Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/a3ZDe9hISkOMsJIboHvJWPa0zt0.roa
File: a3ZDe9hISkOMsJIboHvJWPa0zt0.roa (raw, json)
Hash identifier: tHGXpYZ8w7JQ0Ycim8LbjyG6O8rsqfyeIucK8VcPGXg=
Subject key identifier: 6B:76:43:7B:D8:48:4A:43:8C:B0:92:1B:A0:7B:C9:58:F6:B4:CE:DD
Certificate issuer: /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8
Certificate serial: 01906E33FA87FDA757E399407CA15126E940
Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/a3ZDe9hISkOMsJIboHvJWPa0zt0.roa
Signing time: Mon 01 Jul 2024 12:10:18 +0000
ROA not before: Mon 01 Jul 2024 12:10:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201319
IP address blocks: 2a07:2902:6f00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6e:33:fa:87:fd:a7:57:e3:99:40:7c:a1:51:26:e9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8
Validity
Not Before: Jul 1 12:10:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b76437bd8484a438cb0921ba07bc958f6b4cedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e3:e2:62:19:e1:30:c3:4d:a0:f3:8b:40:7a:
a9:30:7d:e7:47:ac:1d:60:db:de:ea:d2:78:cc:27:
18:5e:e9:70:4d:52:f6:62:eb:93:da:72:b4:f2:4c:
14:77:ca:14:1d:7a:21:a1:df:6a:96:f2:17:85:34:
9f:3b:5f:37:54:a1:71:40:5c:ae:f8:cb:a8:c9:5d:
09:fb:e1:97:5e:da:4c:40:33:8f:09:c4:29:b4:e8:
99:92:43:9f:76:8d:c3:f6:96:c3:40:f3:66:24:57:
f0:20:e2:b4:cb:21:2c:dc:d1:c3:26:69:fd:22:ad:
9f:a8:11:c8:66:16:06:52:11:b6:2f:1b:a9:e0:15:
f7:5e:c4:58:24:6b:51:ae:74:dc:60:d4:0f:fe:0f:
85:1f:b4:b1:15:c0:69:a6:1c:0a:7d:cf:8b:e8:f4:
a3:7a:e7:37:2b:ab:50:b4:03:6b:81:6c:3d:31:a9:
97:a6:64:67:51:84:8c:72:34:49:fa:08:34:d9:b3:
08:3a:ae:30:63:0a:74:2b:e5:d8:af:91:18:5f:2b:
be:85:25:1f:aa:28:b8:15:e5:03:d7:49:bd:58:d3:
a6:1e:4d:42:2d:2d:42:da:d1:d1:7c:33:7c:ca:d4:
d1:41:c6:fb:c5:c4:b1:5c:e6:51:d5:6f:8a:8e:ab:
fb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:76:43:7B:D8:48:4A:43:8C:B0:92:1B:A0:7B:C9:58:F6:B4:CE:DD
X509v3 Authority Key Identifier:
keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/a3ZDe9hISkOMsJIboHvJWPa0zt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:2902:6f00::/40
Signature Algorithm: sha256WithRSAEncryption
72:de:c2:0e:d2:11:89:08:ae:bd:0f:3d:07:78:64:5f:2d:49:
87:4a:a7:58:92:0f:1c:a0:0c:f7:92:b8:da:4b:ca:03:49:2f:
9f:4c:23:c2:e6:58:7f:b5:7e:d6:10:41:2e:26:a6:ce:19:37:
75:2f:5e:06:01:05:ac:cc:eb:bc:63:46:d4:51:af:df:86:13:
e7:35:bf:39:82:ce:6c:3f:48:a4:76:25:0e:70:3d:d6:61:a0:
5d:a7:56:9d:54:4a:15:cf:bf:51:18:29:cb:1b:5a:20:d1:fc:
58:4c:05:6c:e0:77:e5:3d:86:de:fa:12:20:44:7a:18:4d:d1:
41:6d:62:52:1c:19:35:30:ea:1c:99:4f:df:3e:92:ce:62:73:
c9:2b:89:64:be:e9:4d:fb:95:cb:e0:ee:03:67:17:9a:fa:34:
0c:6a:d9:d7:ef:d1:66:86:b9:bd:da:f7:1a:01:b3:1d:2c:68:
7e:7b:3e:db:ae:fd:d1:f1:da:63:1e:b6:1f:d1:e1:b9:9c:16:
29:dd:50:c3:c0:e9:f3:7b:d7:3f:bd:eb:02:6c:ea:d5:c7:e8:
27:71:b8:93:85:f4:bc:7e:c2:c5:3e:67:39:86:59:51:6a:d6:
79:db:d2:9d:2d:82:b3:97:83:f1:d4:c2:20:1b:e3:e6:a9:ab:
97:e9:bd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:19:09 2024 by rpki-client on console-ams.rpki-client.org