Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/9QgsHS1CfWY2DjJu0C1oJREowME.roa
File: 9QgsHS1CfWY2DjJu0C1oJREowME.roa (raw, json)
Hash identifier: Cf3awILXaSNqkdfati8ka7OEDEhv+DN3EiS8flpyKNE=
Subject key identifier: F5:08:2C:1D:2D:42:7D:66:36:0E:32:6E:D0:2D:68:25:11:28:C0:C1
Certificate issuer: /CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Certificate serial: 018D021CD654E1C921DE0E50C7FB7FE10488
Authority key identifier: FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/9QgsHS1CfWY2DjJu0C1oJREowME.roa
Signing time: Sat 13 Jan 2024 09:17:40 +0000
ROA not before: Sat 13 Jan 2024 09:17:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202269
IP address blocks: 2a0e:b080::/30 maxlen: 30
2a0e:b084::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:02:1c:d6:54:e1:c9:21:de:0e:50:c7:fb:7f:e1:04:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Validity
Not Before: Jan 13 09:17:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5082c1d2d427d66360e326ed02d68251128c0c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:18:bb:41:29:94:8e:8c:cf:e6:43:df:65:f8:
e2:ef:db:81:37:dc:ef:4c:b8:45:73:bf:87:02:7b:
41:83:fd:06:5d:77:42:dc:46:3c:cb:e8:65:68:2a:
08:7c:f3:a6:57:bd:72:58:2c:cf:38:25:e4:b0:2c:
ac:77:c1:d4:ce:db:a2:dd:4d:0f:df:18:2f:24:e5:
34:5c:a8:4b:85:67:aa:54:ad:67:ce:5d:87:bc:85:
b2:25:98:ed:8b:a3:8f:9f:4e:d2:6c:a2:b2:21:e6:
02:09:af:31:a5:30:73:a1:ae:18:6c:6d:b4:b9:a0:
d5:cf:47:d0:71:53:eb:29:6d:54:f7:a3:c4:32:6e:
91:2a:55:da:0e:6c:fd:d4:e5:03:f2:e8:14:9d:55:
4d:e0:1f:34:cf:c1:2d:58:52:b8:20:57:79:cf:b2:
c4:c9:cd:85:85:eb:b1:44:dd:86:9b:59:0f:c2:63:
e2:51:65:0e:66:3a:d4:5b:dc:53:79:db:ea:8c:f5:
9f:fa:93:87:04:f7:84:cc:ad:1a:f9:2c:c9:f0:b1:
da:ae:52:33:2e:ec:2b:01:2a:06:63:30:06:b9:99:
1e:c2:d6:3f:59:7d:c3:a9:d4:1c:69:01:57:3e:c5:
c0:d5:1b:67:69:88:51:5a:d7:33:fa:e1:22:b1:ed:
3a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:08:2C:1D:2D:42:7D:66:36:0E:32:6E:D0:2D:68:25:11:28:C0:C1
X509v3 Authority Key Identifier:
keyid:FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/9QgsHS1CfWY2DjJu0C1oJREowME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b080::/29
Signature Algorithm: sha256WithRSAEncryption
57:30:7b:b2:9a:e1:bb:27:c7:07:7e:d8:03:31:52:59:73:a1:
ed:63:e6:38:19:f9:de:f7:6c:40:58:bc:03:cc:25:05:cc:cd:
c4:0b:84:4f:29:02:f2:2a:50:b2:b7:d1:2d:21:35:89:42:2f:
c9:ac:eb:47:92:5a:58:97:66:e9:f3:19:50:b1:ff:3e:45:bc:
43:94:f9:d5:20:83:bb:68:bc:ef:18:39:4b:5a:46:42:98:13:
7b:65:8c:6d:f9:b2:bf:7b:ba:dc:8f:87:f9:1f:d4:07:53:19:
1b:63:84:f8:a1:95:d8:f2:53:61:05:00:75:fc:fa:60:c6:3c:
30:4d:a4:cb:c2:c6:c4:b2:c8:55:8e:37:57:12:5a:a2:4b:a2:
61:ac:f1:95:21:34:71:17:d7:d6:5f:60:8e:95:78:f3:6d:90:
08:3f:9b:eb:6d:1a:41:dd:77:9a:aa:a7:59:22:35:ad:04:02:
49:30:8a:be:4f:88:da:16:9b:f8:d7:f0:9b:a5:61:5f:d6:d7:
ba:38:ba:42:20:21:a6:53:49:db:15:b9:e2:25:51:b9:a4:de:
d0:58:51:84:46:eb:1c:e8:cd:f5:dd:41:30:04:db:cf:44:b6:
39:c4:33:26:22:2e:c1:97:c1:32:fe:c8:89:3f:8d:f7:f0:8e:
64:2a:33:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 19:31:13 2024 by rpki-client on console-ams.rpki-client.org