Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/4DK0SoNfBFd5FPZrhQcCILMMhts.roa
File: 4DK0SoNfBFd5FPZrhQcCILMMhts.roa (raw, json)
Hash identifier: t2n5thnVEjtYHIEgHCwILvb6XvBNrvcQPMSHkTUHrpU=
Subject key identifier: E0:32:B4:4A:83:5F:04:57:79:14:F6:6B:85:07:02:20:B3:0C:86:DB
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 018CC94D08CBC83ED32B2881C99F4670F946
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/4DK0SoNfBFd5FPZrhQcCILMMhts.roa
Signing time: Tue 02 Jan 2024 08:31:57 +0000
ROA not before: Tue 02 Jan 2024 08:31:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202952
IP address blocks: 2a0a:280:1400::/40 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:08:cb:c8:3e:d3:2b:28:81:c9:9f:46:70:f9:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Jan 2 08:31:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e032b44a835f04577914f66b85070220b30c86db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b9:7c:c3:7c:8f:88:d9:2c:ac:77:3a:ac:bc:
a5:e0:2d:31:9e:53:83:1f:c3:58:22:d9:c5:20:a0:
92:8d:16:71:fd:e7:fd:98:08:9c:8d:a9:14:7c:a2:
d7:ca:3a:54:52:f7:e2:cb:84:fc:8e:0b:ec:1a:e1:
66:ab:51:53:4a:64:24:ed:c6:d0:8d:69:dc:32:1e:
26:24:9f:6f:1a:7f:ca:9f:15:00:41:1b:88:b1:ad:
d9:57:e4:b8:b4:a3:25:30:a2:8f:01:3c:b7:d7:a7:
44:4b:ba:10:f4:49:25:e1:d1:e6:a0:12:f8:0b:50:
bc:d8:9b:17:13:c3:39:d3:de:df:cb:f2:fa:bd:5d:
d9:c8:be:26:07:7e:28:c9:c8:06:c7:c9:4c:86:87:
74:15:7e:41:ea:58:38:dd:c6:4a:75:07:97:76:8a:
e1:cd:6e:8c:18:82:40:3b:42:1c:ba:bf:25:6f:bd:
9d:60:70:54:cb:60:77:b4:12:98:1a:6f:b3:30:31:
d7:da:66:2e:f1:79:35:03:69:67:35:eb:fe:e2:ae:
56:d9:51:e6:f2:d4:cf:05:04:66:20:da:bb:44:9e:
68:f2:9a:b2:65:e6:d0:5b:ef:95:fe:8e:a7:f5:c0:
75:bd:0a:47:86:5f:eb:a9:75:0c:ae:be:6a:da:05:
a4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:32:B4:4A:83:5F:04:57:79:14:F6:6B:85:07:02:20:B3:0C:86:DB
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/4DK0SoNfBFd5FPZrhQcCILMMhts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:280:1400::/40
Signature Algorithm: sha256WithRSAEncryption
58:0f:10:e8:86:6b:ce:ee:04:45:47:ed:65:02:be:7d:35:0e:
3c:78:f6:19:d6:b8:84:5e:a5:d6:5b:18:db:95:c0:bf:9f:46:
d5:2d:83:97:6f:ac:51:3f:3d:e2:05:ed:49:cd:f5:c0:d4:4a:
91:61:23:18:dd:8c:53:24:ec:8e:df:3d:6f:c1:6a:b5:a2:11:
26:de:0a:b1:c2:be:0d:00:2b:92:cc:20:88:40:d1:49:af:fe:
e7:3a:1e:e9:ce:6c:1c:ad:97:3f:94:3f:e2:3b:08:36:57:30:
f6:4e:ec:91:3b:6b:58:0f:9f:11:6f:af:ea:3f:c7:51:ff:c0:
08:b2:eb:f8:e0:b5:5f:34:2e:41:cf:7c:4a:9f:bb:1c:69:99:
e7:14:dc:06:4a:28:ac:1c:82:3f:89:7a:63:79:76:7c:18:5e:
f0:07:d4:c4:27:3f:d9:38:b5:1b:2a:91:66:c4:40:f4:dc:b2:
be:c2:2c:25:ea:8f:77:e5:01:c3:e8:a8:b6:fe:84:a1:ed:02:
03:13:ac:dc:74:c7:2b:bb:10:35:94:76:20:71:4c:78:5a:0e:
d0:ad:c8:3f:cc:f2:40:57:68:f6:e9:11:ee:df:fd:4a:a0:63:
5e:73:74:dd:5b:62:ac:5b:75:9a:b9:d3:71:05:83:2b:67:a2:
13:24:78:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 11:29:43 2024 by rpki-client on console-fra.rpki-client.org