ef:d1:54:2a:6a:73:c5:cd:b7:
e6:f2:86:64:4e:10:1a:67:e6:f9:01:43:8f:a2:24:
33:d6:94:04:5f:28:3f:2a:9b:d7:6f:ca:60:19:de:
81:97:f2:27:20:0f:3d:a9:2f:13:7d:38:f2:e6:58:
2b:92:fc:15:32:9e:a8:ee:39:24:a0:12:5f:03:08:
80:85:07:5f:1e:21:15:ec:07:25:52:12:e3:e8:08:
7c:bd:62:38:24:bd:46:67:89:dd:c3:80:57:7a:e0:
5d:93:9c:7f:1e:56:8a:9a:f7:0e:1d:e8:bb:2e:f1:
37:5f:ed:65:aa:bc:02:e6:20:8f:7b:dd:6a:fe:0f:
32:eb:91:85:01:18:a1:5e:c7:47:cf:9a:90:0b:95:
67:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1F:24:67:4A:E6:C4:09:77:D9:54:15:DA:F3:3E:7B:E5:B4:75:73
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/zR8kZ0rmxAl32VQV2vM-e-W0dXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:140::/29
2a0d:e0c0::/29
2a0e:1b40::/29
2a10:240::/29
2a10:740::/29
2a10:f40::/29
Signature Algorithm: sha256WithRSAEncryption
25:f6:b3:0b:28:fc:a6:d9:77:10:7b:30:d3:1a:ce:bd:9b:95:
24:e6:84:22:c5:88:a3:0d:32:00:a1:33:0f:ac:d5:7b:88:35:
80:6f:f5:e1:89:b5:91:8f:34:6d:9a:5a:af:cd:03:da:da:7d:
1a:cf:9b:b4:f8:97:e0:4d:82:2e:59:45:bd:5e:df:52:04:ce:
8d:ed:25:34:bd:20:70:06:a4:86:91:17:ff:a8:c5:c7:5a:41:
e7:13:ae:d0:bb:8d:fc:74:81:8d:a7:4b:72:2e:ca:04:7a:0f:
cb:f3:bf:04:14:08:41:7e:1b:a1:f9:62:0e:27:2f:1d:69:58:
7f:36:9d:c8:f9:5f:7e:37:5f:ed:5f:5b:68:b5:13:ce:ff:da:
82:54:ba:f5:a5:06:d5:d9:89:42:5d:9a:a8:26:92:44:a0:f7:
74:04:c1:26:2c:fc:af:09:87:04:ce:db:cc:f1:67:31:a3:90:
e4:78:77:1b:af:2d:d4:f9:a8:9d:02:e7:f3:ff:ab:4a:74:0b:
36:c3:73:5a:e0:e7:2a:44:f5:8c:91:34:c5:da:0b:c9:90:0c:
cb:57:39:86:5e:7a:d7:45:0d:c0:1c:d7:b6:d5:88:10:16:1f:
06:de:1e:80:23:9d:80:2d:75:89:c8:05:f8:aa:08:98:3c:7b:
d8:ce:58:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 10:41:18 2024 by rpki-client on console-fra.rpki-client.org