Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/SKRpw-scStWDyo6vmdXlF-go_y4.roa
File: SKRpw-scStWDyo6vmdXlF-go_y4.roa (raw, json)
Hash identifier: nhmUdM3lXCC+R2yCiFE5m3FfN2bKKuQG3KbUsc4Ut5M=
Subject key identifier: 48:A4:69:C3:EB:1C:4A:D5:83:CA:8E:AF:99:D5:E5:17:E8:28:FF:2E
Certificate issuer: /CN=603b31bc6e7f42f6303870f0234b40def71fa03d
Certificate serial: 01918E3C9E0E20F597BF69A4C26B4F86B2DF
Authority key identifier: 60:3B:31:BC:6E:7F:42:F6:30:38:70:F0:23:4B:40:DE:F7:1F:A0:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDsxvG5_QvYwOHDwI0tA3vcfoD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/SKRpw-scStWDyo6vmdXlF-go_y4.roa
Signing time: Mon 26 Aug 2024 10:30:22 +0000
ROA not before: Mon 26 Aug 2024 10:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214436
IP address blocks: 2a14:37c0:f000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YDsxvG5_QvYwOHDwI0tA3vcfoD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8e:3c:9e:0e:20:f5:97:bf:69:a4:c2:6b:4f:86:b2:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=603b31bc6e7f42f6303870f0234b40def71fa03d
Validity
Not Before: Aug 26 10:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48a469c3eb1c4ad583ca8eaf99d5e517e828ff2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:95:db:6a:9e:91:bf:63:6f:81:02:da:b0:96:
fc:a7:e0:95:9c:6d:b7:f8:91:10:90:55:ed:94:1a:
a9:43:92:0c:e4:f8:0d:4e:1c:04:03:30:36:d6:7c:
b5:e7:60:65:2e:1e:22:cb:33:74:f2:bd:69:73:27:
5f:64:1e:e3:f0:10:fd:2e:e8:a8:1c:42:78:a6:25:
e0:b3:6b:3d:2a:38:02:73:13:4c:a9:01:77:3f:31:
5d:8c:e2:76:c7:b3:4a:e6:d0:ca:e5:0e:fa:70:30:
0d:6d:fb:d8:5a:0a:f0:f0:60:24:4b:be:77:56:06:
3b:20:10:e5:af:3a:d7:e5:ff:7b:60:0c:91:17:bc:
67:ac:92:2c:59:30:9a:67:75:11:22:f8:da:b9:ab:
dd:26:0e:09:13:51:37:08:ba:b5:d6:5d:f1:0d:fd:
05:26:ee:e6:3b:e2:b8:38:37:a7:92:bf:ca:33:d1:
98:9d:28:98:e6:71:36:0d:c7:48:b1:2f:f5:eb:c7:
67:11:88:85:16:2b:6e:47:79:c9:25:39:8c:51:e6:
b8:30:6a:b7:95:d8:55:6d:95:df:94:d2:1b:59:8d:
5d:77:b4:bc:23:06:17:a8:82:9b:7f:6a:15:3a:c4:
f5:e2:9a:ab:d6:e2:17:0d:a9:3c:9d:bd:6b:70:7a:
e0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A4:69:C3:EB:1C:4A:D5:83:CA:8E:AF:99:D5:E5:17:E8:28:FF:2E
X509v3 Authority Key Identifier:
keyid:60:3B:31:BC:6E:7F:42:F6:30:38:70:F0:23:4B:40:DE:F7:1F:A0:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDsxvG5_QvYwOHDwI0tA3vcfoD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/SKRpw-scStWDyo6vmdXlF-go_y4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:37c0:f000::/48
Signature Algorithm: sha256WithRSAEncryption
35:a0:3f:e1:25:b4:1a:a8:75:84:2b:94:91:bd:79:2d:fb:a4:
60:5f:58:03:47:11:cc:4f:59:cc:8d:fe:5a:26:97:56:1e:74:
3c:86:fd:f9:23:24:a3:f4:e8:80:ca:51:0e:5c:1c:0f:1f:bb:
a8:ef:2e:db:52:0f:4e:c9:00:ab:dc:69:9d:3f:06:61:34:a0:
2f:d7:07:fa:ca:98:d7:81:c7:16:16:7d:b9:81:88:b6:d9:86:
70:2b:f1:48:bb:41:47:c7:ad:1b:5b:bb:41:9f:c8:dd:bf:0f:
eb:ae:6e:21:c9:36:a8:ee:9a:7e:ab:a2:e5:f9:7c:d0:31:a8:
05:7f:6f:4f:72:70:d8:8f:41:4f:cb:04:e7:00:39:f8:d3:6c:
1c:44:d9:d1:1a:d7:f3:96:62:e4:d9:b0:e0:4a:1c:fd:45:8a:
60:bf:2a:09:57:2f:5b:ae:a0:99:fc:8c:46:cf:dc:09:cd:2a:
64:b4:0b:2d:6a:94:33:a9:63:8f:30:32:a7:8a:ab:99:f4:04:
ac:e6:d1:92:85:13:27:90:99:50:d2:fb:91:07:5b:62:a4:b8:
b8:25:59:0c:aa:de:4e:ce:4a:fc:84:c7:98:65:72:64:3e:44:
47:6c:40:a0:e7:67:ae:7b:7c:00:55:c0:61:20:65:58:29:d8:
17:e0:b6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:37:37 2024 by rpki-client on console-ams.rpki-client.org