Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/jnkSFKcquRODrIUMtxiRiaBhfBk.roa
File: jnkSFKcquRODrIUMtxiRiaBhfBk.roa (raw, json)
Hash identifier: dpPCjSDUv3F2MRO/eB6ryXf48AupyPuoJLEnyTH9+sw=
Subject key identifier: 8E:79:12:14:A7:2A:B9:13:83:AC:85:0C:B7:18:91:89:A0:61:7C:19
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 018CC49365F461D769C8EB4C3D65A843A187
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/jnkSFKcquRODrIUMtxiRiaBhfBk.roa
Signing time: Mon 01 Jan 2024 10:30:43 +0000
ROA not before: Mon 01 Jan 2024 10:30:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42101
IP address blocks: 2a10:4646:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:65:f4:61:d7:69:c8:eb:4c:3d:65:a8:43:a1:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Jan 1 10:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e791214a72ab91383ac850cb7189189a0617c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c3:41:16:d4:7c:af:96:b7:1b:d6:05:ed:4c:
ad:3c:2d:ce:be:08:79:9a:87:58:a8:cb:6d:e3:6d:
73:cc:9c:a5:5b:ea:f0:e5:f6:5e:34:c4:ca:3a:a8:
db:e8:a9:27:b9:17:36:28:d9:fb:8f:c5:98:af:94:
f7:51:1a:1a:9b:40:5c:93:b9:87:29:81:77:45:25:
04:1c:0c:56:73:ca:39:26:50:3e:10:8c:d7:af:27:
67:e4:19:fd:54:30:f0:fa:a7:e4:64:11:20:08:b7:
24:4d:fa:a2:02:c6:22:e2:7c:c2:b8:c1:d2:56:2c:
99:ab:ed:bb:0e:fc:f8:c3:f1:0b:b4:ac:99:f8:9b:
ad:1a:6b:be:f1:35:9c:8e:45:c6:ad:81:04:e9:5b:
19:bd:ea:bf:12:9e:1d:5c:e7:a0:00:3b:39:b0:e8:
b2:31:9c:ae:3d:45:f6:27:bf:a0:1f:c1:15:29:70:
7b:c3:b8:f2:d6:63:0d:b0:42:d9:c6:06:f6:00:1d:
ab:d7:30:ba:ae:6b:30:47:a2:1f:43:a5:78:de:f9:
99:20:f8:fa:4a:a9:51:07:d1:14:b6:f2:d8:b6:da:
32:0e:10:7c:ef:d2:c2:34:c9:5a:3e:59:a0:35:5f:
3e:aa:63:ce:8f:37:7b:8f:b2:e9:62:81:04:bf:ec:
f8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:79:12:14:A7:2A:B9:13:83:AC:85:0C:B7:18:91:89:A0:61:7C:19
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/jnkSFKcquRODrIUMtxiRiaBhfBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:3::/48
Signature Algorithm: sha256WithRSAEncryption
56:25:23:a8:6f:93:69:64:23:71:1d:ba:8a:c5:33:49:90:c6:
23:60:38:19:a0:58:21:d7:6d:c0:ba:78:24:45:d8:5d:b5:b4:
8d:48:73:f3:29:69:af:70:30:e8:00:4d:73:63:03:b4:4c:bb:
0d:d2:e3:a0:7a:3f:1e:ef:a3:0b:2e:0e:cc:e5:fd:3d:46:3c:
3b:00:83:6d:df:c5:f2:20:a6:f2:55:08:c8:2f:f3:e6:d6:cb:
d2:2b:ed:84:13:00:57:70:97:7d:e4:f7:90:d0:a2:1b:4f:17:
8b:1c:28:3a:43:61:9f:4d:50:56:60:14:54:3c:a6:9e:80:18:
10:7d:ec:97:2e:4a:62:b9:d9:e2:5d:27:4d:2a:80:97:b9:a9:
5e:b3:b8:3d:14:ac:06:b8:6f:e9:99:53:d1:34:8a:99:f2:26:
c1:40:03:be:03:5b:47:f3:4b:bf:ff:a0:e2:56:52:34:61:e7:
7f:67:df:c6:bb:9b:7d:ed:64:44:36:81:23:5c:35:5c:74:af:
2a:3a:10:d5:14:b0:67:04:bd:56:3a:a9:15:67:00:06:74:93:
09:4e:1b:33:1e:e2:10:70:f3:83:a5:87:46:31:d7:9b:a7:6f:
9c:1f:42:7d:67:a5:2b:77:a9:78:c8:74:69:de:f7:d4:ad:d9:
b7:27:10:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:52 2024 by rpki-client on console-fra.rpki-client.org