Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/RkO8OvHAvaLkGolXq7NnYYfV8qY.roa
File: RkO8OvHAvaLkGolXq7NnYYfV8qY.roa (raw, json)
Hash identifier: TmTJPN9MGTwh07QcNgYhqAljMj7mn5hzxPvuS2PoJZA=
Subject key identifier: 46:43:BC:3A:F1:C0:BD:A2:E4:1A:89:57:AB:B3:67:61:87:D5:F2:A6
Certificate issuer: /CN=2fcb30fd7d6e449493ec7cb0d9f78600458be21b
Certificate serial: 018F6473B91AB9F6C1A5F27161FB489DE478
Authority key identifier: 2F:CB:30:FD:7D:6E:44:94:93:EC:7C:B0:D9:F7:86:00:45:8B:E2:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8sw_X1uRJST7Hyw2feGAEWL4hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/RkO8OvHAvaLkGolXq7NnYYfV8qY.roa
Signing time: Fri 10 May 2024 21:40:56 +0000
ROA not before: Fri 10 May 2024 21:40:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214925
IP address blocks: 2a0d:b287:ec42::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/L8sw_X1uRJST7Hyw2feGAEWL4hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/L8sw_X1uRJST7Hyw2feGAEWL4hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8sw_X1uRJST7Hyw2feGAEWL4hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 02:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:64:73:b9:1a:b9:f6:c1:a5:f2:71:61:fb:48:9d:e4:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcb30fd7d6e449493ec7cb0d9f78600458be21b
Validity
Not Before: May 10 21:40:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4643bc3af1c0bda2e41a8957abb3676187d5f2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9c:f4:1e:cd:73:a5:41:f6:39:e2:28:7e:77:
ee:d8:7b:de:9a:5a:c9:b2:cb:fd:1e:16:54:0f:92:
d3:86:6f:9e:76:4e:7c:d6:a5:f7:ab:a3:e4:de:bc:
7a:1e:84:79:b4:90:d2:d9:0e:28:ed:f9:1e:d8:b8:
30:9b:6a:fb:33:77:d6:c2:4e:00:cd:50:1a:a3:9c:
1b:4b:26:eb:84:84:96:e7:74:4d:a0:9e:63:ee:69:
6a:57:2c:22:c8:54:f6:f8:dc:8a:8f:61:c1:0e:9a:
4a:8f:61:7d:9b:2d:45:54:5f:b0:31:82:c1:1c:f3:
1d:96:cb:c2:c6:6c:2f:62:40:68:0e:67:6d:62:f6:
b7:5f:cd:a9:67:70:98:e5:0e:af:12:7b:c7:97:70:
c7:9b:26:61:bf:21:2f:35:e1:66:2c:52:dc:d5:1e:
0d:64:4d:a2:2e:89:84:00:77:a1:9e:f2:0a:04:13:
15:03:82:e7:fa:9a:35:3a:a5:70:82:cc:e0:fe:fa:
26:49:4d:2b:b3:1c:f7:c8:d4:c0:40:1b:ee:dd:13:
0b:ce:6a:c7:2d:bc:71:19:0b:51:df:71:01:41:82:
50:2a:61:da:73:e8:25:0a:04:41:10:55:31:c1:ed:
f4:d3:3a:43:52:bc:f7:55:7a:56:bf:c2:b6:c0:1f:
79:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:43:BC:3A:F1:C0:BD:A2:E4:1A:89:57:AB:B3:67:61:87:D5:F2:A6
X509v3 Authority Key Identifier:
keyid:2F:CB:30:FD:7D:6E:44:94:93:EC:7C:B0:D9:F7:86:00:45:8B:E2:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8sw_X1uRJST7Hyw2feGAEWL4hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/RkO8OvHAvaLkGolXq7NnYYfV8qY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/L8sw_X1uRJST7Hyw2feGAEWL4hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:b287:ec42::/48
Signature Algorithm: sha256WithRSAEncryption
3d:59:b2:6b:69:11:87:36:8b:ec:38:50:d5:fd:ae:78:c7:b2:
e8:52:68:aa:42:d4:ba:e8:4d:fc:4d:3d:d3:28:2c:62:cf:37:
0d:fe:2a:2d:0c:46:98:d5:38:b5:0b:ad:e9:e8:42:d8:40:49:
89:a9:8d:6c:1d:23:79:00:2c:0b:2f:af:9a:07:e7:45:32:0f:
52:44:4f:6e:78:f3:6d:d7:65:ef:67:c3:42:d3:25:a7:c4:94:
ae:68:eb:f4:1c:50:b7:f0:02:41:e3:fa:ba:97:82:c8:f5:e2:
c9:94:e7:f1:30:c0:d2:66:16:95:e6:ba:71:20:56:94:2b:ce:
c3:d3:69:af:a4:1d:7d:7a:2e:7c:d3:6f:87:a3:98:78:6c:e6:
10:f0:fd:6b:a0:c3:4b:22:0e:98:b9:77:c1:aa:c4:5d:9e:ca:
9c:44:4a:d9:3c:a0:25:cc:db:df:ac:3a:60:39:19:0c:a2:75:
56:15:1e:d9:dd:7f:ce:4e:7d:d6:75:6c:5f:85:fd:56:d5:9e:
a5:d6:3e:bb:18:28:de:98:d2:1a:86:c3:27:af:5a:cd:e5:5a:
3d:1b:32:dd:06:78:aa:ad:7f:4d:b8:ba:b7:df:29:85:f4:f5:
6b:7e:6d:43:6b:7c:75:a9:c3:65:02:ae:70:0b:b7:18:b3:d2:
13:44:4a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:45:02 2024 by rpki-client on console-ams.rpki-client.org