Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/Z-Oc6GJ_Y5w3xbXHkFwlO-6wHso.roa
File: Z-Oc6GJ_Y5w3xbXHkFwlO-6wHso.roa (raw, json)
Hash identifier: d2qSBFXFju4Um00QjeBsDutUKGS6E/HxuP6Tet8ABH4=
Subject key identifier: 67:E3:9C:E8:62:7F:63:9C:37:C5:B5:C7:90:5C:25:3B:EE:B0:1E:CA
Certificate issuer: /CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Certificate serial: 018EC8347D3C3A679512E80BBE9A4710DB34
Authority key identifier: FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/Z-Oc6GJ_Y5w3xbXHkFwlO-6wHso.roa
Signing time: Wed 10 Apr 2024 13:31:06 +0000
ROA not before: Wed 10 Apr 2024 13:31:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 2a05:e9c0:2600::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c8:34:7d:3c:3a:67:95:12:e8:0b:be:9a:47:10:db:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Validity
Not Before: Apr 10 13:31:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67e39ce8627f639c37c5b5c7905c253beeb01eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ed:fc:cf:7d:62:3a:54:9e:7c:90:40:60:27:
91:13:a9:08:84:7b:cc:67:db:d7:5d:b7:6e:3f:6a:
65:0a:f6:4e:3a:4f:f7:88:36:c6:9b:37:73:18:68:
03:90:f3:a7:16:0d:58:e5:8d:65:a7:14:af:b3:21:
f4:2d:a5:97:04:00:35:ad:b0:c3:ff:51:21:ec:f2:
36:6e:26:cf:4b:b6:b5:00:94:d0:98:38:b6:03:c8:
f7:3c:39:82:5c:23:93:ee:d1:0f:ff:1b:f1:66:aa:
12:04:dc:50:2f:fb:5a:ac:53:8b:59:c7:18:f6:90:
61:74:1a:d0:f3:c0:5f:81:be:97:69:83:5b:bb:51:
26:a6:a3:60:2f:1e:13:5e:ee:2b:db:8a:4e:1c:28:
d3:f9:fd:b4:2b:fa:38:dd:c6:85:ee:b8:ef:13:4f:
08:20:81:b7:65:2d:a7:7b:08:bd:67:b2:8c:1e:18:
26:3e:31:1c:ec:ff:5b:b9:28:47:da:a1:6b:f8:28:
71:58:51:36:0a:a2:71:de:ef:53:32:1c:74:67:e4:
3f:2d:19:08:6c:a7:87:e6:c1:96:60:39:81:c0:c1:
9c:a5:c2:64:63:ac:4b:a2:94:08:39:5b:b2:de:d0:
cd:a0:f5:6c:3a:3c:f6:1f:59:2e:ba:1a:f8:21:1b:
74:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E3:9C:E8:62:7F:63:9C:37:C5:B5:C7:90:5C:25:3B:EE:B0:1E:CA
X509v3 Authority Key Identifier:
keyid:FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/Z-Oc6GJ_Y5w3xbXHkFwlO-6wHso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:e9c0:2600::/40
Signature Algorithm: sha256WithRSAEncryption
79:c4:7c:50:bb:c1:52:a2:08:52:9b:bc:9d:73:31:00:1a:43:
6c:f9:53:16:43:f7:b9:8d:04:7f:0c:94:9f:55:77:2d:14:88:
f2:3b:0c:f4:e2:1a:9f:52:c4:56:3d:19:31:82:f6:3b:5c:7f:
8d:d2:69:d6:c5:0a:ce:ed:21:52:1b:86:56:ba:f8:cc:06:b6:
9d:d7:08:b2:0f:a6:ec:99:28:24:a3:34:54:60:00:a5:55:2c:
d3:79:42:f4:14:b9:27:de:ea:d9:f6:3b:54:82:fb:93:50:40:
f5:ba:fe:23:28:34:4a:6c:9a:a7:69:89:31:14:0d:54:78:e0:
46:23:23:2f:0e:ca:52:be:ba:e9:76:3e:6e:88:d9:17:74:92:
33:ad:1f:46:54:f3:7f:6f:9d:2f:de:b2:ba:d7:ba:48:96:dc:
00:65:86:36:85:fa:9a:6e:02:13:84:25:02:3a:6f:84:b7:2c:
98:7f:4b:7f:d0:97:e4:c6:fd:f8:cb:8c:34:72:17:fa:ee:c2:
df:66:d1:62:c6:84:5a:4d:5d:f8:fa:7e:11:c1:84:a6:cc:e9:
76:85:e8:99:c5:aa:3b:6e:5e:6c:39:e7:bb:2c:8b:c1:8f:a7:
1d:92:3b:4c:10:eb:cb:e8:b3:85:ea:e8:9e:fd:56:30:48:0e:
f3:06:6e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:45:48 2024 by rpki-client on console-fra.rpki-client.org