Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/lG_vY6429kVtdoawj5lMu86fuX0.roa
File: lG_vY6429kVtdoawj5lMu86fuX0.roa (raw, json)
Hash identifier: aitn4KT3JEOK9tHl9KsY1+APpzqpM/CMSu+Kf4dyDJU=
Subject key identifier: 94:6F:EF:63:AE:36:F6:45:6D:76:86:B0:8F:99:4C:BB:CE:9F:B9:7D
Certificate issuer: /CN=c0d0495acf9c78b9183bba0c05b8a29974382b14
Certificate serial: 018CC2DB3BDE1159665F2A0DBA6A40C63CC6
Authority key identifier: C0:D0:49:5A:CF:9C:78:B9:18:3B:BA:0C:05:B8:A2:99:74:38:2B:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/lG_vY6429kVtdoawj5lMu86fuX0.roa
Signing time: Mon 01 Jan 2024 02:29:56 +0000
ROA not before: Mon 01 Jan 2024 02:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20860
IP address blocks: 2a04:de40::/42 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:3b:de:11:59:66:5f:2a:0d:ba:6a:40:c6:3c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0d0495acf9c78b9183bba0c05b8a29974382b14
Validity
Not Before: Jan 1 02:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=946fef63ae36f6456d7686b08f994cbbce9fb97d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9e:38:d5:c5:af:46:a0:c3:05:df:59:3e:71:
f0:21:2e:a2:98:a7:71:2a:2c:70:0b:99:ce:d2:d4:
52:71:99:6f:f4:b4:44:d1:47:ae:8c:cb:40:ca:90:
8d:45:4d:27:95:34:22:ad:d0:ab:37:89:b4:a9:6a:
35:7d:b0:33:02:61:5e:e9:99:db:6d:db:1d:ba:2a:
5e:59:d2:c3:4a:07:20:39:52:af:38:e3:f5:05:32:
08:b5:65:3a:62:c7:94:1f:6a:35:25:b4:30:87:72:
5c:d9:36:01:0d:6b:13:01:8d:7e:e4:34:ec:68:ff:
45:4e:87:b8:8e:c2:e1:dd:3a:4e:a7:a2:9a:db:05:
38:1b:32:3e:e1:af:ca:93:62:94:60:bf:47:c5:44:
30:1d:af:3f:85:2d:65:07:fd:bd:d7:f2:d6:e1:ff:
9a:7a:dd:ad:b6:aa:4c:53:0e:98:17:4d:a9:e3:1e:
b4:64:3a:89:51:50:3d:67:fe:c3:bb:ab:a7:6a:c4:
b8:2f:1f:44:b4:50:7f:60:97:9a:21:2c:6e:de:b6:
db:65:85:e6:36:2f:81:73:78:65:30:be:4c:90:09:
60:06:65:da:f1:bb:66:43:6c:54:d9:74:44:08:65:
95:a0:9d:24:d4:15:f7:6b:58:43:a5:cf:62:7e:62:
d3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6F:EF:63:AE:36:F6:45:6D:76:86:B0:8F:99:4C:BB:CE:9F:B9:7D
X509v3 Authority Key Identifier:
keyid:C0:D0:49:5A:CF:9C:78:B9:18:3B:BA:0C:05:B8:A2:99:74:38:2B:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/lG_vY6429kVtdoawj5lMu86fuX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:de40::/42
Signature Algorithm: sha256WithRSAEncryption
5b:af:0c:61:cf:ba:ba:2f:21:2c:fc:da:56:3f:75:0b:88:56:
4a:45:af:3e:d1:53:18:1d:e1:22:d9:46:44:6e:0e:4b:ce:53:
74:f8:6e:bd:d9:af:cc:e7:5d:73:00:15:42:27:ab:1b:e8:e6:
0b:a0:80:93:09:fd:a2:26:a4:8d:8d:e8:8f:11:de:23:14:58:
e3:98:14:82:f7:ab:61:a8:e6:95:74:59:1d:9c:80:03:5c:5b:
b9:f7:20:53:14:ff:f7:df:61:1c:12:49:3a:0b:58:21:41:e3:
d1:8c:44:c9:50:a2:1d:1a:60:6e:83:61:83:fe:59:5a:85:e5:
89:44:9b:ad:36:3f:84:93:8a:f9:6c:f7:0d:16:72:8d:5c:15:
4b:5d:e6:02:36:b5:10:2b:ae:a8:e4:01:12:d6:ca:8b:47:c8:
7e:07:8f:81:67:94:59:0d:73:00:82:e2:fe:25:8e:d2:13:ef:
1c:0d:a5:d0:30:96:86:b6:3d:f4:3e:4d:fa:37:d2:a5:fd:15:
e9:05:4d:6b:1f:e5:7e:5b:ad:f4:b0:a4:16:b4:03:0e:7e:98:
9f:f9:66:3f:64:fb:ce:07:9f:04:21:d8:ca:50:10:fa:f7:d7:
92:d1:3b:a7:98:56:7d:86:f9:f4:f6:f9:9e:4b:17:c0:99:0a:
30:1d:40:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:29:43 2024 by rpki-client on console-fra.rpki-client.org