Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/1-o3I26TEhcMUvILTnS79ixboj9s.roa
File: 1-o3I26TEhcMUvILTnS79ixboj9s.roa (raw, json)
Hash identifier: az2Pmr07nib38z3G09LP9TZvw7PcopXvIXpGpJdo838=
Subject key identifier: FA:8D:C8:DB:A4:C4:85:C3:14:BC:82:D3:9D:2E:FD:8B:16:E8:8F:DB
Certificate issuer: /CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e
Certificate serial: 0190922D8473883AD5AB7F9DE16AD7231391
Authority key identifier: 98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/1-o3I26TEhcMUvILTnS79ixboj9s.roa
Signing time: Mon 08 Jul 2024 11:49:34 +0000
ROA not before: Mon 08 Jul 2024 11:49:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200508
IP address blocks: 2a0a:cd80:1001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft
rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:92:2d:84:73:88:3a:d5:ab:7f:9d:e1:6a:d7:23:13:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e
Validity
Not Before: Jul 8 11:49:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa8dc8dba4c485c314bc82d39d2efd8b16e88fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e7:d6:5a:0a:f0:69:61:d1:e4:a7:66:60:8a:
6a:9f:ec:43:83:d6:40:ad:ff:07:68:0b:ec:49:4d:
67:be:99:7e:a7:95:5c:05:44:bd:4c:ac:16:ae:94:
6f:ad:be:b0:f6:72:0b:bb:83:30:69:55:55:42:72:
a6:f0:f1:6c:f0:ba:2e:25:d0:16:b7:f2:6f:c4:84:
b6:8b:80:b8:91:a0:c7:1c:6b:cf:e4:ea:d3:6a:c5:
32:6f:e3:3d:63:10:ee:3c:f5:17:de:3e:0f:80:88:
f9:60:23:2d:c5:15:53:02:c6:1a:55:03:5e:8f:60:
68:9f:47:45:a3:e8:bd:26:2e:be:a8:ca:82:23:26:
dc:eb:68:61:e9:09:25:a3:b3:27:04:88:09:ec:f4:
02:3b:8c:b4:72:b3:c7:d5:4a:a3:33:6f:78:71:96:
37:bc:96:a5:61:ea:47:81:ac:94:d8:7c:05:a5:6f:
19:f6:c5:bc:af:ac:cc:df:c2:99:2c:6e:b5:80:30:
d1:d1:e0:de:87:50:51:fb:80:ea:e8:68:6f:30:c2:
81:1b:e6:88:70:5a:90:ec:f3:dd:c8:1f:4e:32:fc:
43:cd:df:a2:33:64:ed:61:cc:3e:ef:38:c0:70:fa:
2c:08:3a:b7:88:60:a6:46:6d:43:ff:3c:33:25:3d:
d3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8D:C8:DB:A4:C4:85:C3:14:BC:82:D3:9D:2E:FD:8B:16:E8:8F:DB
X509v3 Authority Key Identifier:
keyid:98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/1-o3I26TEhcMUvILTnS79ixboj9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:cd80:1001::/48
Signature Algorithm: sha256WithRSAEncryption
03:01:e1:76:34:e0:f8:19:61:9f:27:5c:6f:70:01:7a:9c:74:
2d:4c:ae:06:26:ce:7d:6a:88:aa:f8:ce:37:11:a6:a6:36:24:
4e:e6:40:78:49:e4:29:2d:9b:ac:7c:b3:26:7b:12:2f:a2:ba:
ae:4f:ba:0b:58:44:b0:6f:9d:f3:2f:93:61:de:ee:cf:1b:00:
d5:33:ec:6e:19:9c:ad:60:6d:11:66:48:02:96:e4:f8:68:15:
ff:44:18:5c:57:71:2d:8a:87:1e:23:99:7a:70:33:bf:78:f9:
5f:5e:ff:7a:a9:c3:76:e3:72:18:37:33:81:77:13:71:b8:2b:
aa:40:20:f8:78:88:a8:d9:40:cf:33:ef:ac:63:ab:4f:b1:3d:
31:97:4d:89:a6:6a:b5:04:c5:4e:c0:5e:b1:ff:4e:d0:21:96:
92:d1:10:8b:29:cc:82:3a:69:1c:f0:99:5d:43:59:36:3a:f5:
8a:da:2c:7a:09:e1:38:3b:99:a6:5e:1f:34:7c:1d:95:ea:26:
a1:cf:8b:5f:48:29:b3:2d:ae:90:c7:91:f8:51:1c:9d:cb:73:
d2:32:a4:be:3a:06:9d:41:ab:fa:a4:da:eb:e9:82:34:bb:e3:
60:55:ba:02:3c:dc:fa:94:eb:e4:95:4e:6a:5c:55:76:0d:57:
fd:1c:44:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:22:28 2024 by rpki-client on console-ams.rpki-client.org