Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/Pkh9Gq5RtL3DJ7LKJyHpMSbW8Wo.roa
File: Pkh9Gq5RtL3DJ7LKJyHpMSbW8Wo.roa (raw, json)
Hash identifier: +EFcCzSSPEHdejmzwh6R4E0f2/7MJ93UUlD5525RfZ8=
Subject key identifier: 3E:48:7D:1A:AE:51:B4:BD:C3:27:B2:CA:27:21:E9:31:26:D6:F1:6A
Certificate issuer: /CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Certificate serial: 018CC6B77FBA9C3D81A2010A9E58C8D0A985
Authority key identifier: 74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/Pkh9Gq5RtL3DJ7LKJyHpMSbW8Wo.roa
Signing time: Mon 01 Jan 2024 20:29:23 +0000
ROA not before: Mon 01 Jan 2024 20:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47890
IP address blocks: 2a0e:1d80:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 May 2024 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:7f:ba:9c:3d:81:a2:01:0a:9e:58:c8:d0:a9:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Validity
Not Before: Jan 1 20:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e487d1aae51b4bdc327b2ca2721e93126d6f16a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:55:07:7a:7f:0e:49:d2:ba:84:e2:1d:d2:e9:
fa:2a:e0:37:a6:f1:27:10:fb:74:0f:6f:e0:64:a7:
96:1b:a3:fc:77:72:15:72:02:44:5a:a4:2e:c4:40:
42:78:f4:5c:1d:4d:f4:bf:ab:9c:3d:98:48:08:86:
01:cf:ec:4d:d8:dc:82:11:e2:5f:27:b6:02:df:8e:
26:58:e6:d7:17:b0:79:6f:0c:d1:63:97:b1:ac:c3:
7a:58:4a:fc:0c:e2:0b:70:d5:ad:96:5b:82:51:94:
29:c3:45:a2:c2:c4:2b:b1:2c:f3:34:d9:ab:d2:80:
6f:a1:7c:f6:fe:91:20:78:43:09:7f:bc:d6:4a:f9:
ca:a6:a6:16:a3:ec:56:10:38:d5:37:af:b1:1d:16:
7a:d3:db:05:48:77:f7:be:22:ed:8a:b1:54:a4:78:
25:1d:28:f4:64:d8:53:d1:ee:87:ff:54:b6:2c:ad:
10:9b:9a:5c:f3:5e:43:70:89:43:ad:26:fd:7b:0c:
ee:a3:15:d3:bd:6b:3a:48:2e:c6:aa:33:f6:fa:10:
78:93:d1:54:47:ee:ba:60:4a:ce:15:83:fa:70:6a:
49:2f:c6:5f:2f:c2:6c:3e:7e:7d:df:04:68:4c:44:
fc:cf:13:67:14:a5:b4:d2:fe:50:fe:65:54:28:16:
b6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:48:7D:1A:AE:51:B4:BD:C3:27:B2:CA:27:21:E9:31:26:D6:F1:6A
X509v3 Authority Key Identifier:
keyid:74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/Pkh9Gq5RtL3DJ7LKJyHpMSbW8Wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:1d80:7::/48
Signature Algorithm: sha256WithRSAEncryption
b3:6a:68:35:08:5f:95:7b:61:83:bb:43:bb:ea:e2:d4:79:3d:
bd:98:7a:65:27:06:9c:f0:28:28:92:cc:d2:e7:80:66:e2:60:
07:3f:a8:55:5f:46:b0:98:34:a8:91:b9:f2:f5:2a:67:00:b1:
df:73:e3:3a:b3:cc:24:e9:a2:17:c3:53:f1:48:15:9e:e7:f7:
21:99:ec:8f:e0:5e:d5:bc:0e:c9:7a:f9:e7:0b:91:1e:64:8f:
3d:cc:c5:1b:7c:59:6b:48:2e:49:d3:fc:86:73:c5:01:c5:94:
a8:d4:b5:94:ad:66:0f:5b:d5:35:5b:2e:2f:ac:cb:28:7a:c4:
1e:01:8a:a6:e3:78:b5:44:cc:ee:26:44:c7:ab:6c:33:23:b4:
c5:c0:41:f9:82:db:46:fb:a2:33:8a:64:37:48:d9:70:fd:45:
b0:cf:5f:3c:69:db:7d:47:33:51:1f:7a:d7:bf:fd:73:1c:0b:
54:55:03:fe:27:15:34:17:e0:06:ce:12:35:da:64:79:1a:a6:
f7:60:cb:18:6d:69:73:6e:ef:cc:b8:8e:df:9f:f6:b6:7f:fe:
67:f9:5b:69:d5:a2:ed:04:8f:3e:15:a5:27:90:1c:62:fd:09:
4f:33:74:e6:db:80:b4:46:88:29:33:45:19:3e:7b:e6:b8:79:
a8:f5:eb:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 10:27:51 2024 by rpki-client on console-ams.rpki-client.org