Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/Pm0HwHimauIuq0kqy9dMFnqsPVI.roa
File: Pm0HwHimauIuq0kqy9dMFnqsPVI.roa (raw, json)
Hash identifier: azAdm7MStDPRkq71Cfa0Vp8bl7XpfwjpZJRIxKgwYYI=
Subject key identifier: 3E:6D:07:C0:78:A6:6A:E2:2E:AB:49:2A:CB:D7:4C:16:7A:AC:3D:52
Certificate issuer: /CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Certificate serial: 018FC35ADBFD3B6AB1B2F5379C1A677D3785
Authority key identifier: A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/Pm0HwHimauIuq0kqy9dMFnqsPVI.roa
Signing time: Wed 29 May 2024 07:57:42 +0000
ROA not before: Wed 29 May 2024 07:57:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 2a13:cb42:8013::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c3:5a:db:fd:3b:6a:b1:b2:f5:37:9c:1a:67:7d:37:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Validity
Not Before: May 29 07:57:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e6d07c078a66ae22eab492acbd74c167aac3d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:26:1b:bb:4c:ce:e0:75:67:7d:c2:c1:23:aa:
aa:a2:e0:b5:d6:55:61:33:9c:05:d1:1b:75:52:5c:
d5:38:76:81:4a:83:68:5e:6f:3e:2a:42:ec:0c:d9:
51:00:73:84:ab:bc:be:e3:4c:59:a2:01:78:2b:ab:
dc:e8:4c:55:5f:cb:a3:fd:e5:f6:b3:9c:aa:02:81:
97:9b:c0:5f:00:0c:ff:2f:b0:37:b7:35:60:21:c0:
51:59:b7:d3:0f:70:e7:fc:bf:4d:09:6f:99:7d:71:
c4:1a:bc:11:a5:45:d1:d5:66:4f:50:b3:3f:47:53:
3b:dc:e9:4d:5a:cc:16:c4:bb:f7:92:ee:73:19:c7:
c5:0b:f3:f8:c3:78:d3:cf:e4:b2:3f:ba:bd:4f:de:
91:a3:3c:f5:00:c9:4d:95:51:1a:fc:1d:f1:9e:9f:
e0:19:40:91:0f:36:70:e0:6d:70:67:6b:3f:22:98:
ba:66:5f:f6:67:ee:20:09:14:ea:1c:ef:e7:56:98:
cf:ca:61:d4:6a:20:b8:e5:6a:41:aa:ad:75:df:bf:
b8:38:40:71:fb:96:e2:2d:ec:e9:86:d7:00:f6:c1:
cf:b6:b7:1f:df:3a:be:3a:2b:91:19:fc:f9:dd:4d:
de:90:b5:ce:31:15:05:4c:13:32:47:db:e5:7c:ba:
41:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6D:07:C0:78:A6:6A:E2:2E:AB:49:2A:CB:D7:4C:16:7A:AC:3D:52
X509v3 Authority Key Identifier:
keyid:A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/Pm0HwHimauIuq0kqy9dMFnqsPVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:cb42:8013::/48
Signature Algorithm: sha256WithRSAEncryption
47:be:1c:b1:34:d3:18:d8:b6:62:d6:51:d9:fc:84:5d:5c:c3:
72:39:87:2d:23:9b:0e:4a:37:ec:11:00:a1:7b:d9:b0:8e:b2:
4e:4f:38:0a:1b:ec:77:cc:40:1b:91:50:72:ac:2b:3b:26:f4:
75:53:0c:7e:7b:5f:d6:07:15:44:f9:92:d5:a8:20:3c:47:8c:
e6:00:1a:5c:30:d6:64:bc:07:55:ad:ef:0f:b6:11:ce:ff:89:
c1:07:ef:00:de:a0:2d:02:87:fc:59:0b:b6:2a:af:d3:27:e2:
fa:4e:b8:40:9e:37:f7:a3:60:be:df:17:26:5c:3c:7f:d5:8e:
1c:e8:56:c5:e1:82:77:48:5b:83:b4:da:98:1b:0d:3d:14:2e:
ba:d6:e4:d2:e9:1d:55:33:63:f2:dc:26:f3:97:28:2a:76:43:
12:c4:58:be:a3:55:5d:50:b6:f7:31:ef:1f:05:d1:9e:b4:a3:
ad:24:d6:f0:fc:86:df:6e:ad:fd:91:e9:8b:99:0c:38:99:69:
2b:4b:cc:78:a0:71:eb:fb:40:2c:68:0b:9c:1f:23:e8:74:9e:
04:6a:97:e9:17:ed:d8:00:4d:44:47:a6:ed:e0:ad:9c:6a:cb:
53:56:79:62:1a:b1:95:35:34:ea:34:1a:cf:a0:f4:16:5a:9c:
97:9b:de:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:33:08 2024 by rpki-client on console-ams.rpki-client.org