Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/gEnFmIXvlrpK8E-tz87UL6XL0WQ.roa
File: gEnFmIXvlrpK8E-tz87UL6XL0WQ.roa (raw, json)
Hash identifier: DpqsFl38wbbIZn9CwolHPkiKQNdGqyXYfFjBSqBkLrM=
Subject key identifier: 80:49:C5:98:85:EF:96:BA:4A:F0:4F:AD:CF:CE:D4:2F:A5:CB:D1:64
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 018CC94D07EE4B4E54EA0C7929A49DDD475E
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/gEnFmIXvlrpK8E-tz87UL6XL0WQ.roa
Signing time: Tue 02 Jan 2024 08:31:57 +0000
ROA not before: Tue 02 Jan 2024 08:31:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201217
IP address blocks: 2a0a:280:1700::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:07:ee:4b:4e:54:ea:0c:79:29:a4:9d:dd:47:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Jan 2 08:31:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8049c59885ef96ba4af04fadcfced42fa5cbd164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ff:98:26:26:fd:e0:f2:a3:90:60:82:70:6b:
7c:74:b8:c8:f0:f3:e4:fe:f6:dd:12:b7:1c:15:d6:
f5:01:26:96:dc:da:e9:c9:b7:b0:21:1f:4e:de:c6:
e0:77:f9:17:45:c0:b9:5a:6f:ae:5a:f7:02:f4:5f:
30:79:bd:44:0c:56:36:99:12:12:88:9b:4d:fb:59:
2b:5d:74:3b:90:a8:41:d8:ad:9b:b7:90:9b:9a:27:
d1:ea:06:f0:7e:29:80:a9:9c:e4:2f:c8:10:4b:4a:
c6:bb:fc:03:66:20:cd:87:60:9a:df:56:ba:59:57:
89:69:1b:27:0e:47:9d:2e:54:96:11:b3:4c:8e:13:
a7:76:d1:6e:dc:06:b1:47:d6:d7:0b:76:74:36:2e:
22:0f:2d:bb:f5:5e:7c:21:91:c7:86:2d:61:69:41:
3a:6f:ef:a1:40:2f:cf:f1:77:79:61:18:74:b4:26:
41:aa:63:b3:a4:e7:49:40:1f:99:c1:b4:1e:2d:33:
d2:2e:71:5a:0a:a8:06:b1:04:5b:e0:38:e8:7b:e5:
fb:7d:26:83:75:16:4a:ee:d9:6e:8b:69:a6:8d:1b:
ef:57:8b:eb:7c:56:5a:8a:b1:f5:04:5b:27:f9:4e:
af:07:5f:b1:5f:0d:5b:13:00:0c:a4:84:48:2f:20:
c4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:49:C5:98:85:EF:96:BA:4A:F0:4F:AD:CF:CE:D4:2F:A5:CB:D1:64
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/gEnFmIXvlrpK8E-tz87UL6XL0WQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:280:1700::/40
Signature Algorithm: sha256WithRSAEncryption
4c:5c:4e:34:a3:ad:d0:0c:51:88:82:8d:8c:7a:72:49:51:d1:
79:ac:71:89:47:9c:85:d8:20:26:0e:84:38:9e:f8:81:30:b9:
0e:54:75:2a:76:c3:ec:ae:67:f7:62:51:33:cf:11:0e:93:f7:
8e:7c:1e:1c:1f:79:34:da:24:44:0b:fc:0c:30:ed:62:83:e2:
22:d1:7e:3c:b5:fa:fe:26:25:63:60:0d:f5:58:be:c8:b6:dc:
aa:61:9e:17:14:a7:94:56:a0:81:59:cd:ad:ec:d8:f5:e5:fb:
15:e9:36:8c:b9:d6:26:19:03:26:0d:76:76:41:cf:ce:10:7d:
f0:79:46:54:93:97:b6:64:2d:43:de:cd:ef:49:9c:ad:61:de:
6d:65:7e:0c:81:f1:74:04:be:b6:f2:ee:62:a5:fe:b6:59:38:
d1:6e:d9:18:1f:2e:ce:97:2e:cf:9a:e5:d8:3f:ae:12:53:32:
c5:44:0a:67:a7:50:2e:56:7b:58:5c:a0:fa:de:05:5a:b2:5b:
b6:59:19:7b:fb:82:55:f6:56:14:53:02:30:a7:9c:cb:b1:76:
90:18:51:9c:ad:03:44:37:4a:de:0d:ca:e4:95:c0:26:14:2a:
2e:07:a1:59:72:4a:e7:72:64:81:ec:47:43:6d:47:01:2d:b3:
da:69:2e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:52:53 2024 by rpki-client on console-ams.rpki-client.org