Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/ZxwjsK6DMOiEUDkdxJxVe0oANFo.roa
File: ZxwjsK6DMOiEUDkdxJxVe0oANFo.roa (raw, json)
Hash identifier: m0+M1+t7SWvKPI6JN4oO7w9hzdBhMySBJEOQOhg+hOQ=
Subject key identifier: 67:1C:23:B0:AE:83:30:E8:84:50:39:1D:C4:9C:55:7B:4A:00:34:5A
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 018CC42466A95C6AAA7B40A61255C42C142C
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/ZxwjsK6DMOiEUDkdxJxVe0oANFo.roa
Signing time: Mon 01 Jan 2024 08:29:29 +0000
ROA not before: Mon 01 Jan 2024 08:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215857
IP address blocks: 2a0f:7803:fe90::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:66:a9:5c:6a:aa:7b:40:a6:12:55:c4:2c:14:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Jan 1 08:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=671c23b0ae8330e88450391dc49c557b4a00345a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8e:30:46:ea:41:f5:fe:0c:30:57:75:a9:97:
2e:18:13:80:9a:75:88:11:5c:a8:a7:8e:bd:e0:76:
41:2e:83:00:6f:e8:5d:1f:14:be:73:d3:71:14:85:
77:b2:e6:30:4f:33:6a:8a:30:83:5d:9e:57:3c:e6:
b7:d5:c0:6c:55:6d:9b:75:5d:1b:3c:0a:49:b7:9c:
18:c4:92:b5:83:58:e9:b5:a6:1c:ce:20:f4:0d:4b:
13:21:50:e2:95:48:40:72:06:1f:e4:f4:1c:61:be:
a8:8b:56:61:26:8b:5c:b1:9e:63:25:72:4e:ad:0a:
fd:1c:4e:e2:9a:58:73:1c:b9:92:d7:4e:67:66:63:
60:87:c6:93:88:d5:58:3c:16:4f:2b:48:d4:eb:de:
b5:45:0f:e4:69:f4:fb:16:72:9c:5d:45:7e:d1:19:
42:4c:06:d4:ea:fb:f0:f9:33:6e:16:5f:67:63:ba:
5d:0a:59:03:64:01:05:48:76:dc:4c:82:bd:7f:7b:
3d:b0:0c:5f:d9:32:3b:ef:e2:66:e9:6d:7c:97:6e:
39:6c:e5:28:37:c4:fe:69:37:8e:b0:7f:ce:80:23:
f6:fc:ab:35:27:84:fa:e4:75:64:ca:f3:78:51:36:
66:f7:b4:46:48:a5:44:fc:59:5e:34:34:55:ee:69:
fa:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1C:23:B0:AE:83:30:E8:84:50:39:1D:C4:9C:55:7B:4A:00:34:5A
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/ZxwjsK6DMOiEUDkdxJxVe0oANFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:fe90::/44
Signature Algorithm: sha256WithRSAEncryption
50:ca:55:ea:87:1a:a3:64:18:51:9b:ab:90:52:eb:04:8e:be:
ab:68:da:0c:aa:26:4e:af:23:1a:4f:7f:10:12:c2:57:bd:49:
a9:22:27:39:fb:f3:1d:3e:4b:5a:7a:de:a9:40:29:68:f5:85:
5a:b0:c1:0b:4e:8a:ad:a7:a6:00:59:d6:2e:88:4c:e5:52:66:
a0:a9:5c:f8:b8:76:a2:cf:37:65:d0:74:bc:aa:08:09:67:b8:
ba:14:b1:02:1d:d1:c7:12:f0:62:b1:21:dc:68:bc:af:82:8b:
59:10:31:9c:fe:e7:8a:fd:1f:64:19:7f:1a:44:1a:9e:54:a5:
00:65:2f:25:57:0c:49:09:17:00:62:8e:e9:90:30:3c:12:cb:
97:0e:e8:e2:3f:b6:e1:ab:80:02:f9:13:3a:51:cd:6a:77:2c:
d3:74:f3:64:4c:27:01:60:dd:bc:0d:8f:d6:86:70:87:92:50:
ed:9f:17:8c:78:2a:e8:6d:f6:4e:63:9a:d0:2c:68:67:01:10:
b4:82:8f:ea:32:f9:31:1e:ed:ee:2d:f0:8e:9f:cd:12:f0:bf:
40:41:74:17:8e:73:e4:0b:1e:9f:85:27:96:d9:ac:69:40:5b:
be:ab:35:a6:df:df:2d:dd:d4:15:1a:e6:1a:66:e6:b7:dd:78:
64:b6:d8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:36:40 2024 by rpki-client on console-fra.rpki-client.org