Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/9c83a5-3a9a-4715-9b16-4046324970af/1/x4AGbOsuSsJOPv6SVmo5yfJnkD0.roa
File: x4AGbOsuSsJOPv6SVmo5yfJnkD0.roa (raw, json)
Hash identifier: u2LdNXLpGDZyC7JhH6H1icYUs4b5nxWM5Ydv2EKdipU=
Subject key identifier: C7:80:06:6C:EB:2E:4A:C2:4E:3E:FE:92:56:6A:39:C9:F2:67:90:3D
Certificate issuer: /CN=ab9dc85f94ca647de0db64d74d3139947cc449ba
Certificate serial: 018CC5DC2D846B50955671CDC62ADC6F68FE
Authority key identifier: AB:9D:C8:5F:94:CA:64:7D:E0:DB:64:D7:4D:31:39:94:7C:C4:49:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q53IX5TKZH3g22TXTTE5lHzESbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/9c83a5-3a9a-4715-9b16-4046324970af/1/x4AGbOsuSsJOPv6SVmo5yfJnkD0.roa
Signing time: Mon 01 Jan 2024 16:29:50 +0000
ROA not before: Mon 01 Jan 2024 16:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20705
IP address blocks: 2a0c:6c40:c840::/47 maxlen: 48
2a0c:6c40:c82e::/47 maxlen: 48
2a0c:6c40:a4ee::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/9c83a5-3a9a-4715-9b16-4046324970af/1/q53IX5TKZH3g22TXTTE5lHzESbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/9c83a5-3a9a-4715-9b16-4046324970af/1/q53IX5TKZH3g22TXTTE5lHzESbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/q53IX5TKZH3g22TXTTE5lHzESbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:2d:84:6b:50:95:56:71:cd:c6:2a:dc:6f:68:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9dc85f94ca647de0db64d74d3139947cc449ba
Validity
Not Before: Jan 1 16:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c780066ceb2e4ac24e3efe92566a39c9f267903d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ee:8b:09:c9:91:30:fb:89:08:12:51:b7:11:
2c:10:00:81:22:63:8e:69:33:60:27:dc:28:87:93:
9c:bc:64:5e:fa:00:17:e8:dc:ef:1c:6c:a9:71:f6:
d7:c0:8d:b9:09:b1:af:e3:84:ee:d7:07:be:52:f6:
2a:88:0e:c8:fe:55:81:07:a4:98:84:30:30:17:d1:
4a:1b:06:8b:84:f2:c6:7f:ac:dd:cc:d6:07:85:ce:
b7:50:b7:b7:2b:97:52:8c:80:be:a0:76:47:4c:b1:
cf:3c:4f:b6:b5:9b:44:34:59:1d:1b:c0:73:e0:03:
07:6f:43:24:5c:77:fd:5c:c8:32:20:50:cb:75:93:
af:f8:92:15:d2:e4:0d:e8:a0:ac:55:90:42:40:4a:
00:60:24:75:44:21:ad:ed:81:6c:fd:97:6b:0f:5d:
ea:6f:09:56:6a:80:30:e8:7d:2c:f5:5b:38:c9:e7:
77:e7:37:ee:87:ab:76:0d:ad:ee:45:45:7c:80:b5:
2e:21:39:d1:10:d9:70:2e:48:8d:15:bb:3e:58:14:
f9:fb:5d:09:b6:1b:2b:ae:31:eb:58:1c:61:55:94:
db:bd:75:7e:05:96:f3:93:96:3e:62:05:42:b8:54:
16:c8:f4:91:4d:68:91:ef:32:5f:8e:a0:22:90:c6:
b8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:80:06:6C:EB:2E:4A:C2:4E:3E:FE:92:56:6A:39:C9:F2:67:90:3D
X509v3 Authority Key Identifier:
keyid:AB:9D:C8:5F:94:CA:64:7D:E0:DB:64:D7:4D:31:39:94:7C:C4:49:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q53IX5TKZH3g22TXTTE5lHzESbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/9c83a5-3a9a-4715-9b16-4046324970af/1/x4AGbOsuSsJOPv6SVmo5yfJnkD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/9c83a5-3a9a-4715-9b16-4046324970af/1/q53IX5TKZH3g22TXTTE5lHzESbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:6c40:a4ee::/47
2a0c:6c40:c82e::/47
2a0c:6c40:c840::/47
Signature Algorithm: sha256WithRSAEncryption
6d:03:62:19:31:ab:f7:b9:1b:01:ad:69:13:c7:2b:30:89:b0:
40:3e:a3:62:8c:50:e7:5a:ad:d9:fe:4f:c4:3b:82:b7:31:d0:
a9:bf:5c:91:62:a7:4c:9e:84:09:85:29:80:27:b5:ec:b1:a5:
0f:75:a0:ba:0b:da:58:36:af:1e:6b:16:84:62:43:f8:f5:ec:
84:0f:85:25:f5:e0:03:80:c7:d8:04:62:3e:15:ba:e4:7f:b9:
3a:24:64:2c:9b:17:cc:38:4a:9a:59:05:b6:de:a2:1f:7a:e8:
a2:cd:28:78:6b:af:1b:3f:3c:c9:36:4e:e5:0d:77:ff:31:70:
a0:8a:84:e4:8b:39:83:ce:93:48:9e:d7:86:40:63:9b:1b:54:
b0:70:88:71:82:51:62:fd:fe:65:bd:5c:1a:a8:87:62:11:4e:
54:e7:d9:c1:20:14:80:1d:d5:70:ec:94:04:0d:8b:6d:3b:4e:
3d:c3:b6:ae:70:b8:a5:36:1b:f3:11:ea:4e:cc:38:36:1b:09:
39:a3:9a:a8:5d:c7:a1:73:72:60:00:ba:fd:27:3f:b2:42:c2:
7a:f6:4e:b3:59:27:86:23:b0:4c:0d:57:da:9a:31:f3:f4:e5:
a1:a7:4e:d1:b2:8b:51:28:7b:27:6f:85:cb:9b:39:ee:26:4b:
fa:73:00:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:52:07 2024 by rpki-client on console-fra.rpki-client.org