Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uP7bps2Le9Cm9p7egqJZq4P3Ap4.roa
File: uP7bps2Le9Cm9p7egqJZq4P3Ap4.roa (raw, json)
Hash identifier: b29T7haXz9z9APu5gwpmGol5V9f0hNiAJtgtQDr0fEY=
Subject key identifier: B8:FE:DB:A6:CD:8B:7B:D0:A6:F6:9E:DE:82:A2:59:AB:83:F7:02:9E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DD03EB668BA10DFFB179934B3F2DB2
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uP7bps2Le9Cm9p7egqJZq4P3Ap4.roa
Signing time: Tue 02 Jan 2024 06:29:36 +0000
ROA not before: Tue 02 Jan 2024 06:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203559
IP address blocks: 2a00:1728:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:03:eb:66:8b:a1:0d:ff:b1:79:93:4b:3f:2d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8fedba6cd8b7bd0a6f69ede82a259ab83f7029e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:10:76:fa:e9:2f:ae:4d:c6:b9:4c:12:e7:ea:
63:f6:5d:c7:1c:3a:ef:b1:53:8e:14:de:fd:3f:9f:
32:19:6c:4b:1d:7f:db:0d:86:b1:5f:6a:af:82:47:
61:3f:54:8f:35:f6:14:0b:79:eb:0f:b8:c0:ba:86:
0f:96:50:9d:12:89:84:9e:99:91:c7:77:95:cc:3f:
54:7d:ea:0c:50:21:30:8d:dc:d4:59:7d:ac:c3:96:
f8:d3:30:14:11:79:8f:3d:50:2b:9a:e1:db:c9:9e:
82:d9:e7:e5:4c:6f:6f:bb:bb:8d:da:46:6b:b7:c6:
20:f5:53:f3:9a:1c:bd:8a:ba:14:31:49:a3:ab:65:
3e:3a:c0:c4:94:3e:4e:b3:33:ad:26:82:ce:9c:24:
6e:ad:07:da:60:63:d4:84:f8:92:c5:7c:d2:05:ec:
79:ab:78:0b:c7:42:f4:e9:f7:95:55:31:42:38:c4:
d2:c8:d1:47:81:8f:7a:33:cb:7b:f5:f2:53:cd:21:
37:a8:ca:42:2f:e4:ff:db:e8:cb:5e:dc:6b:76:03:
2e:02:99:04:b4:f9:b4:df:e6:a0:45:50:a5:77:bb:
4f:48:7d:55:f5:50:8b:01:79:a8:88:90:2a:80:e2:
cd:4e:da:c2:e1:13:74:f2:02:2e:e2:f8:01:2c:79:
07:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FE:DB:A6:CD:8B:7B:D0:A6:F6:9E:DE:82:A2:59:AB:83:F7:02:9E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uP7bps2Le9Cm9p7egqJZq4P3Ap4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1728:9::/48
Signature Algorithm: sha256WithRSAEncryption
63:cc:95:7f:65:65:8a:76:44:2d:86:27:f3:7d:52:00:b4:93:
ad:14:97:76:c0:54:16:b3:2a:db:c6:4b:47:d3:ba:8d:cb:a0:
da:dd:5b:a1:85:f9:2a:0b:dd:e3:be:95:89:83:d5:43:ad:67:
f7:b5:95:3e:e5:b9:ad:2c:44:00:c3:c5:81:0c:58:e2:20:79:
be:ab:5c:cb:41:fa:73:d3:c4:80:67:bb:c2:2b:a8:3b:f1:0f:
a1:be:0c:3b:81:68:2f:28:17:5e:3f:ea:07:b6:a7:5d:f5:16:
e2:46:3c:8d:f4:81:0a:17:9b:1a:85:1c:ba:d2:64:7b:a3:eb:
b1:15:0c:6f:16:13:98:2d:a9:71:f9:a3:9a:47:f4:db:78:b0:
9e:11:fe:5c:d4:6d:ab:f3:c6:44:42:5d:aa:f5:8b:3d:79:61:
24:4e:51:45:d7:c1:9c:54:e6:1d:1c:a5:72:86:16:e0:fa:b7:
03:b2:f9:38:1a:dc:50:87:cd:33:f5:dd:68:29:29:b5:2e:a3:
e3:9b:cd:7a:4c:d5:28:39:38:a3:d1:b1:a7:5b:f9:1b:df:fc:
33:a0:95:c1:99:ce:ec:f8:70:e5:fc:e9:5a:52:15:02:dd:fa:
1c:eb:38:96:87:14:44:76:ed:f2:e7:59:cf:48:ff:43:91:3a:
5e:3c:b6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:58:07 2024 by rpki-client on console-ams.rpki-client.org