Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/zLmBBFZ6qziW1Lr_M-Pj-n77D4E.roa
File: zLmBBFZ6qziW1Lr_M-Pj-n77D4E.roa (raw, json)
Hash identifier: EeCIle7XfC3hUZPyLgVwAyGSFircda7g8rSNaf+7y9s=
Subject key identifier: CC:B9:81:04:56:7A:AB:38:96:D4:BA:FF:33:E3:E3:FA:7E:FB:0F:81
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 018CCA29BB02A9DBCEE5792E8188573FD4ED
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/zLmBBFZ6qziW1Lr_M-Pj-n77D4E.roa
Signing time: Tue 02 Jan 2024 12:33:01 +0000
ROA not before: Tue 02 Jan 2024 12:33:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209209
IP address blocks: 2a11:2307::/37 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 May 2024 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:bb:02:a9:db:ce:e5:79:2e:81:88:57:3f:d4:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Jan 2 12:33:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ccb98104567aab3896d4baff33e3e3fa7efb0f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fc:73:51:3f:0e:7b:bf:93:67:19:95:8a:98:
28:7a:68:ce:ae:02:48:10:ea:7d:23:d3:ed:e6:ec:
e5:a0:1c:8b:55:ef:9a:7c:7b:ce:56:a6:40:f4:5f:
d9:5b:e8:99:a2:84:00:95:5b:d8:3c:52:12:6f:8e:
9e:e9:73:1b:03:b9:5e:74:20:39:f4:70:93:93:04:
22:a9:ec:3b:e3:48:1a:a0:c3:f7:65:a3:3e:0a:98:
0a:ac:41:bf:b3:28:d8:b6:61:5b:af:b5:9a:5c:ed:
6f:27:2c:d9:7d:e9:42:01:8c:20:ad:bc:e6:2d:79:
54:87:af:0a:f1:63:53:f1:54:86:92:ed:76:af:1a:
55:8b:4c:1b:ea:9c:ac:16:4b:af:3f:df:ec:9c:14:
ac:7a:fe:3c:88:8f:c3:32:49:84:7b:7b:a5:ae:58:
1d:88:8d:6f:1a:88:2d:a0:d5:e8:95:50:53:5c:05:
df:04:48:0c:6c:61:80:3a:f2:1c:39:fc:8a:9f:2a:
73:48:bb:b2:48:73:2d:ce:ac:b8:10:ea:3b:06:cf:
b9:cc:3c:f7:c5:3d:3d:1a:9d:d5:de:4b:66:14:67:
52:d2:70:dd:12:3f:4b:b1:66:84:04:81:75:b2:73:
79:15:b8:bf:41:61:ed:0a:bc:2f:6d:ea:34:bc:bc:
c3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B9:81:04:56:7A:AB:38:96:D4:BA:FF:33:E3:E3:FA:7E:FB:0F:81
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/zLmBBFZ6qziW1Lr_M-Pj-n77D4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:2307::/37
Signature Algorithm: sha256WithRSAEncryption
86:e0:b7:1f:07:6e:fa:82:c2:3b:3f:a5:cf:d8:90:31:0e:2b:
77:73:ca:dd:c4:76:00:74:c8:cf:24:24:b8:34:9a:77:31:93:
55:9b:3f:d2:61:78:89:14:44:31:c4:fa:c2:ac:b2:46:c5:8b:
11:99:43:55:66:96:7b:f2:a4:c5:f5:cb:8e:57:ed:73:0d:ff:
a6:91:81:c9:32:3b:3e:02:d0:00:8b:15:94:28:b2:f3:ed:b2:
92:b5:27:f5:04:8c:d7:9a:de:b9:7a:ea:5a:a1:e2:90:e9:83:
8f:84:b1:26:23:13:fa:98:81:a6:96:ff:52:1e:8a:89:63:d0:
c4:2a:51:ae:eb:15:f8:b2:fa:1d:fb:fa:db:81:ac:d5:78:1a:
f0:a5:32:3e:77:dd:09:79:1c:ca:5b:ec:8d:7a:e4:7a:c2:9f:
ce:57:ff:2a:fe:08:2d:37:8d:8b:7a:5f:f0:5f:ef:4e:7b:d6:
6a:3d:21:18:c4:e5:fc:eb:89:6f:91:4d:66:e8:a1:c3:3a:87:
01:45:af:64:0b:87:7c:44:5e:5d:0a:24:84:4e:0c:e5:27:ba:
e7:8f:b0:b4:c7:ab:05:45:7a:0e:04:21:db:f5:8a:57:4a:ff:
88:a2:bd:03:9d:9b:0b:92:e6:b2:71:88:d5:f2:f4:9f:2d:33:
47:f7:ce:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 12:55:48 2024 by rpki-client on console-fra.rpki-client.org