Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/9gC1mqDnkos2PEBwExnBRyzz964.roa
File: 9gC1mqDnkos2PEBwExnBRyzz964.roa (raw, json)
Hash identifier: rE8dFV8FcTaO1i1AGBlbTrk7GFIVnFS5/brQpOiRNh4=
Subject key identifier: F6:00:B5:9A:A0:E7:92:8B:36:3C:40:70:13:19:C1:47:2C:F3:F7:AE
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 018CC493695B0DEA2CF0FC1856C34F4730C0
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/9gC1mqDnkos2PEBwExnBRyzz964.roa
Signing time: Mon 01 Jan 2024 10:30:44 +0000
ROA not before: Mon 01 Jan 2024 10:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198596
IP address blocks: 2a10:4646:320::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:69:5b:0d:ea:2c:f0:fc:18:56:c3:4f:47:30:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Jan 1 10:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f600b59aa0e7928b363c40701319c1472cf3f7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9b:3c:91:21:2a:0f:34:98:11:52:27:fd:85:
05:bc:04:af:79:ab:a3:25:2b:99:25:2c:10:67:86:
d8:d9:37:42:2e:3b:23:89:34:82:7b:15:44:f4:29:
d0:62:55:1e:bc:78:3e:e2:7a:5e:2e:21:18:07:75:
5f:8e:ac:a0:1b:16:6d:49:9b:f0:b5:f2:19:6c:51:
64:1c:2b:7b:02:9c:9e:85:5a:e2:95:a1:5f:37:bf:
00:b2:15:45:23:85:34:1f:89:71:23:df:ad:80:77:
da:b9:47:80:32:f8:b2:f4:29:ad:17:55:25:76:9d:
09:b3:68:8a:4d:a3:70:92:df:12:f8:a7:f1:6a:2e:
aa:72:62:04:db:e0:36:4e:33:aa:3c:6b:c7:c0:70:
3d:8c:13:fa:df:f0:45:c4:20:76:b5:4e:16:c8:42:
b2:98:32:25:a1:e4:24:cf:ae:a0:9c:c8:94:d7:42:
f1:4b:75:3d:b3:4d:e0:8f:48:36:40:3d:31:22:24:
04:9a:76:de:f3:a3:f8:ef:a5:d3:30:2c:c8:f6:cd:
42:6a:13:74:9a:d3:e1:1d:c5:dd:c1:2c:07:a0:d9:
d5:58:b2:86:67:e1:25:4e:0a:4b:29:18:16:df:47:
ee:ed:d1:da:25:3b:f1:bb:99:85:4b:0b:4e:d5:6f:
43:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:00:B5:9A:A0:E7:92:8B:36:3C:40:70:13:19:C1:47:2C:F3:F7:AE
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/9gC1mqDnkos2PEBwExnBRyzz964.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:320::/44
Signature Algorithm: sha256WithRSAEncryption
64:7b:31:fa:fc:92:6b:19:17:25:42:39:07:47:0c:dc:ef:13:
70:21:c8:fa:79:75:c3:00:df:b5:23:14:00:00:b7:5c:89:c8:
96:4d:dd:fc:71:ff:d9:f5:c5:c6:68:cc:49:21:8f:e9:a8:34:
2f:bf:e1:5d:55:76:8d:b8:02:e6:dc:cc:56:de:23:37:b1:35:
34:48:48:42:ef:9a:d0:35:dd:a8:e3:56:9b:e3:aa:83:c3:8d:
d4:ff:d4:85:43:28:06:30:de:8e:30:76:08:54:d0:86:07:7b:
d8:b0:6a:2b:f2:9b:f5:1d:c3:8c:27:4f:24:e2:3b:b2:bb:f4:
1f:fd:4c:bb:1b:dc:27:9c:48:44:49:7c:13:b9:6b:96:06:12:
44:33:3d:80:00:68:d4:f7:ca:5f:22:e6:4a:36:05:f9:77:79:
16:dc:32:93:08:99:3a:46:2f:00:d4:eb:fe:b9:bb:64:73:a5:
53:fd:ac:1c:2b:19:62:bd:40:09:60:25:c6:9f:ee:5b:9a:be:
4b:f7:ad:a1:92:09:cb:f3:97:9a:85:39:bc:ab:78:63:92:7d:
34:9a:4e:59:e2:1a:58:8b:63:5f:35:75:fd:d0:34:b0:6b:e7:
6f:fd:e5:a6:2b:bb:b5:d6:8d:67:bc:13:b0:6a:b8:4b:b2:3a:
d5:ef:b9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:52 2024 by rpki-client on console-fra.rpki-client.org