Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/8wNbyvzagsXQX3xUAQhdQywDbzo.roa
File: 8wNbyvzagsXQX3xUAQhdQywDbzo.roa (raw, json)
Hash identifier: qbTbUhKxLl+7tz2eMk36RsEHquR0mC/xUzHI9ZFov8w=
Subject key identifier: F3:03:5B:CA:FC:DA:82:C5:D0:5F:7C:54:01:08:5D:43:2C:03:6F:3A
Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial: 018CC9BBFB203927FC34DD6892B117B3B12F
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/8wNbyvzagsXQX3xUAQhdQywDbzo.roa
Signing time: Tue 02 Jan 2024 10:33:09 +0000
ROA not before: Tue 02 Jan 2024 10:33:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 147049
IP address blocks: 2a13:240:4000::/40 maxlen: 40
2a13:240::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:fb:20:39:27:fc:34:dd:68:92:b1:17:b3:b1:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
Validity
Not Before: Jan 2 10:33:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3035bcafcda82c5d05f7c5401085d432c036f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:81:7e:60:34:74:d3:c0:ab:46:c1:9f:d5:4d:
02:87:86:ad:65:94:c5:07:1f:c8:37:a5:b6:35:dd:
1b:1e:ef:a4:67:47:e7:d1:17:88:40:ed:5a:35:58:
c8:77:84:55:e9:17:1c:50:9e:ae:82:43:a5:c9:23:
41:d5:68:62:0a:2e:2f:6f:e4:78:0a:48:cd:cd:9e:
d0:69:9e:8b:74:f6:3d:0f:18:b1:3b:83:c7:81:79:
e5:db:59:bd:00:c9:3a:d1:bc:94:50:b2:1e:8b:e1:
2b:20:63:d8:00:f1:2d:8e:0f:83:cf:3c:7b:0f:74:
f4:5b:c8:1e:e3:6a:83:6d:82:eb:da:f8:68:e3:d6:
dc:33:d8:8c:ce:85:4d:9a:3b:dd:ea:25:bd:2b:f3:
52:59:f8:a6:16:c8:91:47:5b:e3:52:70:44:36:9c:
17:3a:9d:2e:75:37:26:66:04:aa:99:4f:da:6c:00:
16:1f:aa:a8:0f:26:3f:b9:1e:bc:26:82:e0:12:da:
00:bd:17:36:25:59:44:92:43:ce:56:d9:3d:a3:eb:
16:8f:7d:55:41:c7:f1:8e:0a:9e:32:4e:5a:04:8c:
29:7c:0b:28:aa:fe:43:a6:67:e9:21:d4:2d:58:70:
3f:b6:40:c2:b8:0c:19:a2:a2:c2:18:25:f1:47:e7:
dd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:03:5B:CA:FC:DA:82:C5:D0:5F:7C:54:01:08:5D:43:2C:03:6F:3A
X509v3 Authority Key Identifier:
keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/8wNbyvzagsXQX3xUAQhdQywDbzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:240::/48
2a13:240:4000::/40
Signature Algorithm: sha256WithRSAEncryption
29:1d:1e:71:5f:79:e6:97:17:83:59:d2:a2:d3:19:5b:af:1e:
96:8f:7a:71:14:d3:eb:bb:95:50:ce:28:51:c2:f9:81:f2:de:
38:4d:14:47:6e:1b:9e:9a:1f:98:d6:82:0b:11:ef:55:43:e4:
4a:76:2d:c8:96:d4:db:83:67:65:4a:3f:2a:a8:8d:f1:6d:ce:
9c:60:a6:7c:3e:d2:37:ad:92:b3:81:65:da:cc:f0:d6:aa:70:
7c:11:1e:23:6a:99:04:ea:ba:af:ff:95:e2:9a:f0:f6:27:45:
88:0a:4c:92:8d:85:0b:8c:a1:27:65:f8:d4:06:70:db:ca:3f:
36:c6:e6:fa:96:ab:67:51:7b:92:24:43:40:89:e0:ee:d6:d5:
aa:1e:7b:39:a7:21:cc:83:a8:7b:03:40:1e:ce:3b:ca:29:5d:
68:ac:73:53:b2:37:48:69:a5:49:41:44:13:8e:71:ab:48:a5:
6f:5f:ce:7c:b6:ce:1e:e4:97:a2:a6:2c:e1:59:c8:24:10:68:
92:ae:26:28:b3:d6:46:34:03:f2:2b:f4:05:c7:13:8b:c5:3a:
eb:16:2d:2c:44:d7:eb:5e:a4:3a:0f:67:f9:89:d8:d8:dd:6b:
74:2d:9b:c5:a5:3f:fa:34:3a:7a:e7:86:f0:05:8e:3d:d3:b2:
2e:e0:48:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 07:11:00 2024 by rpki-client on console-ams.rpki-client.org