Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/1dZrYRqjT8eeIZAYSoaUPGSUfcg.roa
File: 1dZrYRqjT8eeIZAYSoaUPGSUfcg.roa (raw, json)
Hash identifier: zmhHjBvhqCNDqinby8jG07csov5vZnevOp/+Vo48sA8=
Subject key identifier: D5:D6:6B:61:1A:A3:4F:C7:9E:21:90:18:4A:86:94:3C:64:94:7D:C8
Certificate issuer: /CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Certificate serial: 018D77F98017CDEAC106D3D86230D24A6B80
Authority key identifier: 66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/1dZrYRqjT8eeIZAYSoaUPGSUfcg.roa
Signing time: Mon 05 Feb 2024 06:34:16 +0000
ROA not before: Mon 05 Feb 2024 06:34:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200216
IP address blocks: 2a13:6940::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:03:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:77:f9:80:17:cd:ea:c1:06:d3:d8:62:30:d2:4a:6b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Validity
Not Before: Feb 5 06:34:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5d66b611aa34fc79e2190184a86943c64947dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0b:f2:19:d6:9f:9d:5b:25:38:3c:a2:74:67:
d8:4a:43:90:b0:de:81:9d:f4:ee:ab:90:01:72:1a:
1e:ba:d5:03:b7:96:64:a9:19:0e:f5:e1:f2:77:fe:
2e:2a:d5:7b:7e:02:22:55:ee:24:be:80:9f:35:ca:
2a:df:56:dc:c8:5e:e8:e4:09:ea:db:cb:00:6e:1b:
f8:60:75:a9:02:67:1c:f1:0a:1f:e5:34:52:ad:6a:
e4:ad:e5:7d:1e:bb:c6:b1:ce:31:53:71:54:87:78:
65:7a:2b:49:7a:ae:4e:ff:8c:d9:c0:16:b9:a5:4a:
19:b6:4d:f2:ad:9d:13:2d:54:4c:6b:de:94:32:5d:
8c:ce:1a:e4:93:d2:3e:68:9d:54:55:ec:a7:de:31:
22:78:85:ab:93:da:82:6a:9b:fd:1d:c1:26:d3:81:
82:5c:2e:6b:2e:84:be:f5:51:7f:51:75:94:7b:da:
fe:09:dd:fd:98:b7:f7:f7:0b:98:00:69:ac:fe:12:
b6:54:fb:6f:aa:68:2f:7a:0c:54:81:79:76:b7:2c:
8b:db:e9:3c:f5:72:5d:1d:87:3c:69:fa:d4:16:15:
11:0c:b0:52:d3:c7:80:6b:72:2d:f3:49:cc:b7:7c:
f2:48:a6:55:a9:20:c9:3a:66:fb:51:f6:29:21:8f:
5b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D6:6B:61:1A:A3:4F:C7:9E:21:90:18:4A:86:94:3C:64:94:7D:C8
X509v3 Authority Key Identifier:
keyid:66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/1dZrYRqjT8eeIZAYSoaUPGSUfcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:6940::/29
Signature Algorithm: sha256WithRSAEncryption
a8:52:76:9b:39:b4:dc:10:a3:60:82:b7:52:16:75:6d:2a:67:
aa:f3:ec:c7:1a:96:b4:f3:d0:28:e2:17:9c:5d:d2:53:3f:7b:
9d:ed:2a:39:11:ed:ff:a5:45:cd:b6:05:e7:60:3f:31:af:52:
b4:5b:ae:72:67:54:a6:98:86:ca:69:f2:22:ef:4c:d2:c2:4a:
f7:33:40:ab:d3:26:75:e5:ce:cf:f6:47:19:02:72:6e:a1:32:
a8:ad:fa:88:ab:de:48:25:15:81:f6:ad:be:94:aa:9b:af:12:
3f:1d:90:f2:ba:27:3c:29:ea:cd:6f:90:c5:c1:0f:c2:75:1a:
5f:d0:30:7b:a9:03:97:6e:fc:a2:65:b5:6a:69:af:7c:46:5e:
bf:55:7d:7f:e4:73:09:03:43:9e:f3:29:40:23:a0:11:9d:4b:
b8:41:08:45:8b:8a:15:2a:69:8d:34:c2:0c:eb:3d:a1:eb:d2:
2f:09:67:93:a9:89:b7:ef:6f:9d:04:36:f2:36:70:72:d9:56:
49:86:e3:63:8c:e5:79:ce:0c:82:16:d6:5f:67:fc:d5:66:ab:
76:20:a2:83:73:58:1c:ef:22:1a:fe:d5:c6:32:49:94:b6:33:
32:d2:3c:63:ff:5e:4c:a8:93:ca:f3:08:17:e7:83:88:d7:f2:
62:86:91:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:41:24 2024 by rpki-client on console-ams.rpki-client.org