Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/SVyH4jq21hncLO-ap6Nm60YheVY.roa
File: SVyH4jq21hncLO-ap6Nm60YheVY.roa (raw, json)
Hash identifier: AM3NzakTrSZJKIkc3yqDTStb9fPiH5RcZe/fQ0lkHLw=
Subject key identifier: 49:5C:87:E2:3A:B6:D6:19:DC:2C:EF:9A:A7:A3:66:EB:46:21:79:56
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 018CC80137FE2B1C1B8CB6E9BB5132FC258D
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/SVyH4jq21hncLO-ap6Nm60YheVY.roa
Signing time: Tue 02 Jan 2024 02:29:32 +0000
ROA not before: Tue 02 Jan 2024 02:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197598
IP address blocks: 2a13:c800::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:37:fe:2b:1c:1b:8c:b6:e9:bb:51:32:fc:25:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: Jan 2 02:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=495c87e23ab6d619dc2cef9aa7a366eb46217956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9d:23:56:d8:b2:51:5c:dd:49:79:07:1d:1e:
56:f6:25:59:43:96:bb:ac:2e:e4:df:4a:4a:05:cc:
eb:8e:01:5f:df:ce:f0:62:01:ec:c0:c3:81:48:9b:
d8:8b:fc:86:18:db:b9:7c:e4:41:8d:b0:d5:49:ca:
15:cd:be:cb:a8:0f:62:15:f8:53:c3:cd:e7:f3:45:
23:85:ed:32:19:ab:12:c9:fe:5d:71:f5:c4:e8:da:
91:5b:fb:da:66:35:8a:1b:c6:64:75:f2:4b:89:47:
14:f8:7c:50:c5:14:18:84:e8:82:62:44:11:ab:fe:
6b:e4:6e:96:c2:44:e3:2a:7b:ec:73:9b:92:a7:c8:
25:2a:fd:a0:e6:fc:69:b5:99:5c:b3:68:9b:09:b1:
1c:34:1c:4f:c8:33:e0:64:89:d4:1c:7b:1b:be:7f:
0a:c7:fe:3f:57:92:ef:d4:d3:17:3f:10:99:fa:ea:
13:f8:f0:e2:0b:65:eb:72:c9:4f:e5:74:4e:31:64:
c1:94:e4:a7:98:21:1c:5f:c9:ed:da:8b:c8:9b:db:
03:0d:e9:b5:42:30:a3:6e:dc:21:a1:f7:b1:d2:f8:
bc:d8:16:92:74:21:84:aa:99:2f:6c:d7:0d:77:2c:
6c:87:8e:0b:6d:4a:5b:f1:57:b0:8e:40:e8:c9:6a:
cb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5C:87:E2:3A:B6:D6:19:DC:2C:EF:9A:A7:A3:66:EB:46:21:79:56
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/SVyH4jq21hncLO-ap6Nm60YheVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c800::/29
Signature Algorithm: sha256WithRSAEncryption
31:ba:dd:43:1c:ef:de:7f:a3:56:02:c5:b4:7a:67:48:ca:70:
d8:c0:e0:c4:5b:fd:36:eb:83:19:de:88:64:ac:b6:a8:16:29:
e0:5c:63:22:c9:48:50:ad:b7:d5:b6:09:9c:bf:a1:f6:00:84:
c0:26:2b:b1:1a:3c:89:8c:19:a8:02:da:02:2e:61:64:36:d3:
da:08:d0:16:43:59:77:e1:2e:f2:91:3f:af:2e:34:19:7c:5a:
d6:13:23:04:e2:ba:13:44:39:b1:a7:61:c6:69:91:48:5d:1a:
b9:fc:3f:04:55:ce:42:6c:39:85:2b:9e:43:e7:8c:3e:0d:04:
56:4f:d1:a6:ac:d6:53:ab:c6:55:94:a1:c2:56:8e:58:03:37:
24:02:46:b9:87:d5:a7:b4:27:6d:c3:e9:a9:ec:d0:51:19:d0:
68:4c:a0:4a:d8:f5:a8:49:28:62:36:59:6b:91:02:13:b8:3f:
2d:42:9c:10:e7:77:13:6e:a7:30:07:cd:a1:3a:3e:9e:c6:dc:
1d:c5:ee:93:89:b1:58:55:4b:fa:75:84:04:28:9f:b4:f7:18:
a8:cd:a7:7c:97:f4:d8:7f:8a:bc:89:50:71:84:eb:a4:1c:d0:
a2:2d:27:35:bc:3a:30:12:4f:bb:96:3e:8a:fb:60:cc:4c:75:
49:30:38:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 02:59:50 2024 by rpki-client on console-ams.rpki-client.org