Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/zLiDOA0aklePykONkPwaSKO5SN0.roa
File: zLiDOA0aklePykONkPwaSKO5SN0.roa (raw, json)
Hash identifier: XwETPne2UzaJ7OmMeMquEHR4MfDHNBk2xqcl0qSqEVc=
Subject key identifier: CC:B8:83:38:0D:1A:92:57:8F:CA:43:8D:90:FC:1A:48:A3:B9:48:DD
Certificate issuer: /CN=12fd558a64e97586a43dc7ee50a8d6b292365b60
Certificate serial: 018CC3B6CD128E5B84AFC5FA4856FA61A5BA
Authority key identifier: 12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/zLiDOA0aklePykONkPwaSKO5SN0.roa
Signing time: Mon 01 Jan 2024 06:29:46 +0000
ROA not before: Mon 01 Jan 2024 06:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205884
IP address blocks: 2a12:500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:cd:12:8e:5b:84:af:c5:fa:48:56:fa:61:a5:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12fd558a64e97586a43dc7ee50a8d6b292365b60
Validity
Not Before: Jan 1 06:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ccb883380d1a92578fca438d90fc1a48a3b948dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:98:26:d8:64:85:27:f6:2d:fb:e2:de:2a:b4:
50:d0:e8:55:c9:6b:3c:c9:4f:c4:3c:18:33:18:50:
7c:01:d2:05:bf:c4:ab:2d:87:b6:58:1b:b8:77:c8:
44:ed:8d:8e:58:38:8b:0d:b7:c2:81:77:6a:7e:68:
f9:66:48:d7:c2:14:34:85:54:30:a2:6a:43:29:e1:
1b:ad:15:26:e3:92:9f:75:82:91:ca:22:c1:93:7d:
3b:40:0d:b3:d1:03:72:d6:ef:cf:c1:c4:cd:34:65:
6e:48:39:42:32:dc:8f:3f:59:bb:56:ab:ad:57:81:
70:62:91:e9:14:ce:67:ba:a8:2f:21:57:42:51:28:
c6:3c:75:e1:ac:03:cf:3c:57:1e:01:a5:57:1e:bb:
5d:b0:a3:21:7a:3b:95:25:04:ee:30:fa:fe:8c:b2:
1a:77:c0:e8:30:fe:f7:fb:64:45:fb:d0:d4:0f:8a:
38:95:98:0c:3d:6d:aa:55:28:c3:9a:78:52:3a:66:
5a:9e:f4:7b:50:9e:38:36:88:9d:ef:9b:38:47:30:
1e:68:40:19:17:51:a7:42:f6:58:8f:85:e6:b0:ac:
4d:34:f7:62:d4:c8:b4:ff:50:a3:63:61:06:f1:3f:
ff:f7:8f:cb:07:bd:9d:2b:65:2d:f9:60:7a:4a:35:
ce:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B8:83:38:0D:1A:92:57:8F:CA:43:8D:90:FC:1A:48:A3:B9:48:DD
X509v3 Authority Key Identifier:
keyid:12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/zLiDOA0aklePykONkPwaSKO5SN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:500::/29
Signature Algorithm: sha256WithRSAEncryption
6c:47:88:2c:92:25:d1:fd:ed:b8:3c:4e:83:d9:a4:5e:37:97:
fd:92:d8:dc:da:99:08:cb:b3:dc:ed:3b:73:30:4a:e2:df:42:
2a:a8:31:02:0b:15:e8:93:cc:2c:9c:23:56:63:f1:df:b8:83:
