Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/sWar9PMH9_9rmvYFZyHW4b7SxMM.roa
File: sWar9PMH9_9rmvYFZyHW4b7SxMM.roa (raw, json)
Hash identifier: dMuyzm8sHuim6PLNO+4BG+1gcP5w7kThY7BvMTz59SM=
Subject key identifier: B1:66:AB:F4:F3:07:F7:FF:6B:9A:F6:05:67:21:D6:E1:BE:D2:C4:C3
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018CC4256BD3ECBF2994D12DFC115EC288A3
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/sWar9PMH9_9rmvYFZyHW4b7SxMM.roa
Signing time: Mon 01 Jan 2024 08:30:35 +0000
ROA not before: Mon 01 Jan 2024 08:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208088
IP address blocks: 2a0b:b87:ffb3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:6b:d3:ec:bf:29:94:d1:2d:fc:11:5e:c2:88:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 08:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b166abf4f307f7ff6b9af6056721d6e1bed2c4c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ea:f6:5e:ef:50:12:0d:57:1d:49:99:4c:d2:
ef:49:6a:c2:4d:5e:ef:3e:e3:c8:68:b4:01:2a:74:
72:e0:37:be:65:e2:ed:a0:34:2f:b9:29:2a:27:16:
24:d7:db:00:65:fc:80:8d:81:1c:a6:33:29:88:ac:
15:81:cf:5a:d1:4a:af:50:02:bd:5d:03:c4:9b:47:
5a:1f:58:d7:0e:31:75:a0:73:83:ca:d5:9e:63:3e:
be:6d:66:05:dd:b2:93:90:e1:04:0f:19:fc:43:4b:
6f:43:10:d8:4e:dc:16:d5:e2:03:d6:3b:35:6a:49:
9e:23:70:9a:68:1f:a0:36:db:03:dc:ba:cd:a6:52:
89:80:3b:73:ed:c6:88:d6:f5:22:b6:b8:bb:99:9c:
ef:42:45:fb:4d:45:a0:f1:c3:6d:42:66:90:34:ab:
22:b9:85:9c:09:67:31:c7:c4:62:2d:98:33:58:8c:
1d:84:cf:30:63:89:f5:b0:8f:5d:0e:9d:f8:20:3c:
8d:fa:1b:3a:f8:65:a1:d3:3e:58:f1:8c:93:51:16:
f4:53:49:09:61:52:77:de:fb:3a:fe:0a:2a:0f:69:
a4:60:43:af:d3:e3:3f:89:83:cb:e9:f2:71:7b:18:
90:54:f0:de:3b:5b:09:d0:c3:74:b6:37:67:f9:03:
0b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:66:AB:F4:F3:07:F7:FF:6B:9A:F6:05:67:21:D6:E1:BE:D2:C4:C3
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/sWar9PMH9_9rmvYFZyHW4b7SxMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b87:ffb3::/48
Signature Algorithm: sha256WithRSAEncryption
91:ce:cc:f9:11:be:87:b2:55:d9:87:8d:3d:44:23:c4:90:0e:
e5:d5:47:c1:61:65:8c:d1:43:a0:39:23:bf:ec:d3:8d:9a:29:
a1:43:74:f0:5c:08:0b:e1:6e:3e:cf:9f:8b:da:c9:d9:fe:81:
52:b8:b9:a1:99:26:1d:7a:c0:71:d7:c0:c0:dd:bd:2c:ef:f0:
0d:d4:be:25:e4:da:df:c3:37:f4:77:cd:f5:5f:ea:a8:46:1a:
09:d9:f4:ed:4d:33:4a:d5:17:0b:09:31:da:c0:8a:76:95:27:
8a:28:24:d8:e7:b1:2a:77:ac:c5:d3:0c:f7:dc:69:08:6c:df:
b8:fa:ea:c3:ad:b5:b1:aa:51:ca:ef:36:24:45:4e:10:6d:6f:
e4:23:8b:ce:65:fb:80:e7:bf:ea:12:f4:d9:31:ec:fb:6e:5e:
0b:ee:dc:2c:11:d6:24:31:f0:38:8a:09:c5:f3:b5:b5:06:da:
39:54:68:0b:11:b9:99:43:25:40:04:35:81:ad:85:68:47:5a:
c8:40:b7:fe:c4:d5:dc:98:d3:4d:5c:15:10:ef:c1:1e:a7:d6:
86:48:10:82:76:78:b9:6d:09:00:97:98:85:d3:a7:37:c7:cb:
f4:f7:e8:ef:04:b3:16:00:df:87:94:38:a5:49:53:e4:0c:12:
80:0a:f3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:18:58 2024 by rpki-client on console-ams.rpki-client.org