Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/zJZth_wgvVqVuni_vKJ7au6-dpk.roa
File: zJZth_wgvVqVuni_vKJ7au6-dpk.roa (raw, json)
Hash identifier: 0k6U75xuayKqUa3WEvxDnCEf0PMn23XzUDddlPYIZ2s=
Subject key identifier: CC:96:6D:87:FC:20:BD:5A:95:BA:78:BF:BC:A2:7B:6A:EE:BE:76:99
Certificate issuer: /CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Certificate serial: 018F5DC49ACB2C24AEC461E6B1A53824A907
Authority key identifier: A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/zJZth_wgvVqVuni_vKJ7au6-dpk.roa
Signing time: Thu 09 May 2024 14:31:56 +0000
ROA not before: Thu 09 May 2024 14:31:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215004
IP address blocks: 2a14:3244:beee::/48 maxlen: 48
2a14:3244:beef::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 13:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:5d:c4:9a:cb:2c:24:ae:c4:61:e6:b1:a5:38:24:a9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Validity
Not Before: May 9 14:31:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc966d87fc20bd5a95ba78bfbca27b6aeebe7699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:55:28:2e:41:6c:e3:49:72:2b:47:4c:bc:33:
bb:b5:c0:a0:ee:04:6d:91:2e:da:21:6f:36:ff:df:
43:49:d8:25:20:af:a1:74:ca:38:16:eb:18:2d:6c:
1d:9d:ff:83:53:cb:70:7a:3c:f2:1f:30:8b:38:fb:
fb:f9:2d:56:6b:3e:f0:68:63:f4:82:28:32:3f:bf:
32:b9:b4:5f:4a:be:e8:c5:76:65:c4:18:34:c0:26:
fc:20:e9:ba:25:52:52:eb:aa:8f:52:5c:01:04:bf:
a4:9b:5b:b8:ed:bd:59:62:36:e7:02:5e:e8:a8:e0:
fd:74:f7:7a:4f:d9:93:ad:28:4c:b8:bb:2c:97:3d:
d7:64:69:29:be:b8:0f:c8:40:ae:6c:2c:9e:81:eb:
1c:7b:f5:2e:a1:c3:a1:b3:ee:08:65:93:19:66:01:
24:28:14:de:6e:a2:9d:15:71:58:92:1f:38:7c:4a:
a9:ab:e0:71:59:ef:bb:f0:39:d6:b4:b3:6a:3b:5c:
79:20:7b:ed:b6:c9:9b:b5:ad:e6:b7:fa:b6:20:31:
f5:3d:ed:ac:c5:03:02:24:98:fe:6d:37:57:ae:e5:
09:4d:b0:e4:53:dc:d6:0c:3b:35:88:1b:ed:0b:0b:
4d:cd:a5:09:9c:c6:ad:43:80:a5:f9:05:81:3e:9c:
43:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:96:6D:87:FC:20:BD:5A:95:BA:78:BF:BC:A2:7B:6A:EE:BE:76:99
X509v3 Authority Key Identifier:
keyid:A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/zJZth_wgvVqVuni_vKJ7au6-dpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:3244:beee::/47
Signature Algorithm: sha256WithRSAEncryption
7a:1d:60:28:5d:65:06:15:30:6b:48:cf:75:35:18:40:5c:44:
6d:a6:33:6a:68:0f:2a:2f:a6:21:92:e7:02:bd:25:b6:c4:d1:
d6:91:9d:92:05:8f:5d:eb:df:e5:05:ef:0c:78:05:32:ee:9a:
a8:80:7a:49:cd:e2:61:33:09:bf:d9:54:36:1c:2c:57:bc:5d:
70:64:7e:14:c5:32:af:25:ad:6d:65:69:69:7f:ad:51:b9:11:
e0:14:5c:ae:d2:96:57:69:cb:a5:a6:46:ae:24:ed:26:fa:f1:
76:db:24:57:81:9f:0f:4d:6f:4b:20:59:ca:f8:ab:28:a1:93:
80:c4:fc:e2:9a:1c:02:f6:2a:3b:7c:12:13:be:9e:61:a0:98:
1b:89:b6:ff:35:17:5f:d6:76:a9:3f:7a:0d:af:af:b8:b3:c5:
3f:07:7e:61:2e:8e:a2:b6:32:67:bf:f5:76:e2:ca:db:97:a9:
0e:5d:c4:08:eb:45:5a:f8:8b:d3:b9:71:23:bb:0c:e8:7e:1c:
69:69:da:7b:bc:92:37:ce:b4:65:09:56:a1:5d:82:7f:d7:46:
3c:2c:c9:bc:14:5e:37:12:15:dc:b1:6c:57:18:3c:25:ee:b6:
cd:a7:65:9c:af:25:6d:b5:7d:8a:56:9b:8c:4e:8a:d7:99:46:
e2:f2:49:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 19:56:20 2024 by rpki-client on console-fra.rpki-client.org