Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/9N8KCcxSjjbZE9S6dRUqc9EqQ7Y.roa
File: 9N8KCcxSjjbZE9S6dRUqc9EqQ7Y.roa (raw, json)
Hash identifier: ff2gjL1x9cgJBt4ua9epPy/9Ha46TuliSNm8uvrvYDM=
Subject key identifier: F4:DF:0A:09:CC:52:8E:36:D9:13:D4:BA:75:15:2A:73:D1:2A:43:B6
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 018CC94D0F89984F5BF83D96C20A15EE1D44
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/9N8KCcxSjjbZE9S6dRUqc9EqQ7Y.roa
Signing time: Tue 02 Jan 2024 08:31:59 +0000
ROA not before: Tue 02 Jan 2024 08:31:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216412
IP address blocks: 2a0a:280:b000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:0f:89:98:4f:5b:f8:3d:96:c2:0a:15:ee:1d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Jan 2 08:31:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4df0a09cc528e36d913d4ba75152a73d12a43b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:08:a4:d1:f8:24:77:fe:15:b9:b5:9f:44:57:
d6:cf:3b:b6:7d:24:f1:c0:dd:37:43:3b:51:5d:f0:
80:e8:59:31:76:4f:73:e6:02:13:31:59:e1:ea:95:
bb:78:9a:05:5a:96:a3:62:e2:71:b9:7d:d0:11:77:
c8:12:b3:19:39:5a:db:c4:f4:37:cc:8f:6c:f4:72:
77:ae:60:4e:1b:29:65:83:cd:16:f6:b8:6f:fd:3b:
42:6f:99:22:0d:e8:d8:17:e1:94:6f:8e:a3:50:a5:
2e:09:31:a3:01:04:e3:e5:77:0a:5a:53:c5:f9:5c:
d3:e8:a2:c0:d8:95:bb:44:5f:a3:aa:b6:ca:f3:97:
1e:32:6c:ce:ad:50:ee:be:0b:7d:40:aa:3f:10:cd:
c5:c4:59:0a:cc:a1:2b:f2:99:13:bd:15:84:58:a1:
01:69:b7:50:41:81:33:8b:5f:28:4a:e2:b0:0a:2f:
c7:d0:8c:73:5d:35:58:75:9a:49:cd:6c:fb:80:2c:
9b:5a:cb:fd:52:4a:0a:2d:62:47:24:ea:ea:01:aa:
94:2f:63:35:48:4d:f6:f0:fe:4c:06:2a:4b:72:5d:
bc:0b:04:f1:3a:ee:42:92:a3:a1:4b:6c:a0:71:ac:
71:d4:97:e9:9a:fd:d3:d3:9b:ba:6d:aa:d1:65:fe:
02:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DF:0A:09:CC:52:8E:36:D9:13:D4:BA:75:15:2A:73:D1:2A:43:B6
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/9N8KCcxSjjbZE9S6dRUqc9EqQ7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:280:b000::/36
Signature Algorithm: sha256WithRSAEncryption
77:4d:b1:cb:ca:05:09:cf:3c:3e:dd:8f:6e:81:93:0d:31:d2:
2b:fc:26:de:94:4e:b8:d2:4d:4d:8e:4b:52:01:ad:7a:64:37:
9c:c8:95:cd:c2:13:7a:03:7f:dc:89:53:fa:31:7c:f9:2b:23:
30:44:d7:1b:35:00:35:48:dd:76:5f:52:ae:1a:9c:e0:eb:e0:
5a:ee:3f:de:f4:1f:55:d2:4b:c5:8d:18:ca:fd:fc:25:7a:0d:
6b:de:83:d6:c1:be:9e:6f:b9:36:f1:88:2b:64:a1:21:95:d3:
e1:b3:05:10:1f:12:fc:26:86:87:94:fd:2f:1d:bc:6c:eb:66:
d0:2b:51:fa:68:c5:a5:01:f5:bc:00:fb:c1:7c:37:07:4f:24:
1b:76:aa:32:c9:bb:b3:9f:2e:ea:26:27:9a:3e:c1:1a:9a:ef:
62:7f:e5:e7:0d:53:29:c7:60:ee:28:f6:76:18:d1:69:d4:24:
f1:d0:1e:44:b9:36:0b:8b:59:f0:9b:24:91:b4:15:5d:b4:20:
09:28:6f:50:c5:1f:b6:b3:21:1a:e0:3a:70:6c:8b:94:14:26:
5a:82:d5:ed:69:8f:a3:b8:dd:22:ec:7f:e6:ef:8b:6a:87:d1:
f5:1d:13:f1:fd:b5:19:3c:bd:0a:3d:6c:46:3c:b1:5f:b9:4b:
a3:7c:8b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 02:42:30 2024 by rpki-client on console-ams.rpki-client.org