Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/sdjX38msvBoDpvweSyjVAU8GF4Y.roa
File: sdjX38msvBoDpvweSyjVAU8GF4Y.roa (raw, json)
Hash identifier: U3OIuCUP/QMrapVCgXaz9C0WyubtbL2CX4jwbeD6EFA=
Subject key identifier: B1:D8:D7:DF:C9:AC:BC:1A:03:A6:FC:1E:4B:28:D5:01:4F:06:17:86
Certificate issuer: /CN=cbf74cd846493138f522c57c0065b5c60512dd09
Certificate serial: 018CC34894CE0846AEE267AD237086C46FE7
Authority key identifier: CB:F7:4C:D8:46:49:31:38:F5:22:C5:7C:00:65:B5:C6:05:12:DD:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/sdjX38msvBoDpvweSyjVAU8GF4Y.roa
Signing time: Mon 01 Jan 2024 04:29:22 +0000
ROA not before: Mon 01 Jan 2024 04:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 2a06:3b80:154::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 01:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:94:ce:08:46:ae:e2:67:ad:23:70:86:c4:6f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbf74cd846493138f522c57c0065b5c60512dd09
Validity
Not Before: Jan 1 04:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1d8d7dfc9acbc1a03a6fc1e4b28d5014f061786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:91:9f:d9:9b:e0:10:2f:89:7e:f6:2f:a9:98:
68:eb:ff:d9:2a:df:19:f4:b8:52:c9:95:25:21:df:
f9:62:97:33:7a:a6:21:a2:90:ce:b5:da:18:6d:cb:
4b:1d:44:ac:7c:ab:4d:e9:e0:12:71:99:33:15:37:
e9:6b:8a:96:6c:02:bb:32:00:62:36:f9:61:12:08:
59:1a:1f:71:5c:2f:ec:18:90:a3:7c:4d:51:6a:f5:
34:14:72:2c:eb:ed:3d:35:58:68:4c:2a:89:3f:2b:
8b:f3:5a:f5:bf:5c:1c:9f:a6:13:75:5b:9c:79:fa:
38:27:cc:6e:cd:31:41:36:b3:72:af:47:f9:1d:80:
97:96:a4:83:14:8f:d8:6d:a7:ed:66:a5:d6:92:5c:
22:b5:82:6a:d1:c8:5c:f5:92:3a:39:d0:63:d6:5b:
2f:f1:fc:5d:d6:fd:e9:20:f4:cc:00:42:72:87:c6:
9f:91:c6:45:2a:63:5b:7b:3b:f4:2e:90:bc:4f:f3:
05:c8:b8:48:a4:1f:1e:7b:4d:6c:dc:76:f0:74:d9:
cf:cd:5c:93:8c:2a:ee:e2:80:e8:7d:1a:09:2b:32:
1a:da:20:e3:b3:f6:2e:c3:5f:6a:3a:6f:98:47:84:
8a:43:5f:7a:99:94:74:e5:91:20:4c:9b:48:97:17:
33:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D8:D7:DF:C9:AC:BC:1A:03:A6:FC:1E:4B:28:D5:01:4F:06:17:86
X509v3 Authority Key Identifier:
keyid:CB:F7:4C:D8:46:49:31:38:F5:22:C5:7C:00:65:B5:C6:05:12:DD:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/sdjX38msvBoDpvweSyjVAU8GF4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:3b80:154::/48
Signature Algorithm: sha256WithRSAEncryption
3c:44:f4:ca:07:4b:a7:91:87:df:c8:b2:a1:41:4f:1b:31:c9:
7e:7a:99:20:88:15:a0:f7:6a:32:7a:ef:84:72:27:43:8f:de:
db:3f:85:da:3d:c0:dc:ed:eb:ef:00:06:9f:49:d0:6b:3d:91:
a0:45:e5:5c:e0:80:80:8e:1d:db:94:38:69:26:65:67:fe:eb:
35:f9:9a:e8:16:51:4f:df:1d:e6:bd:24:d6:3d:a5:25:f3:9a:
99:8a:fb:98:d9:f3:4f:77:1c:dd:43:25:06:e7:fd:8d:8d:47:
d7:0a:5b:e2:5f:f2:d2:b3:5a:91:12:ca:bf:65:e8:07:18:24:
f3:b0:d8:8a:db:44:ce:45:8b:ee:64:de:ff:a8:a7:d2:79:ff:
53:d8:a9:10:cc:10:10:80:d7:18:b1:91:dd:a1:6a:68:5c:d7:
07:3e:cf:43:e6:f1:3e:eb:a1:2b:fd:4f:97:a5:97:08:35:58:
b4:0f:61:b7:10:ad:28:0d:60:cc:75:b5:db:2a:73:bf:1e:50:
ea:cb:fa:25:ff:88:ad:f3:04:48:c9:08:86:9a:b9:4f:b3:81:
07:82:18:9c:c3:1a:d0:16:26:6a:f0:4f:bd:7e:bc:f8:f2:c1:
42:a0:68:56:c4:fd:f1:38:be:79:de:8c:bc:22:05:6d:c8:7f:
7b:8d:68:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 10:34:32 2024 by rpki-client on console-ams.rpki-client.org