Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/omNvqowQWiFcHzJmArraPXsTckw.roa
File: omNvqowQWiFcHzJmArraPXsTckw.roa (raw, json)
Hash identifier: ud2vkFB3oPXxZN8PY4iD97HcEJqFoVfzq7PHNHYE8R0=
Subject key identifier: A2:63:6F:AA:8C:10:5A:21:5C:1F:32:66:02:BA:DA:3D:7B:13:72:4C
Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Certificate serial: 018CC795560080CAA9A9B38FE146200ED0B6
Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/omNvqowQWiFcHzJmArraPXsTckw.roa
Signing time: Tue 02 Jan 2024 00:31:42 +0000
ROA not before: Tue 02 Jan 2024 00:31:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23470
IP address blocks: 2a04:ff00:500::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 07:04:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:56:00:80:ca:a9:a9:b3:8f:e1:46:20:0e:d0:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Validity
Not Before: Jan 2 00:31:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2636faa8c105a215c1f326602bada3d7b13724c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:63:f3:a8:04:a4:b9:05:99:c2:a6:16:3e:ee:
d7:ad:4e:69:61:93:a3:61:92:51:58:ce:e1:b6:6f:
4c:13:3a:63:bd:f5:53:a5:b9:22:9d:2c:1f:26:7c:
40:cc:c6:fd:b4:0f:1c:8f:e4:67:74:28:de:ab:de:
fe:b7:18:d8:0e:90:25:72:16:7e:eb:ae:20:51:cc:
d5:6f:d0:c4:f2:68:b3:03:dd:5a:21:a5:20:88:d8:
83:9e:0c:80:17:b1:03:f0:6a:93:b5:9d:b6:d2:0b:
d2:31:cf:ce:c6:e2:a6:05:c7:28:58:f0:61:16:67:
a6:d2:4c:e6:df:05:9c:0e:fd:06:75:ee:45:70:25:
14:0c:3a:e8:26:de:e3:68:4f:73:a5:40:39:79:a0:
8d:ce:2a:ee:f0:44:8a:38:2b:29:a7:b3:8f:00:a1:
c2:fe:90:db:6d:54:f1:56:1b:95:aa:52:f7:c4:67:
b1:ca:5e:ab:85:5f:9d:ab:d3:fa:68:96:50:9c:39:
62:a3:89:f5:ec:98:7d:3e:00:e4:6e:24:16:a3:3b:
96:4e:93:30:c0:b6:d1:47:b3:04:b7:81:63:58:9c:
b3:03:c2:1d:9d:20:de:0d:22:e3:e7:04:5b:39:95:
ce:e4:46:df:8b:7c:02:d5:f6:a7:e4:f7:e3:68:e0:
79:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:63:6F:AA:8C:10:5A:21:5C:1F:32:66:02:BA:DA:3D:7B:13:72:4C
X509v3 Authority Key Identifier:
keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/omNvqowQWiFcHzJmArraPXsTckw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:ff00:500::/48
Signature Algorithm: sha256WithRSAEncryption
28:6d:36:4f:f9:e2:7c:1a:48:bb:c9:0e:84:f6:a9:b3:0f:76:
36:1a:e1:13:43:8d:54:a9:21:d2:76:ee:54:fa:85:a9:35:09:
bb:4f:ee:d6:41:5e:2d:95:bc:0d:c1:fc:30:92:e1:8b:91:ed:
ee:e7:29:2a:85:db:26:15:de:c6:51:ce:15:4b:fa:07:46:28:
df:c8:a4:46:4a:0f:6c:19:98:d7:5f:82:df:f0:1a:3e:04:76:
9f:73:8c:da:89:2d:e1:35:22:aa:6a:72:b9:1f:57:95:a4:74:
f3:13:48:41:9d:9c:11:b7:d3:5f:d2:14:b5:40:23:3c:1e:2a:
d1:e0:bc:a4:ff:0c:cd:9f:2a:e2:a1:c2:ed:1d:51:a2:8e:9a:
02:a9:f9:f7:3c:ce:1a:5b:ba:3b:5b:5c:4b:3f:de:12:74:c1:
fe:46:5d:14:0d:1f:c3:96:82:be:1e:af:cf:85:7c:32:4e:23:
c1:95:8d:c3:70:a0:05:77:22:8d:11:4f:6d:9c:c1:08:09:bb:
99:13:f3:4f:49:bd:ca:62:aa:40:94:db:38:87:68:93:d1:9c:
d6:5f:61:48:7b:9d:11:19:20:94:9e:94:87:3f:38:85:31:41:
90:6f:0e:e8:47:29:36:0d:14:fc:69:a4:9e:a9:50:bf:fe:dc:
a8:59:c8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 10:32:55 2024 by rpki-client on console-ams.rpki-client.org