Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/A9cK38TGE9p3k2ltpag_VeCq0O0.roa
File: A9cK38TGE9p3k2ltpag_VeCq0O0.roa (raw, json)
Hash identifier: a5VgaovWD3XCm/y4Ml2K+S5+DWTtQ09VwHOJMqUwfa4=
Subject key identifier: 03:D7:0A:DF:C4:C6:13:DA:77:93:69:6D:A5:A8:3F:55:E0:AA:D0:ED
Certificate issuer: /CN=df895a3ee2211b6ee2df7202f09a426680d66269
Certificate serial: 018EE0EDBDBF2B3E6BBEA391E22A87589ED1
Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/A9cK38TGE9p3k2ltpag_VeCq0O0.roa
Signing time: Mon 15 Apr 2024 08:44:20 +0000
ROA not before: Mon 15 Apr 2024 08:44:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212165
IP address blocks: 2a14:3bc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e0:ed:bd:bf:2b:3e:6b:be:a3:91:e2:2a:87:58:9e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269
Validity
Not Before: Apr 15 08:44:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03d70adfc4c613da7793696da5a83f55e0aad0ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:dd:34:96:99:74:b9:4b:30:4c:08:cf:46:d1:
5d:b8:90:25:5a:05:7f:e5:f1:8a:e9:28:bd:6f:d4:
2c:31:36:c9:49:17:d5:46:63:76:38:61:fc:76:e7:
ba:2f:59:19:2c:2e:04:23:3f:5a:bc:f7:cf:41:d5:
21:9b:0b:01:d1:eb:b7:30:f6:7d:58:29:04:99:d8:
89:56:4e:23:a9:37:ca:a0:90:73:b1:5f:0e:90:f1:
48:8c:27:f4:9e:0e:16:01:44:a0:d8:3d:57:b0:8a:
7d:8d:65:74:7f:74:80:27:8b:7e:e5:bf:89:0b:c9:
95:1a:e7:ba:21:d5:ca:c6:55:21:0a:a4:c3:b8:49:
aa:75:c3:4d:d7:6f:bd:0a:03:30:0a:aa:17:9c:8c:
70:ca:1b:b8:f9:38:7b:1d:16:e6:65:4f:db:aa:f1:
9f:b7:7f:96:9f:73:db:fb:25:39:1c:ea:ed:ed:fe:
49:a0:c7:fe:0e:00:82:d0:05:f9:69:a4:06:cb:b1:
89:c9:ad:03:1b:49:6e:c3:bd:80:3d:0c:23:45:f9:
42:9e:9b:2b:e8:73:60:1a:0c:70:29:64:1d:b4:ce:
45:cc:86:32:e5:74:17:b5:63:9a:1e:b1:48:59:16:
b5:00:02:f6:d4:19:f8:1a:34:12:98:1c:82:da:3a:
0d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D7:0A:DF:C4:C6:13:DA:77:93:69:6D:A5:A8:3F:55:E0:AA:D0:ED
X509v3 Authority Key Identifier:
keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/A9cK38TGE9p3k2ltpag_VeCq0O0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:3bc0::/29
Signature Algorithm: sha256WithRSAEncryption
9c:b7:d9:df:d2:52:06:c6:b5:b8:c6:11:ea:62:67:dd:b4:55:
6e:c5:39:85:de:33:e0:4f:5c:cb:cf:2c:c1:db:0b:a1:aa:54:
f4:60:b0:40:b1:00:ed:c8:e4:af:24:b8:99:40:88:03:3a:6b:
cb:c5:98:13:2a:00:0b:f0:3e:7f:44:aa:6a:85:79:75:41:01:
d0:d3:88:46:c9:ce:c8:ee:01:3c:f1:ef:a4:98:e4:17:4d:ba:
80:84:e0:97:28:6e:45:aa:98:34:74:90:00:c8:02:9d:5e:fb:
d8:9e:9c:df:a3:d0:d0:66:2e:d0:93:95:0d:15:36:ed:f7:36:
92:8f:4f:d7:07:d0:c0:b3:76:f9:ac:01:62:b7:b3:fe:b3:08:
0f:46:94:ef:00:b8:4a:bd:ce:f9:56:3f:4c:a3:f0:90:90:26:
5f:44:0b:f1:57:0f:01:dd:51:a4:fa:0d:13:f1:b8:2a:07:f8:
9f:38:aa:f4:a9:09:2f:1e:96:5e:7b:fe:33:d6:30:64:03:99:
6b:53:94:6b:59:fc:f2:86:72:7e:1a:e1:e9:34:54:fd:c5:78:
a6:dd:91:67:0d:19:e1:3d:96:3c:cb:58:1b:19:d6:ac:e3:40:
27:3f:00:d6:70:7e:7e:56:8d:06:39:f8:50:90:1a:64:41:8b:
14:18:be:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:20:06 2024 by rpki-client on console-fra.rpki-client.org