Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/SdsP85HFS-wAW7tAgsCb1KtC-W8.roa
File: SdsP85HFS-wAW7tAgsCb1KtC-W8.roa (raw, json)
Hash identifier: Zloj2IYZMfzjYoey0/YL/NI6RgM8JbPYMbOgcZmB++Y=
Subject key identifier: 49:DB:0F:F3:91:C5:4B:EC:00:5B:BB:40:82:C0:9B:D4:AB:42:F9:6F
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018CC2DB2A50E3E590584430134FB9BC3E75
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/SdsP85HFS-wAW7tAgsCb1KtC-W8.roa
Signing time: Mon 01 Jan 2024 02:29:52 +0000
ROA not before: Mon 01 Jan 2024 02:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44853
IP address blocks: 2a0b:fdc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:2a:50:e3:e5:90:58:44:30:13:4f:b9:bc:3e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 02:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49db0ff391c54bec005bbb4082c09bd4ab42f96f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e6:1c:37:7e:a0:b0:9f:8c:05:51:49:d1:fa:
db:01:2c:e1:ee:47:6a:77:9b:d0:36:b0:ae:2d:34:
41:00:9d:98:c5:cf:68:70:46:2a:54:4b:29:ca:cc:
43:e0:c8:0b:e0:1c:64:79:a7:de:05:39:a5:2f:76:
0f:f7:15:a1:9b:55:e4:80:cb:56:8d:87:9a:8f:77:
bd:0c:d8:2c:35:03:f1:e7:14:5d:d4:6e:fd:97:da:
dc:c6:86:01:f1:ef:d9:ce:06:57:bb:0e:45:ce:db:
97:86:10:af:d1:73:1e:d3:47:45:95:f9:77:10:19:
2f:96:06:34:e9:e7:a3:3b:b8:8f:71:d6:8f:02:96:
ad:08:50:c9:dd:8c:5b:dc:fe:2d:9e:f4:2d:37:73:
3b:a8:56:52:c7:68:f4:90:0e:b4:4d:6e:a6:3e:e2:
8a:40:d2:e6:cf:24:b8:f1:48:4f:5f:06:0e:d2:1c:
77:9c:2f:f1:3e:16:ed:e1:ed:4c:83:60:6e:ce:a4:
8a:94:fd:95:e6:fe:06:fd:94:c9:17:33:b8:2d:3a:
97:be:05:86:9b:66:dd:94:b4:70:63:3c:15:f8:d7:
c5:aa:fe:bd:0a:31:7a:07:ea:56:d6:4c:3a:11:9b:
3e:72:01:c5:7c:25:9f:ca:99:95:4a:15:f5:f5:b4:
51:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DB:0F:F3:91:C5:4B:EC:00:5B:BB:40:82:C0:9B:D4:AB:42:F9:6F
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/SdsP85HFS-wAW7tAgsCb1KtC-W8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:fdc0::/29
Signature Algorithm: sha256WithRSAEncryption
85:c9:9d:9c:2b:38:e3:e1:31:ee:48:5b:c6:fb:07:8f:35:0c:
4e:67:b9:e5:75:20:2d:77:32:ca:f0:a5:5d:43:34:b8:be:9a:
a3:95:23:d2:93:6c:df:d4:a3:3a:e9:99:8a:0e:fb:3f:d5:a8:
34:af:4e:61:d1:3e:7a:82:9c:7f:dd:47:59:cf:cd:5d:36:9c:
ce:2b:a9:a1:29:32:48:6a:8f:4c:8c:da:4d:35:03:d1:68:af:
fd:33:04:80:2b:90:4d:c6:88:e3:46:dd:02:24:7c:b3:a4:07:
22:f7:4f:f1:86:43:73:a3:5f:4e:34:0e:5a:81:4b:02:c3:41:
f5:7e:bf:d2:88:48:7d:94:ba:b7:27:02:ef:30:8c:d4:26:4b:
09:48:03:83:e5:81:07:30:f1:7e:1d:d7:31:31:57:55:08:a9:
56:9f:87:4c:fc:0f:30:4d:3c:76:93:65:05:d0:5e:31:99:12:
69:62:9d:43:05:f6:36:11:02:d1:70:f3:d4:6b:fa:5a:9c:ab:
30:fb:2d:3e:e8:65:84:5b:a1:6f:0f:43:c1:ca:5d:cd:5d:95:
e1:69:2f:26:12:de:fb:4f:ca:f2:af:b8:a8:08:10:00:ff:97:
ac:a2:45:f9:ea:d4:fb:c0:f9:57:52:06:7b:17:89:e5:18:4e:
d0:75:3f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:52:36 2024 by rpki-client on console-ams.rpki-client.org