Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/PwlmJUFqueOwEioQdT4pzc4oVZQ.roa
File: PwlmJUFqueOwEioQdT4pzc4oVZQ.roa (raw, json)
Hash identifier: N2AO6zfCGZzYLMDnuJkqpNktpXH2yKyYjD7Wksnl44U=
Subject key identifier: 3F:09:66:25:41:6A:B9:E3:B0:12:2A:10:75:3E:29:CD:CE:28:55:94
Certificate issuer: /CN=17526ccac4f9064e058549b30172c84439787fbc
Certificate serial: 018CC424EA9D25CF85AC032B84A24B9BEB7F
Authority key identifier: 17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/PwlmJUFqueOwEioQdT4pzc4oVZQ.roa
Signing time: Mon 01 Jan 2024 08:30:02 +0000
ROA not before: Mon 01 Jan 2024 08:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206074
IP address blocks: 2a0c:b6c2::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 22:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:ea:9d:25:cf:85:ac:03:2b:84:a2:4b:9b:eb:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17526ccac4f9064e058549b30172c84439787fbc
Validity
Not Before: Jan 1 08:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f096625416ab9e3b0122a10753e29cdce285594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d2:a5:cb:63:d0:ce:f1:bc:f8:8a:dd:e6:ab:
8a:e6:fe:7c:8b:fd:dd:30:8f:b7:1e:90:75:a9:ae:
1a:39:2b:49:65:c0:18:4f:cc:e1:17:cc:03:1a:d3:
0d:cf:53:96:49:51:a8:56:3a:e7:5d:a4:00:a8:44:
cb:e4:3e:b2:e3:a6:04:e3:39:08:f3:7e:4c:3c:e1:
a2:76:f6:b2:bb:02:4e:0c:ad:b4:28:dc:ac:39:dc:
71:eb:63:79:df:c2:df:e4:5c:07:25:c2:85:76:47:
54:83:de:ea:cc:80:5d:42:d0:20:8a:cf:dc:99:c1:
99:f2:be:82:06:ac:62:bc:57:6f:d7:11:38:70:06:
9a:8c:1d:f8:20:6c:99:91:93:0e:5b:78:e4:82:b4:
06:87:bf:91:5a:76:cd:b8:23:da:73:79:f2:17:41:
10:31:6a:de:9e:3d:51:ea:f7:07:3c:7e:3e:ae:a6:
48:b7:38:73:79:e7:f8:db:2f:9d:4e:d1:7c:a7:ba:
de:b2:d8:e1:f1:1c:ea:5f:cf:ee:d6:7a:f3:59:20:
f7:74:06:a1:c4:9f:67:e2:df:33:56:e3:24:00:11:
76:55:de:ea:01:0a:92:d2:fd:77:38:3f:32:a5:e8:
4a:15:e9:e7:15:df:3a:2e:fe:ad:e3:b3:e8:27:52:
fd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:09:66:25:41:6A:B9:E3:B0:12:2A:10:75:3E:29:CD:CE:28:55:94
X509v3 Authority Key Identifier:
keyid:17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/PwlmJUFqueOwEioQdT4pzc4oVZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b6c2::/32
Signature Algorithm: sha256WithRSAEncryption
44:11:44:18:e1:15:d1:fa:98:32:f3:26:5d:47:15:08:13:93:
1f:2e:50:35:50:74:04:f7:4f:9d:1d:fd:67:7d:8f:ce:92:20:
d5:ac:a4:14:d4:3c:2c:f7:ac:fd:0b:d5:82:da:8e:0f:64:3a:
66:a3:e2:66:c2:06:9c:79:a0:0a:be:c6:be:fa:5f:58:71:fc:
90:b8:73:89:fd:ad:49:33:6d:18:8c:88:6d:97:49:81:94:da:
39:eb:11:bb:25:0c:fe:d8:22:80:0a:7f:92:93:c4:34:94:5c:
6e:30:6e:72:4f:c1:69:1f:cb:bd:40:1e:a9:62:a2:ee:5a:f1:
aa:e3:91:0b:5d:a0:c8:f3:7f:09:07:d5:7f:8e:99:2c:59:b7:
a4:48:19:97:74:16:75:1f:18:a3:43:0f:b5:54:88:49:97:42:
21:9d:0f:ea:32:05:8b:64:9d:77:cd:37:ac:71:f0:f6:56:a8:
8d:36:53:c9:71:89:78:9c:bb:42:f5:48:88:0f:e7:89:23:1b:
13:10:12:74:9a:e0:b4:61:38:37:ae:34:0c:c4:1b:7d:50:21:
a4:76:1f:61:21:c7:4e:6e:7e:59:f2:76:af:4f:d9:d9:09:72:
3b:b1:39:b6:18:15:dd:ea:f6:80:80:7b:1a:4b:b2:33:74:9c:
76:ef:bc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:42:01 2024 by rpki-client on console-fra.rpki-client.org