Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/A9rjDYjx5B-2V02NH6j7eDH4ykQ.roa
File: A9rjDYjx5B-2V02NH6j7eDH4ykQ.roa (raw, json)
Hash identifier: htsHLUUliW+cpkOZd9Bd+8FAuPOj7eHLWq5MBp13NgE=
Subject key identifier: 03:DA:E3:0D:88:F1:E4:1F:B6:57:4D:8D:1F:A8:FB:78:31:F8:CA:44
Certificate issuer: /CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Certificate serial: 018CC5004487C29676641FD586A6B8ACC392
Authority key identifier: 19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/A9rjDYjx5B-2V02NH6j7eDH4ykQ.roa
Signing time: Mon 01 Jan 2024 12:29:38 +0000
ROA not before: Mon 01 Jan 2024 12:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39392
IP address blocks: 2a02:6ea0:cd77::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:44:87:c2:96:76:64:1f:d5:86:a6:b8:ac:c3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Validity
Not Before: Jan 1 12:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03dae30d88f1e41fb6574d8d1fa8fb7831f8ca44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:55:3c:76:db:f1:ef:8c:8e:b2:05:34:04:8f:
8c:cb:b9:bd:97:8c:e6:6c:eb:4d:2b:81:a1:13:92:
ce:c5:d3:e2:15:2c:fe:db:12:64:a9:99:de:2e:ca:
47:72:10:da:a0:80:27:8d:92:d2:0b:ba:ca:7e:d5:
42:97:22:2d:9c:65:74:ee:90:4e:f5:b8:be:da:b3:
6d:21:bc:0b:e6:d5:33:8a:23:b5:70:51:3e:0e:2e:
01:b4:01:10:4a:51:52:4f:71:14:4f:23:0c:c5:15:
b5:05:22:be:bf:e5:1a:b8:9f:34:9e:f6:2e:e0:c5:
33:ac:ef:b4:b9:d5:47:46:8c:fe:50:e2:a4:35:48:
d6:ae:fe:7a:86:17:b0:18:10:c0:6b:78:68:c9:46:
66:6c:cd:e2:40:c5:b5:fa:4a:2e:83:c5:6f:5b:b2:
bd:da:ec:57:cd:ac:98:ba:18:6a:a4:04:06:50:b7:
cf:b2:18:3d:3e:f6:72:41:cc:da:63:6b:c6:41:cb:
44:50:04:58:ff:6f:c9:1d:37:71:b8:d4:16:70:7f:
56:ba:59:31:2b:da:8f:48:80:0a:d6:8c:97:0d:2d:
45:32:07:3c:10:16:bc:6b:5b:8c:34:9d:12:ba:93:
ae:0f:c8:ac:44:01:ab:e0:8f:48:66:29:2d:2e:76:
61:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DA:E3:0D:88:F1:E4:1F:B6:57:4D:8D:1F:A8:FB:78:31:F8:CA:44
X509v3 Authority Key Identifier:
keyid:19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/A9rjDYjx5B-2V02NH6j7eDH4ykQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:6ea0:cd77::/48
Signature Algorithm: sha256WithRSAEncryption
98:aa:a1:c0:1d:10:d7:0e:d8:7a:2e:65:46:19:d0:80:9f:9e:
8e:da:b0:8e:91:3f:a9:65:89:7d:0a:ad:f0:0d:7c:9d:93:5c:
fb:89:27:00:22:63:da:08:f3:30:1c:3f:87:8b:94:66:2d:8a:
f3:65:92:6c:0f:1f:c5:2a:4a:9d:45:90:b3:b7:b4:5d:e9:e6:
f5:31:95:c9:3c:a7:40:b2:87:63:61:d3:c7:82:46:57:ed:d9:
6d:cc:7c:1a:f7:52:03:9e:93:d0:19:e9:a7:33:77:da:f8:b9:
3e:c2:fc:b1:0c:42:cc:ff:ba:bc:61:27:0b:f5:7e:c4:5f:e4:
b4:a8:b6:dc:49:c7:2d:b7:50:c8:a6:26:5a:a8:b8:a6:36:ad:
20:b9:73:51:4c:49:d5:a6:41:58:1c:cf:74:f4:8a:77:d4:d7:
88:d9:a2:bd:d4:62:be:dc:9d:1f:1a:35:24:4c:7f:ab:cf:97:
a8:b2:45:a4:b7:67:74:a5:53:8f:84:5a:48:2e:8a:3d:86:cb:
47:9a:1d:60:74:6d:3d:3d:c9:e9:ff:d6:48:a2:51:3b:f9:9e:
98:1a:88:af:42:86:6d:30:93:98:19:5c:be:c6:ee:02:b7:3d:
f9:23:f9:9f:2e:e5:0f:bc:e6:ab:69:b3:60:d5:2b:31:6e:e3:
04:3c:36:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:35:48 2024 by rpki-client on console-ams.rpki-client.org