Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/IVZG3zAF8lT3jfbBgMJadxjWFE8.roa
File: IVZG3zAF8lT3jfbBgMJadxjWFE8.roa (raw, json)
Hash identifier: +mqGCIP7u5HxsN0WTJh2Fub1hAoN4PwMvZcSyDaKH6U=
Subject key identifier: 21:56:46:DF:30:05:F2:54:F7:8D:F6:C1:80:C2:5A:77:18:D6:14:4F
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 018CC8013A3C37F94424AD85006B648C023E
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/IVZG3zAF8lT3jfbBgMJadxjWFE8.roa
Signing time: Tue 02 Jan 2024 02:29:32 +0000
ROA not before: Tue 02 Jan 2024 02:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397518
IP address blocks: 2a01:488:bb17::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:3a:3c:37:f9:44:24:ad:85:00:6b:64:8c:02:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Jan 2 02:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=215646df3005f254f78df6c180c25a7718d6144f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:09:5b:ea:7d:82:a2:1b:e8:48:83:eb:28:0b:
9b:d2:21:01:04:88:32:4b:22:91:79:e3:32:f7:92:
00:7e:81:73:65:a5:8a:92:db:da:29:2d:50:3a:26:
b4:b2:8b:67:77:b8:d7:02:92:19:03:4a:ef:48:a8:
30:e2:ed:28:b7:28:5f:8c:e4:b7:91:2f:82:68:ff:
2b:10:98:1c:12:a9:6d:73:36:57:c2:9e:b9:1f:f0:
c9:4b:73:18:41:24:90:30:bf:87:5f:c5:5d:12:19:
7d:65:29:0a:02:36:41:c8:7c:ef:b0:47:ab:6a:ea:
24:75:7d:d5:ae:9f:e1:41:37:70:e6:7c:53:ed:d8:
a1:0b:88:76:27:a6:ad:f7:ce:86:8d:e8:35:68:66:
44:20:87:20:7a:e7:c6:17:35:ff:ae:be:1e:e9:f3:
a8:86:8e:27:5c:0a:ba:e7:62:7e:b5:74:76:1e:84:
f8:58:71:36:cf:ce:bb:1b:1c:26:cd:8a:1d:14:6c:
6c:d3:04:2d:8f:ca:d5:e6:50:7f:6a:ab:4b:97:b4:
0c:44:40:e4:34:a5:72:8e:5e:35:6e:37:f0:51:16:
4f:01:fe:b1:8c:72:38:0a:af:bd:1d:35:76:f0:c2:
96:b9:da:81:dc:77:e6:2a:14:e1:f8:fd:47:cd:13:
56:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:56:46:DF:30:05:F2:54:F7:8D:F6:C1:80:C2:5A:77:18:D6:14:4F
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/IVZG3zAF8lT3jfbBgMJadxjWFE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:488:bb17::/48
Signature Algorithm: sha256WithRSAEncryption
0a:83:3b:cd:6d:25:1b:ba:ed:bf:71:d4:0c:55:3e:10:1a:2b:
42:ba:3f:4f:52:31:4a:32:2f:81:f7:9f:39:f2:7a:e9:55:7e:
37:d0:44:b6:d1:0b:93:cf:d7:26:68:cd:c0:29:6b:5c:f5:7b:
f0:31:fe:a0:82:fb:ad:03:33:64:2b:8d:52:d5:76:e3:76:26:
4c:0f:4e:79:60:6f:d9:c2:0a:dc:5c:11:8a:06:c5:f5:27:dd:
79:37:65:05:fd:67:8e:b0:2c:6d:31:c2:37:89:9e:e0:f9:37:
86:86:be:7d:6b:81:8c:43:a1:6e:9d:ce:ce:41:65:2e:08:49:
d2:dc:75:fd:65:38:7b:d5:1c:54:c4:b1:63:af:da:54:36:40:
f1:61:07:97:87:0e:43:81:37:6f:50:5a:db:60:3d:aa:4e:9f:
b0:88:35:a0:06:4c:63:85:41:a0:6c:e8:09:03:88:8b:00:6a:
40:4f:a9:29:a0:44:c7:10:d8:2a:1c:95:ae:e9:24:5d:4c:76:
31:36:57:76:7b:f8:cb:b8:bd:ad:95:ce:49:3a:0d:c8:ff:e3:
f4:b6:25:0a:e8:e4:99:8d:49:6f:80:0c:34:0b:6f:f0:ed:d3:
d0:58:28:dd:12:b4:fa:ea:9d:23:16:10:1f:38:b6:7c:ef:0d:
29:d7:81:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:14:22 2024 by rpki-client on console-fra.rpki-client.org