Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/ratCPrRFQAbkw_S2Lk8SpAN0QkI.roa
File: ratCPrRFQAbkw_S2Lk8SpAN0QkI.roa (raw, json)
Hash identifier: 4iYOeCdLXNlTBIy2i1yvEo2VGKQQHHLrWlCqRUgPSdU=
Subject key identifier: AD:AB:42:3E:B4:45:40:06:E4:C3:F4:B6:2E:4F:12:A4:03:74:42:42
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 018CC3488D0FE15AD041F7D51AF17BAC7AF2
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/ratCPrRFQAbkw_S2Lk8SpAN0QkI.roa
Signing time: Mon 01 Jan 2024 04:29:21 +0000
ROA not before: Mon 01 Jan 2024 04:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 32167
IP address blocks: 2a0d:2683::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:8d:0f:e1:5a:d0:41:f7:d5:1a:f1:7b:ac:7a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 1 04:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=adab423eb4454006e4c3f4b62e4f12a403744242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:19:e9:56:d5:19:b6:2c:89:38:b8:e1:d4:6a:
14:47:8e:60:e0:fd:0d:e0:4f:29:be:92:15:0a:b6:
a1:a3:45:43:48:67:49:e1:f9:de:29:9a:16:a3:60:
ac:09:74:17:ef:58:91:65:7a:19:31:05:5e:71:7b:
81:fc:a9:f0:23:f9:8a:76:cb:e3:bc:20:fd:ba:45:
f9:06:95:fb:56:f7:f2:f3:50:c1:3d:f6:a5:d6:8c:
c4:41:0c:45:2d:b2:4a:e8:c6:72:ad:1e:c8:38:42:
b7:98:32:a6:61:92:02:a3:42:3d:b1:fb:4f:db:e7:
c6:93:4f:a9:59:81:ae:2f:66:13:ea:64:68:32:ed:
8f:d9:e4:b8:5f:1f:30:d9:95:c8:6b:7a:74:5a:ba:
4a:52:c0:f4:5e:11:26:36:87:29:82:cf:4d:20:fb:
18:f0:ab:71:a4:8f:24:3b:df:79:fa:67:aa:6c:89:
15:d1:c2:2c:e0:ec:a0:a1:95:f6:1b:23:cc:04:ed:
be:ce:b8:57:b6:3e:80:19:84:1b:3a:12:d3:53:cf:
7e:f4:3a:66:06:ba:54:a6:eb:40:c9:6b:eb:c6:aa:
9e:40:35:1b:61:27:8e:49:1f:61:cf:34:fc:6c:69:
d0:d3:d3:27:3e:9a:c7:aa:81:c8:7f:77:05:a3:e4:
f9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:AB:42:3E:B4:45:40:06:E4:C3:F4:B6:2E:4F:12:A4:03:74:42:42
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/ratCPrRFQAbkw_S2Lk8SpAN0QkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2683::/32
Signature Algorithm: sha256WithRSAEncryption
6e:7d:41:49:4e:bf:25:87:1b:c4:1c:6c:c2:53:f7:6f:f5:de:
0f:a9:ea:90:d7:f6:ba:a1:55:3b:6a:79:58:94:10:53:d7:26:
3a:63:53:dc:d1:34:96:ee:8e:d0:94:d3:bf:51:69:18:22:1f:
b2:74:7c:97:ac:f4:8b:79:53:38:54:06:81:7b:03:9d:32:52:
0f:35:d9:34:22:90:34:bd:18:9b:e9:52:0f:60:7f:48:b2:46:
b5:15:0c:ce:13:cb:5f:b4:9e:49:b7:18:cc:98:9d:ae:d4:08:
84:63:1a:09:43:b4:87:6c:33:e3:00:b8:a5:40:08:60:ec:2d:
21:aa:c2:58:8c:c6:b1:26:9b:2f:6a:34:4c:19:2a:04:64:41:
4e:5d:0a:c6:95:06:4f:50:14:4b:32:2f:28:2c:44:76:4b:11:
39:ae:29:39:88:53:c2:e1:aa:e2:3a:46:54:a8:a4:e3:50:86:
87:5a:82:9c:9b:37:d7:77:01:77:25:9c:e9:16:d4:80:a9:ae:
cd:58:43:c7:d2:f4:88:ab:d6:72:0f:d0:f0:46:e3:1b:30:60:
fe:ab:da:2e:41:ac:8d:28:7f:63:e7:e4:21:72:66:ea:5e:a2:
40:f5:77:b7:b6:99:0e:5f:fa:71:9e:51:45:8f:c2:2e:1b:71:
58:97:a5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:46:37 2024 by rpki-client on console-fra.rpki-client.org