96:ee:d1:8c:c9:b7:d5:0a:e7:92:2b:63:cf:1f:6c:e4:26:83:
20:cf:34:8e:7c:00:d2:44:ce:a5:30:27:ab:83:d8:1c:c9:6e:
f4:0b:90:02:21:3e:87:3a:7a:91:cb:e3:f8:b7:77:c3:3a:37:
48:63:73:94:71:fa:f0:99:b1:b2:ca:70:9d:bf:d0:db:85:6f:
18:4a:9f:c5:2e:3e:cf:6d:96:b1:e7:5e:eb:d7:83:7d:1c:8a:
66:f2:f0:a9:98:d2:5c:21:17:23:fb:73:65:2e:e6:5a:11:c0:
50:6a:96:f9:be:c4:17:01:c6:07:94:3d:ee:00:cf:34:22:57:
e9:d2:11:eb:21:6e:07:80:4a:6f:a2:af:10:aa:89:9d:9c:b7:
8d:65:43:e4:48:ea:1b:92:de:02:9f:27:9b:60:03:c6:77:d7:
a6:3a:cc:97:d1:f3:77:89:e3:48:bd:6a:25:53:f5:0c:ca:7d:
3e:96:8a:70:e3:77:ed:5f:8e:68:65:ce:f0:a5:34:df:68:27:
fb:88:9c:77
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzDts0SjluEr8X6SFb6YaW6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyZmQ1NThhNjRlOTc1ODZhNDNkYzdlZTUwYThkNmIyOTIz
NjViNjAwHhcNMjQwMTAxMDYyOTQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2I4ODMzODBkMWE5MjU3OGZjYTQzOGQ5MGZjMWE0OGEzYjk0OGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZgm2GSFJ/Yt++LeKrRQ0OhVyWs8
yU/EPBgzGFB8AdIFv8SrLYe2WBu4d8hE7Y2OWDiLDbfCgXdqfmj5ZkjXwhQ0hVQw
ompDKeEbrRUm45KfdYKRyiLBk307QA2z0QNy1u/PwcTNNGVuSDlCMtyPP1m7Vqut
V4FwYpHpFM5nuqgvIVdCUSjGPHXhrAPPPFceAaVXHrtdsKMhejuVJQTuMPr+jLIa
d8DoMP73+2RF+9DUD4o4lZgMPW2qVSjDmnhSOmZanvR7UJ44Noid75s4RzAeaEAZ
F1GnQvZYj4XmsKxNNPdi1Mi0/1CjY2EG8T//94/LB72dK2Ut+WB6SjXOawIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFMy4gzgNGpJXj8pDjZD8GkijuUjdMB8GA1UdIwQY
MBaAFBL9VYpk6XWGpD3H7lCo1rKSNltgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXYxVmltVHBkWWFrUGNmdVVLaldzcEkyVzJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hZjk2ZGYtYTRkNS00OGY5LWFjMGMt
MjRkOGU3NDdjMzhmLzEvekxpRE9BMGFrbGVQeWtPTmtQd2FTS081U04wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9hZjk2ZGYtYTRkNS00OGY5LWFjMGMtMjRkOGU3NDdjMzhm
LzEvRXYxVmltVHBkWWFrUGNmdVVLaldzcEkyVzJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhIFADAN
BgkqhkiG9w0BAQsFAAOCAQEAbEeILJIl0f3tuDxOg9mkXjeX/ZLY3NqZCMuz3O07
czBK4t9CKqgxAgsV6JPMLJwjVmPx37iDlu7RjMm31Qrnkitjzx9s5CaDIM80jnwA
0kTOpTAnq4PYHMlu9AuQAiE+hzp6kcvj+Ld3wzo3SGNzlHH68Jmxsspwnb/Q24Vv
GEqfxS4+z22Wsede69eDfRyKZvLwqZjSXCEXI/tzZS7mWhHAUGqW+b7EFwHGB5Q9
7gDPNCJX6dIR6yFuB4BKb6KvEKqJnZy3jWVD5EjqG5LeAp8nm2ADxnfXpjrMl9Hz
d4njSL1qJVP1DMp9PpaKcON37V+OaGXO8KU032gn+4icdw==
-----END CERTIFICATE-----
Generated at Mon May 27 13:31:02 2024 by rpki-client on console-ams.rpki-client.org