Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/ggr9maPChsjUcaz6PCsMFo_BOtM.roa
File: ggr9maPChsjUcaz6PCsMFo_BOtM.roa (raw, json)
Hash identifier: uSE5OmWXCfpAsl+Ayreb7cIyGncsF675B6EtL9ZVhyw=
Subject key identifier: 82:0A:FD:99:A3:C2:86:C8:D4:71:AC:FA:3C:2B:0C:16:8F:C1:3A:D3
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 018CC8013DE44A98F9D2089D47012454961A
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/ggr9maPChsjUcaz6PCsMFo_BOtM.roa
Signing time: Tue 02 Jan 2024 02:29:33 +0000
ROA not before: Tue 02 Jan 2024 02:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398105
IP address blocks: 2a01:488:bb10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:3d:e4:4a:98:f9:d2:08:9d:47:01:24:54:96:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Jan 2 02:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=820afd99a3c286c8d471acfa3c2b0c168fc13ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f6:b6:2f:0f:58:0e:04:7d:f4:46:28:45:bb:
e6:51:9d:fc:10:5a:0c:c4:1a:b3:11:1f:da:19:13:
30:53:9f:b5:40:3d:c5:c1:89:ef:a6:08:37:56:65:
2f:ba:74:2e:9d:03:c5:e6:06:41:01:ba:b0:7e:20:
d4:9e:f3:10:ff:ca:b6:50:4d:ef:26:00:7a:35:99:
52:98:6a:96:c5:9f:10:01:6a:05:14:b4:c2:98:7d:
7b:a3:54:96:b4:04:74:77:d4:9f:31:2b:9e:81:77:
f3:29:f9:55:be:02:d4:c9:cd:80:f1:08:c3:d9:c7:
f6:5f:d5:1b:b5:92:0c:04:69:87:94:25:03:47:8e:
3a:8f:f7:4d:03:01:84:c0:4e:f0:81:ac:a5:b5:78:
d5:d4:7c:a4:20:57:6b:5a:25:5e:b3:f0:0b:78:59:
61:7f:4c:a6:67:e2:01:52:47:e3:eb:e6:78:14:20:
bb:f9:63:77:9b:70:2f:b5:38:60:37:2c:a5:ad:14:
a4:34:8e:ee:1b:1a:e0:7f:a4:89:cb:f0:8c:ab:66:
7a:bf:90:4d:d7:02:41:56:c5:e4:0e:9a:24:54:3b:
b4:1a:83:c2:38:97:a6:40:7f:72:f6:ef:76:cc:55:
38:d8:f0:14:bd:2a:7b:6a:ef:89:74:b1:46:9d:6e:
10:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0A:FD:99:A3:C2:86:C8:D4:71:AC:FA:3C:2B:0C:16:8F:C1:3A:D3
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/ggr9maPChsjUcaz6PCsMFo_BOtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:488:bb10::/48
Signature Algorithm: sha256WithRSAEncryption
44:4e:2a:cd:42:98:74:90:81:7c:ce:e7:92:a8:3a:45:38:07:
a3:83:f9:b8:b3:92:de:56:f9:ea:f9:f0:19:5c:d8:6b:27:dd:
a5:f6:b1:61:5b:28:f5:da:7a:3a:a1:c1:2c:c4:0a:db:d4:85:
df:94:de:37:23:2b:00:1a:45:66:7b:38:f6:bc:a1:33:45:04:
3b:e2:e7:7c:c7:dd:66:27:07:54:28:9c:80:29:4a:22:91:94:
56:17:c5:09:12:e8:55:60:e7:66:69:dd:80:ae:ae:77:e8:27:
92:c3:a2:32:07:53:0d:fa:f0:fe:62:76:5a:ee:74:17:f9:1c:
08:ac:d3:8e:56:21:57:4a:f1:c1:df:68:78:5c:05:68:65:3b:
78:84:e4:11:df:fe:8e:80:33:ad:7b:44:6c:b9:5b:aa:87:8b:
e1:c2:7d:1b:ba:c1:16:38:13:31:b3:36:e1:62:9a:a0:56:66:
0f:2e:7f:0b:5d:2d:34:07:37:31:1d:af:ff:5a:1e:00:b4:e7:
df:ba:f8:dc:cd:24:b9:83:27:dc:fb:81:d1:3a:c9:0e:b0:85:
37:a7:99:83:b7:84:3b:b2:ea:bf:c4:08:6e:c6:57:c7:57:fe:
f7:f6:5d:05:45:65:3c:19:bc:c4:9d:72:7b:fd:f1:db:4c:a2:
37:a3:5d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 22:16:52 2024 by rpki-client on console-ams.rpki-client.org