Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/T9IGzX4jznxZBQurk7rAdD3rCpw.roa
File: T9IGzX4jznxZBQurk7rAdD3rCpw.roa (raw, json)
Hash identifier: wC1/bruaf4MOZ6/2wp4+kiDH9QhPeHh20gkZhiRYrGE=
Subject key identifier: 4F:D2:06:CD:7E:23:CE:7C:59:05:0B:AB:93:BA:C0:74:3D:EB:0A:9C
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 018CC3B73CD1D6EEE947938EED73542338A0
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/T9IGzX4jznxZBQurk7rAdD3rCpw.roa
Signing time: Mon 01 Jan 2024 06:30:14 +0000
ROA not before: Mon 01 Jan 2024 06:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202402
IP address blocks: 2a13:b487:4400::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:3c:d1:d6:ee:e9:47:93:8e:ed:73:54:23:38:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Jan 1 06:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4fd206cd7e23ce7c59050bab93bac0743deb0a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:63:ad:59:41:e7:fb:02:9f:fe:7f:59:07:8a:
c3:7c:73:9c:c3:a5:5b:fa:65:7a:85:40:a6:40:df:
4a:22:22:30:9e:77:04:3f:62:9f:6d:68:77:44:70:
05:82:05:06:8e:07:f8:4d:6b:a1:c4:be:76:d8:2f:
51:3f:69:d0:01:5a:59:45:47:b3:3a:67:b7:ce:de:
34:15:28:95:2f:3f:64:f2:c8:60:f8:b3:47:2a:0e:
88:a0:32:6e:44:ed:d4:84:0f:55:d5:f9:6e:fe:79:
5f:37:d4:69:4b:62:5c:fc:d9:79:a8:ee:61:bc:1a:
09:ca:1f:96:e3:fe:21:16:ea:19:91:b2:35:8a:6f:
37:46:ec:c1:58:23:a1:67:fe:38:0f:d3:12:95:21:
d7:25:90:ea:5b:c1:a4:b7:a1:58:52:c6:9b:c8:a6:
80:c1:41:75:42:14:72:28:d4:be:21:3e:b6:47:28:
bb:b3:71:75:4b:ca:db:a5:1d:9b:6a:d1:8d:6d:60:
be:24:8d:64:bc:79:44:09:c5:7e:3d:ca:2c:f0:92:
8e:5f:48:a7:2d:92:5c:42:79:d1:72:32:d9:4a:ec:
f2:02:ff:3c:32:93:1a:86:16:3f:ca:8c:aa:05:fc:
c3:ca:34:8d:81:da:1a:02:89:66:81:91:f1:5a:1d:
2d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D2:06:CD:7E:23:CE:7C:59:05:0B:AB:93:BA:C0:74:3D:EB:0A:9C
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/T9IGzX4jznxZBQurk7rAdD3rCpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b487:4400::/40
Signature Algorithm: sha256WithRSAEncryption
a5:50:06:97:8d:4a:3a:59:46:e1:61:35:92:b2:c7:7a:51:5b:
ac:b0:2a:e8:ac:e5:f1:6f:70:ac:f8:89:ae:86:b8:87:40:39:
8c:b4:61:50:70:bb:ef:5e:72:fa:15:ea:0a:09:32:09:ca:ad:
17:db:49:1d:0d:85:da:de:86:cd:c2:60:24:b9:4e:bd:d3:20:
07:fa:3d:b4:44:35:8b:f6:fe:12:9e:e7:cf:8b:4a:5d:bd:b4:
4e:fe:4b:4c:32:3c:cf:af:2d:f0:8e:7c:e3:06:82:bd:3e:a2:
b1:b6:2b:0d:ee:f9:93:48:d6:6e:52:25:7f:8f:48:1d:71:ca:
b9:62:cc:54:02:51:96:a4:b1:e4:00:ff:82:08:ee:fa:66:3e:
5f:1f:ea:bd:53:ac:e6:ef:8f:24:c2:6b:c8:57:bd:20:e6:bc:
dd:bd:5e:fe:e2:a5:cb:a7:de:99:1d:36:b4:49:88:70:69:28:
33:d8:7e:29:b1:d4:b7:24:97:fc:28:01:e8:fc:d8:e0:92:d3:
07:63:3d:42:b4:fa:84:9a:73:70:22:68:5c:45:d8:61:36:c3:
bb:46:da:d7:58:1c:27:99:30:05:54:08:57:fc:60:0f:7e:7a:
9a:07:21:ca:b3:bd:9c:ef:db:42:36:16:a0:75:95:a0:c2:38:
f0:9d:e3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 19:24:17 2024 by rpki-client on console-ams.rpki-client.org