Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/ZbSYwauuiTLJeDrmC54fNKjLaCU.roa
File: ZbSYwauuiTLJeDrmC54fNKjLaCU.roa (raw, json)
Hash identifier: Y7/h0Escw6VlGseA0F2i6VOUtg6R9qqU2BzamRV2GDM=
Subject key identifier: 65:B4:98:C1:AB:AE:89:32:C9:78:3A:E6:0B:9E:1F:34:A8:CB:68:25
Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Certificate serial: 01932C22F9DE6FAF316F9095B165448AEAC9
Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/ZbSYwauuiTLJeDrmC54fNKjLaCU.roa
Signing time: Thu 14 Nov 2024 19:25:09 +0000
ROA not before: Thu 14 Nov 2024 19:25:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206236
IP address blocks: 2001:bf7:fc00::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2c:22:f9:de:6f:af:31:6f:90:95:b1:65:44:8a:ea:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Validity
Not Before: Nov 14 19:25:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65b498c1abae8932c9783ae60b9e1f34a8cb6825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b8:b5:09:7a:94:82:39:2a:c7:fe:2a:df:0a:
97:65:94:16:4a:61:c2:8b:a4:23:de:0d:fe:8d:43:
60:c1:7a:4e:27:6a:26:f3:ae:82:1f:ed:54:e4:08:
fa:0d:49:ff:50:9e:d3:d9:ab:3c:59:c9:24:be:c2:
41:32:50:0d:d3:57:53:f1:dc:2d:65:42:ee:4f:78:
51:78:77:be:1c:89:d3:6c:73:a1:ae:1e:8f:7d:72:
5f:0a:7d:96:2e:56:fc:a4:46:60:59:68:d2:a9:48:
0f:8c:9c:d3:18:0a:a5:5e:19:83:dd:51:bc:f3:3e:
bb:b0:de:14:09:b9:58:01:9f:b0:83:f9:b5:34:20:
19:43:06:f1:cf:eb:1e:ae:11:ae:44:96:d2:7d:a2:
fc:e6:a0:73:24:38:82:92:f1:79:b4:77:de:e9:65:
1f:d8:e7:98:d8:33:60:a2:41:ee:d0:e4:77:95:12:
e8:81:86:4e:1b:05:be:07:b9:72:07:e9:52:ed:4d:
89:7d:26:16:fb:29:86:a4:fd:27:70:87:b2:9e:c0:
f9:0f:d3:a9:f8:fb:1a:0d:56:09:79:51:77:dd:1c:
40:0e:9a:c4:54:aa:4f:1b:e0:b4:be:92:62:08:71:
76:aa:78:e5:50:9e:bb:f1:87:ae:41:c5:20:48:d7:
5e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B4:98:C1:AB:AE:89:32:C9:78:3A:E6:0B:9E:1F:34:A8:CB:68:25
X509v3 Authority Key Identifier:
keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/ZbSYwauuiTLJeDrmC54fNKjLaCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:bf7:fc00::/44
Signature Algorithm: sha256WithRSAEncryption
71:54:1a:6b:1c:79:7d:9c:1d:a9:5d:70:6c:59:87:ad:8b:34:
2d:55:05:c0:d4:4a:83:67:2f:7d:24:82:b2:27:0c:e2:63:f1:
cf:35:ab:53:f6:19:24:57:c5:93:38:a4:27:f1:43:3b:1c:08:
ef:ff:d4:f7:46:4d:80:86:82:9f:61:43:49:b7:bb:a8:bf:92:
21:41:7e:3f:c6:1e:fc:91:c9:87:c9:d7:7b:9c:5a:eb:5f:79:
84:3c:eb:4e:ec:f5:d3:45:d2:10:29:5c:22:4e:a9:4a:ed:0b:
a6:f0:61:58:86:c5:5c:cc:de:2e:d6:52:f1:76:09:04:96:ff:
0d:a3:b8:09:04:2a:65:10:78:fd:1a:24:f2:96:55:8f:6e:39:
1a:58:cc:52:3a:0c:8f:47:58:1a:b3:82:2e:d4:75:d2:ac:0f:
b4:42:ca:f0:be:fd:2e:ec:33:af:45:bc:0e:07:6f:be:3f:21:
8e:3d:25:27:11:52:d4:c1:4e:0b:0f:02:9b:f1:bf:fd:3a:97:
7a:5c:6b:05:91:45:bb:d2:f0:62:d5:1a:11:93:56:6b:ad:d5:
b6:b8:d0:18:b5:22:78:86:8d:f7:bd:ab:3b:aa:df:53:6c:b0:
6a:1f:7e:2c:8a:25:50:cb:c1:53:5a:08:0a:07:a3:30:04:1e:
70:bc:09:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:04:35 2024 by rpki-client on console-fra.rpki-client.org