Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/mzlGpu-B3kYJQTzNayXsqkvCQ-k.roa
File: mzlGpu-B3kYJQTzNayXsqkvCQ-k.roa (raw, json)
Hash identifier: zfMspkTE+VlOimak/4R2OJ53SaxQnUPfWspwpPsQt4o=
Subject key identifier: 9B:39:46:A6:EF:81:DE:46:09:41:3C:CD:6B:25:EC:AA:4B:C2:43:E9
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 018CC4246667A4A29CB8EE2B7B63D78AB3E4
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/mzlGpu-B3kYJQTzNayXsqkvCQ-k.roa
Signing time: Mon 01 Jan 2024 08:29:29 +0000
ROA not before: Mon 01 Jan 2024 08:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215832
IP address blocks: 2a0f:7803:fe80::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:66:67:a4:a2:9c:b8:ee:2b:7b:63:d7:8a:b3:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Jan 1 08:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b3946a6ef81de4609413ccd6b25ecaa4bc243e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ab:64:c4:72:b4:7b:54:2a:7f:4f:e5:86:3c:
cd:50:ac:94:4b:f4:78:03:a6:95:b5:b9:f3:e8:de:
b0:0e:b4:39:13:bf:04:23:be:ca:95:cb:a7:74:c9:
35:ab:b2:5a:ce:15:19:cc:31:ad:76:7a:bc:34:45:
f2:8b:28:66:d9:d5:f3:88:5c:ae:25:25:b7:8e:5c:
3f:1e:66:82:1d:84:73:e0:82:c7:8b:00:ed:a2:80:
0c:33:b0:af:2a:48:83:bf:01:f0:54:01:1b:dc:45:
2c:5b:6c:bf:b8:db:70:54:a6:41:a4:d8:c4:70:31:
99:39:58:9f:af:5b:14:1e:c0:d0:d2:06:cd:eb:cc:
9b:aa:f3:fa:cc:0c:a8:6f:5f:a0:b9:65:2d:b0:40:
01:f1:64:bc:97:00:7e:bd:62:fe:5a:2a:32:f9:52:
8a:f3:29:b9:38:d6:9b:cf:23:91:61:8c:48:cb:1b:
ae:cd:e1:66:a3:4c:88:aa:6e:48:38:ad:fc:dd:35:
f8:9d:1d:a5:f8:aa:54:ac:1f:b7:f4:a1:4f:fe:04:
88:a0:2e:7c:da:64:7f:2c:10:eb:98:d7:cd:e5:3e:
dc:4c:be:17:a7:ec:3d:81:27:4f:75:66:52:84:6d:
54:f1:ca:2c:fe:78:2a:88:60:2b:d2:e0:e9:17:b7:
a5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:39:46:A6:EF:81:DE:46:09:41:3C:CD:6B:25:EC:AA:4B:C2:43:E9
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/mzlGpu-B3kYJQTzNayXsqkvCQ-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:fe80::/44
Signature Algorithm: sha256WithRSAEncryption
77:1f:43:a0:c4:cc:4f:63:80:1e:20:ef:c9:62:7a:e8:3f:f4:
d3:b7:fb:8b:d4:ef:5f:63:c1:7c:42:b8:92:25:15:22:3a:28:
fe:c7:aa:c7:4b:c4:50:75:08:bd:8a:1d:e5:40:4f:d3:76:93:
20:7d:ba:3d:d4:13:d4:bd:9f:00:84:2d:66:a1:96:36:7b:5f:
e9:9a:a5:48:e3:1e:3f:a5:87:89:b8:7c:b9:4f:0e:ed:c5:7b:
a9:ba:70:5d:c1:1a:c4:e8:7e:9e:0d:c5:99:13:a9:c4:08:75:
50:6d:c7:d3:5c:4a:70:f2:21:ed:4f:19:1d:85:11:77:c1:71:
c0:7e:9b:6e:65:0b:c8:03:74:ff:c8:f9:e6:ab:bb:4e:bc:1d:
b3:3b:ef:45:32:f0:30:f5:bd:1d:28:e9:48:a2:01:77:ce:ac:
3a:ea:51:17:de:76:5a:88:ef:6e:a6:37:54:23:90:c0:1c:7f:
6d:e5:17:8c:b7:5d:a3:2b:e7:49:5d:40:d0:52:d8:cd:79:d8:
b2:64:4b:49:d9:26:1e:19:60:03:f1:09:ed:12:6c:96:cb:b9:
d2:89:23:6d:76:e7:d7:f4:3f:86:9b:99:83:c9:fd:e0:22:1b:
60:4d:0f:13:29:ee:1e:e5:7b:c9:47:f7:a7:9f:51:01:cc:68:
2f:1e:f2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:58:18 2024 by rpki-client on console-fra.rpki-client.org