Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/zEAumq5hcKcqxLAYH0m3FCyGoKY.roa
File: zEAumq5hcKcqxLAYH0m3FCyGoKY.roa (raw, json)
Hash identifier: +tYFJLvhB9DlFgH6px3IpGngCVja2uddRJh9U0C8ICs=
Subject key identifier: CC:40:2E:9A:AE:61:70:A7:2A:C4:B0:18:1F:49:B7:14:2C:86:A0:A6
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 018DA091BBB7524ACEC63608F4487E8A9B52
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/zEAumq5hcKcqxLAYH0m3FCyGoKY.roa
Signing time: Tue 13 Feb 2024 03:45:21 +0000
ROA not before: Tue 13 Feb 2024 03:45:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 132335
IP address blocks: 2a0a:8f40:56::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 12:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a0:91:bb:b7:52:4a:ce:c6:36:08:f4:48:7e:8a:9b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Feb 13 03:45:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc402e9aae6170a72ac4b0181f49b7142c86a0a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5e:9f:e0:22:5a:15:54:cc:47:3b:0a:68:c6:
54:64:12:6a:f4:31:6b:2c:f3:81:a1:78:1c:e0:c4:
3d:61:6b:9a:c6:1c:5c:49:50:b8:6a:18:03:0d:bd:
74:18:b7:05:d4:78:7e:88:3b:36:9b:d1:fc:ef:68:
46:0f:03:8f:c2:58:4f:c1:b1:f8:de:7a:64:0b:18:
69:e8:43:45:d3:55:42:03:91:8f:da:f0:7f:5f:76:
5f:3b:3c:93:76:81:a3:c0:9a:8e:cb:ac:47:ca:57:
57:2d:cc:49:5d:b4:32:88:45:93:39:3c:53:6b:bb:
cf:82:d0:43:6a:bb:22:6e:02:09:04:fd:86:ba:b8:
95:2d:c2:70:12:a2:ef:24:b7:b3:b3:be:22:d9:aa:
3c:00:dd:63:92:3a:ee:d4:12:4d:6d:be:38:36:77:
44:17:37:a6:89:d4:e6:36:74:e3:96:3c:67:4e:0f:
7c:83:c3:fb:d2:d5:2f:81:5f:81:13:c8:d2:ca:66:
f8:60:52:9c:3e:8a:2f:98:c1:cc:29:02:7c:26:d9:
62:8c:3e:b1:84:43:fd:57:b1:8d:4a:3b:7f:c0:ce:
6a:fe:85:25:ee:04:ac:b4:15:1a:88:52:30:98:e5:
c3:cb:f6:15:44:0e:f3:7c:07:b0:3d:2a:4a:d2:c1:
c3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:40:2E:9A:AE:61:70:A7:2A:C4:B0:18:1F:49:B7:14:2C:86:A0:A6
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/zEAumq5hcKcqxLAYH0m3FCyGoKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:8f40:56::/48
Signature Algorithm: sha256WithRSAEncryption
67:be:90:62:34:cb:97:31:a3:8a:c5:5c:f1:86:cf:11:18:42:
a8:f6:db:0c:90:ed:0b:d3:64:c6:64:f5:bd:a5:e6:9c:9c:25:
57:ab:fb:4f:7b:de:ef:05:94:b5:ff:61:68:bc:3b:dc:be:2a:
00:af:2c:1a:8a:1b:ed:b5:fe:00:86:0a:29:cc:c0:00:6d:96:
8f:a6:01:00:45:09:fb:30:5e:51:0a:e1:01:9e:18:68:be:32:
c7:77:93:c1:db:13:42:65:dc:19:48:ab:2e:db:ce:a3:e5:0a:
ff:0d:c3:b4:36:78:29:5e:25:84:4a:5b:4a:85:eb:a1:11:c7:
4c:30:e3:61:ad:6c:6a:4e:1c:3a:e5:00:cb:e3:d8:aa:29:5a:
94:34:4f:99:b2:c4:f9:c9:37:83:45:43:1c:6b:2f:88:af:5a:
75:6a:67:7d:df:ce:be:09:c2:d8:56:67:fd:51:64:18:fd:f7:
e2:93:1d:48:ae:10:39:2d:51:a7:30:bf:92:3c:b5:45:cf:7b:
b3:9b:5d:87:37:89:7b:1e:5b:cb:84:92:31:a1:29:93:40:a5:
3e:d9:1e:56:a4:1d:34:e1:b7:95:a1:6d:9a:be:af:51:1e:78:
26:27:ca:17:34:47:c8:c8:4b:49:89:3f:e6:d8:d6:c6:9f:f8:
e0:4b:b2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 21:51:59 2024 by rpki-client on console-ams.rpki-client.org