Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/M1mWs0qadnVtk0pqNP-julLyXbU.roa
File: M1mWs0qadnVtk0pqNP-julLyXbU.roa (raw, json)
Hash identifier: SdMQXIP8JKpblluXOWuZOtIXUen6Qrv8b5NpffzSj+E=
Subject key identifier: 33:59:96:B3:4A:9A:76:75:6D:93:4A:6A:34:FF:A3:BA:52:F2:5D:B5
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 018CC9BCD3620A23F66A159A6291B016392D
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/M1mWs0qadnVtk0pqNP-julLyXbU.roa
Signing time: Tue 02 Jan 2024 10:34:04 +0000
ROA not before: Tue 02 Jan 2024 10:34:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41727
IP address blocks: 2a02:2698:2c00::/38 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:d3:62:0a:23:f6:6a:15:9a:62:91:b0:16:39:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 2 10:34:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=335996b34a9a76756d934a6a34ffa3ba52f25db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:df:8b:ba:12:b8:4f:d8:91:66:dd:5e:e7:e2:
55:e6:be:80:13:48:99:b0:b2:b6:ae:6e:78:e6:75:
e5:c2:b6:7c:8b:fd:72:b3:a1:98:9b:a8:f2:cb:07:
4f:6d:f4:d5:fc:8f:95:f2:64:91:38:f4:3c:f0:a4:
4f:58:9e:d2:23:06:fa:d1:7f:d4:07:c7:6b:26:e6:
2f:fa:b0:10:81:ae:2f:5d:1e:ae:ce:d7:cf:fd:6d:
84:7b:63:4d:03:e5:e9:d5:f7:7a:4d:a5:a5:f0:48:
93:1c:0f:ec:c1:7d:36:ce:35:63:ad:88:35:32:db:
e5:4d:b9:f9:72:b6:cf:35:34:25:59:e1:1e:e9:7a:
6c:b8:99:ca:7d:ff:5c:63:a8:a2:54:92:be:41:7d:
13:e7:1e:76:08:f0:ac:ab:6c:97:ef:4e:3e:57:fa:
b2:8d:37:2c:65:66:d3:c1:e0:b3:f6:2a:52:7f:fe:
78:64:f1:03:32:05:2d:82:12:e5:0a:28:9f:d3:26:
de:35:75:6f:44:f1:a7:ae:77:87:0e:98:7b:d2:c5:
cb:0d:b8:0f:3b:4f:d3:85:a8:8b:c1:fd:7e:3f:66:
6e:47:d4:df:86:7a:eb:44:22:fa:39:01:3f:00:35:
ae:51:83:64:62:14:e5:02:a1:5e:db:6c:50:fe:51:
c9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:59:96:B3:4A:9A:76:75:6D:93:4A:6A:34:FF:A3:BA:52:F2:5D:B5
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/M1mWs0qadnVtk0pqNP-julLyXbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:2c00::/38
Signature Algorithm: sha256WithRSAEncryption
50:aa:5c:7f:ae:a2:ac:24:f5:6c:2f:ac:63:f5:e8:25:5a:19:
6f:4d:d1:b4:14:61:7c:9c:f7:1f:9a:0d:8a:0d:e9:04:dd:ae:
40:68:fc:a0:bc:78:fb:b6:f3:73:60:c0:0a:e0:2e:7d:c6:07:
86:16:e4:6d:1a:60:12:89:e3:38:66:ce:2f:92:25:d6:9b:84:
80:53:e9:4c:20:02:ab:c7:9e:ba:33:8c:f0:d6:2e:15:b4:45:
6a:a2:be:76:b9:be:1e:d9:6b:77:5e:06:27:e1:c2:95:49:77:
12:0d:07:b8:b7:43:18:a8:ce:98:38:f5:b7:ef:3e:c6:81:f7:
a6:82:e4:30:c5:47:af:52:37:8e:cd:51:5f:83:0c:14:50:cd:
98:e0:fc:67:39:2f:12:d1:1a:41:fc:16:38:c0:9c:bf:ae:17:
8d:c7:4b:a5:6d:1c:8e:72:7f:2c:5e:5f:60:f0:69:3f:26:86:
63:a9:ff:30:a8:db:c0:de:b9:1f:ad:b0:4c:e3:b8:da:0a:bf:
1b:1e:f0:7e:b4:c8:0a:dd:59:11:f8:e9:b4:92:92:cf:76:9e:
57:62:d6:8b:a7:45:05:44:90:3c:77:16:50:69:f9:10:9a:fe:
fa:36:d8:cd:26:e7:a1:5d:c4:e7:5a:56:d2:7e:2a:28:bd:c3:
d0:d5:ed:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:35:11 2024 by rpki-client on console-ams.rpki-client.org