Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/3RioF6FvtIvjmmGqGyx_LTKBWc8.roa
File: 3RioF6FvtIvjmmGqGyx_LTKBWc8.roa (raw, json)
Hash identifier: zjr+FwB/BiCcExLJGRpraBqKlBRhpb74bEjKooqYMLs=
Subject key identifier: DD:18:A8:17:A1:6F:B4:8B:E3:9A:61:AA:1B:2C:7F:2D:32:81:59:CF
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 018D08FB909813B77109A91503B8D54BAD29
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/3RioF6FvtIvjmmGqGyx_LTKBWc8.roa
Signing time: Sun 14 Jan 2024 17:18:40 +0000
ROA not before: Sun 14 Jan 2024 17:18:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57080
IP address blocks: 2a10:4646:1c0::/48 maxlen: 48
2a10:4646:1c2::/48 maxlen: 48
2a10:4646:1c1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:08:fb:90:98:13:b7:71:09:a9:15:03:b8:d5:4b:ad:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Jan 14 17:18:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd18a817a16fb48be39a61aa1b2c7f2d328159cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:70:ff:9f:6d:59:9f:17:56:92:dd:17:78:0a:
21:15:91:40:49:3a:54:1f:fe:a1:29:b9:91:54:e3:
f2:8a:7c:62:5b:7f:7e:8c:00:7c:e2:ce:76:d6:a5:
e6:69:2c:06:0b:cb:2b:5b:c0:ae:6b:b5:ad:35:8e:
56:e1:fe:f8:63:3e:e1:2e:cc:36:a6:a8:70:53:cd:
43:f7:91:80:a9:09:40:bc:f0:ab:99:54:99:af:8d:
33:c1:0b:9c:ed:90:7f:a7:18:81:2e:07:7c:d1:0e:
35:69:e5:70:4b:1e:a2:27:e3:3d:f6:cc:65:d4:12:
71:9a:f2:44:83:d3:da:15:84:07:50:c6:1b:4c:cb:
4d:ce:8e:77:76:24:ee:1b:9b:89:22:12:42:43:3f:
72:93:61:21:46:4a:26:93:13:84:a0:8b:79:44:20:
dd:b1:ef:ac:15:dd:25:ae:d7:ba:8e:4e:94:1d:8d:
3c:4e:01:99:82:07:98:58:be:0a:20:55:ad:8c:67:
bf:00:5c:b2:6a:df:4a:2d:b4:a3:68:d7:0f:4b:c3:
87:b4:26:f0:25:34:87:a1:9c:94:52:d7:b0:f3:3c:
72:fd:84:e6:52:0d:78:01:9e:16:bb:13:03:cc:ca:
83:86:af:8e:90:67:4f:a4:a8:d5:be:47:6e:f9:41:
84:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:18:A8:17:A1:6F:B4:8B:E3:9A:61:AA:1B:2C:7F:2D:32:81:59:CF
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/3RioF6FvtIvjmmGqGyx_LTKBWc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:1c0::-2a10:4646:1c2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2d:47:1a:77:7b:7f:96:7a:0b:33:6d:ea:52:2c:84:8f:09:5a:
76:8b:5f:99:23:ff:ef:60:eb:1c:58:ea:c2:4e:be:41:5c:a9:
00:50:0c:90:01:23:f9:1b:86:06:00:11:f0:fb:19:eb:b6:52:
44:34:bb:c1:0e:2d:32:e8:a3:00:00:4b:c3:ca:17:18:74:44:
bc:08:21:e2:55:0b:ad:4b:da:21:33:5a:fb:b8:c4:db:76:e0:
57:3e:88:d9:da:c5:04:9d:35:a6:fb:4b:9d:21:87:6f:94:f7:
8a:bf:53:68:bd:e1:12:14:1d:24:cd:37:4b:a8:ef:58:a0:76:
17:48:52:72:c3:2b:aa:15:11:b5:9e:d7:fd:89:fe:59:26:70:
b4:b4:f2:5c:f7:55:1f:e0:d1:40:c0:f8:77:1c:ec:2f:92:30:
0c:ca:dd:9f:8f:7c:23:7d:10:70:de:29:d4:4f:4a:3a:fb:5a:
79:b5:2f:a7:f5:f6:8b:3a:f6:e3:67:81:2b:49:e4:4c:aa:27:
dd:59:c6:26:69:b2:a0:e0:27:8b:85:4a:b1:55:88:51:13:43:
8b:d1:20:2f:9e:fd:1c:11:ab:1f:7e:79:ea:5a:52:bc:d4:1f:
5a:ba:bf:6d:0c:9f:7e:b2:f9:81:75:48:57:be:8f:c3:24:b9:
a4:86:65:a3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 8 06:11:49 2024 by rpki-client on console-ams.rpki-client.org