Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/29FS9Q6z0i2gDCRrAb1Bzcz1O1Q.roa
File: 29FS9Q6z0i2gDCRrAb1Bzcz1O1Q.roa (raw, json)
Hash identifier: LXRIiXBUAlRQC1Wn9GEmWs572hoLNA3uxsHLKPrgFeE=
Subject key identifier: DB:D1:52:F5:0E:B3:D2:2D:A0:0C:24:6B:01:BD:41:CD:CC:F5:3B:54
Certificate issuer: /CN=f2807f280da99569eca24346babe9dc85ac13240
Certificate serial: 018CC3B6E4FEA9347D2ECDFD7547FBF292D3
Authority key identifier: F2:80:7F:28:0D:A9:95:69:EC:A2:43:46:BA:BE:9D:C8:5A:C1:32:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/29FS9Q6z0i2gDCRrAb1Bzcz1O1Q.roa
Signing time: Mon 01 Jan 2024 06:29:52 +0000
ROA not before: Mon 01 Jan 2024 06:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 18622
IP address blocks: 2a02:e38:4100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:e4:fe:a9:34:7d:2e:cd:fd:75:47:fb:f2:92:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2807f280da99569eca24346babe9dc85ac13240
Validity
Not Before: Jan 1 06:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dbd152f50eb3d22da00c246b01bd41cdccf53b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e1:39:b9:2b:76:b7:7b:2e:bd:5b:fe:ea:2c:
8d:e6:5a:5f:c8:6d:5d:59:63:0a:e2:bc:89:da:fa:
3d:8d:9c:d2:1f:14:22:9b:f6:07:99:fd:93:01:b6:
38:1b:8f:ad:b6:d0:67:6c:df:ab:e0:e0:25:95:07:
16:3a:4a:f8:c8:c2:a8:84:6c:2e:71:28:56:de:90:
41:91:5f:31:bc:20:ea:66:00:65:69:4b:50:af:54:
51:c1:b9:b9:92:6e:bd:6f:48:00:9f:fa:3d:91:0f:
31:e2:e9:49:77:e4:cb:38:a0:cb:28:a7:cf:4a:01:
78:08:2c:75:ed:05:7e:20:3f:d9:6b:c4:46:1d:ef:
83:a0:ca:f3:df:a7:07:d5:c3:a2:ad:6c:b8:d5:b8:
a0:3b:42:6d:76:e7:e4:84:bb:86:dc:c6:44:f2:3a:
89:54:e2:1a:29:b2:c8:a6:4c:b2:ba:32:90:8f:5c:
b2:ee:10:01:72:3a:21:b0:70:31:67:ab:50:a4:3c:
5b:75:2b:0a:4f:9b:c2:c3:67:8c:82:56:61:fb:91:
97:ac:b7:f9:54:8e:ef:07:db:b7:52:b6:7c:59:4b:
27:98:75:e2:7c:d7:f4:a3:99:9a:6d:0a:19:ef:bf:
16:24:0c:97:b5:6e:52:f7:63:d4:94:65:1e:ca:32:
31:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D1:52:F5:0E:B3:D2:2D:A0:0C:24:6B:01:BD:41:CD:CC:F5:3B:54
X509v3 Authority Key Identifier:
keyid:F2:80:7F:28:0D:A9:95:69:EC:A2:43:46:BA:BE:9D:C8:5A:C1:32:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/29FS9Q6z0i2gDCRrAb1Bzcz1O1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:e38:4100::/40
Signature Algorithm: sha256WithRSAEncryption
12:dc:01:ee:c9:40:f8:fd:3f:25:13:ac:a4:24:d0:f2:42:d5:
ac:b7:2e:24:1b:b4:76:f0:41:11:45:63:98:ba:80:a5:64:6b:
8e:c9:47:66:cc:78:1b:ba:b1:22:ef:f2:ec:d7:dd:c4:e6:b1:
48:53:4c:4f:08:5d:65:1e:dd:39:5a:de:b3:a7:f8:be:ab:e2:
22:64:e3:3b:69:15:69:f5:8f:9c:78:ee:15:8a:71:0a:10:ad:
e0:cd:37:10:78:06:f6:2e:4f:0c:19:ef:82:ee:8e:98:d5:65:
13:6e:43:9a:da:50:f0:1d:5c:54:32:b9:ab:ea:81:50:15:b8:
03:c9:35:e1:85:98:83:93:f8:a9:44:87:85:fd:cb:a1:35:3b:
ac:81:72:64:4d:5f:fd:d4:0b:78:a2:a6:36:c0:79:95:c8:fd:
d4:da:05:f1:fb:68:ed:f6:01:a7:b2:53:c7:2f:d0:22:e9:35:
e8:81:05:59:5a:01:8e:ca:86:77:57:44:92:bd:9d:ce:4a:46:
a9:70:22:f4:3c:fd:48:cd:cf:30:97:16:d5:1d:ec:5a:ce:48:
99:1e:b9:9b:25:e5:22:19:80:f5:4d:4e:90:f3:a2:c7:47:7d:
cf:cb:10:b4:51:2a:43:4f:41:68:4c:69:96:a1:e5:4d:d1:e2:
27:62:5d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 13:23:08 2024 by rpki-client on console-fra.rpki-client.org