Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/pq7Q2NUFFbS0nWYOwKfog-Vud2k.roa
File: pq7Q2NUFFbS0nWYOwKfog-Vud2k.roa (raw, json)
Hash identifier: yIJi29VXE2fhJ4/VBkwGYXaU3oEyOcVeOFEm2KGoYgo=
Subject key identifier: A6:AE:D0:D8:D5:05:15:B4:B4:9D:66:0E:C0:A7:E8:83:E5:6E:77:69
Certificate issuer: /CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
Certificate serial: 018CCA2BE2722AFE559972F574560471509B
Authority key identifier: 4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/pq7Q2NUFFbS0nWYOwKfog-Vud2k.roa
Signing time: Tue 02 Jan 2024 12:35:22 +0000
ROA not before: Tue 02 Jan 2024 12:35:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23470
IP address blocks: 2a0c:8fc3::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:e2:72:2a:fe:55:99:72:f5:74:56:04:71:50:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
Validity
Not Before: Jan 2 12:35:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6aed0d8d50515b4b49d660ec0a7e883e56e7769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0e:0d:48:c7:12:90:e2:e1:29:c4:a4:7a:c2:
d0:f2:eb:cb:ce:d3:52:14:16:ee:6d:66:5e:75:e2:
61:9d:c4:7f:1f:03:ff:e9:ed:c3:6a:f0:37:81:3f:
23:2f:04:da:f6:f0:e9:62:28:10:37:82:41:95:52:
48:7d:25:7c:c2:b2:d3:9a:ef:18:2c:12:2f:54:f0:
fa:ef:36:9a:a2:b0:9a:8d:f1:8a:1d:36:65:75:d6:
6d:20:0e:a8:9b:e0:39:c0:4a:4c:00:2f:be:11:db:
ed:45:ea:70:b6:9c:7b:4b:75:9a:5e:5b:ec:4e:68:
b5:17:85:79:fa:e0:d9:18:d0:6e:8d:d2:2b:9d:37:
f9:af:8f:8f:38:94:80:15:64:6e:e9:ec:ca:d7:ae:
5b:1d:60:9a:54:ca:cd:c7:a9:9d:b6:4e:dc:25:09:
65:61:ae:ab:fb:47:27:60:5f:27:86:40:db:b4:67:
c5:15:2a:a0:61:00:ef:7a:6d:2e:02:16:8a:89:5c:
3c:7b:8f:cc:e0:b4:4c:54:3c:50:7f:a6:d9:52:97:
fc:de:04:56:4d:ed:f6:13:2e:29:9f:aa:aa:db:a6:
dd:a2:ba:f2:3c:ac:82:59:85:ce:e9:84:2c:74:a0:
39:83:14:56:93:9c:a8:ad:c3:ca:67:79:1f:3c:80:
9e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:AE:D0:D8:D5:05:15:B4:B4:9D:66:0E:C0:A7:E8:83:E5:6E:77:69
X509v3 Authority Key Identifier:
keyid:4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/pq7Q2NUFFbS0nWYOwKfog-Vud2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:8fc3::/32
Signature Algorithm: sha256WithRSAEncryption
65:a1:10:23:44:49:25:b6:10:c5:52:7a:3d:9c:32:51:e5:e6:
21:4d:37:0b:3f:f7:32:51:de:b2:b8:46:4a:c2:1d:2e:6d:05:
79:07:ef:81:4f:84:bb:48:12:2a:5d:74:7a:a1:f5:34:e5:3e:
3a:34:e1:f4:3b:a9:92:ff:09:78:e6:04:8e:32:16:3a:55:67:
22:b9:53:81:a9:9c:fa:40:4e:4f:b8:ed:d3:78:a6:1a:e7:e7:
f9:46:50:47:70:41:90:33:f6:04:38:9b:66:6a:03:e9:7d:0d:
5c:f0:35:36:f1:58:8d:99:1d:42:ed:40:cd:f8:64:91:7d:00:
2d:25:0b:66:f0:83:c6:6d:4d:30:b3:40:da:24:12:ba:7d:88:
d6:a1:01:fc:94:16:c3:dd:09:45:40:a0:3c:91:42:9a:54:8a:
70:38:af:cd:a8:3e:22:9a:83:f8:db:f7:80:1e:3a:ac:5b:73:
4a:33:b9:95:fe:ce:36:f4:14:25:18:37:bb:d3:7a:14:26:a5:
3f:7b:6a:03:4c:f8:fa:89:d2:8a:78:7e:99:e6:8a:14:95:b6:
07:bd:d4:f3:9d:ca:99:d3:92:be:1d:5b:57:76:d9:c3:5c:ba:
05:14:1a:42:1d:a3:67:be:62:18:55:f4:e4:57:c2:f8:93:76:
c5:99:a3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 00:00:02 2024 by rpki-client on console-fra.rpki-client.org