Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/w09migIyqOCf0iTQAzd2MGTqRpE.roa
File: w09migIyqOCf0iTQAzd2MGTqRpE.roa (raw, json)
Hash identifier: LAIePTexVq6zov2S2qxswbcdyGpSisGWl8ODCeW+0cM=
Subject key identifier: C3:4F:66:8A:02:32:A8:E0:9F:D2:24:D0:03:37:76:30:64:EA:46:91
Certificate issuer: /CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Certificate serial: 018CC50133CE76BF1AAD622D87DD097200E3
Authority key identifier: FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/w09migIyqOCf0iTQAzd2MGTqRpE.roa
Signing time: Mon 01 Jan 2024 12:30:39 +0000
ROA not before: Mon 01 Jan 2024 12:30:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1239
IP address blocks: 2a14:b80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 08:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:33:ce:76:bf:1a:ad:62:2d:87:dd:09:72:00:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Validity
Not Before: Jan 1 12:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c34f668a0232a8e09fd224d00337763064ea4691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:67:bf:be:2f:dd:c4:5d:58:6c:07:0a:9c:9e:
f4:e7:36:4f:b4:3e:1e:11:a2:66:61:46:16:8a:17:
b5:c4:0d:72:b1:c1:2d:b3:8f:33:20:25:c9:93:0f:
c2:45:08:1e:ae:b0:09:02:6a:6a:ab:e1:99:f4:32:
f2:54:6e:a6:88:e7:95:a0:1d:8a:32:df:35:22:0f:
cb:83:1b:68:b1:13:0b:3d:2f:3a:14:87:cd:a0:1c:
7e:22:d6:9b:d6:ad:15:f1:74:dc:9f:08:eb:b6:7f:
37:b5:df:8e:ec:e2:0b:29:16:1c:d7:32:07:12:67:
b3:bc:e9:0c:43:c6:17:aa:0b:eb:48:61:7a:ab:0d:
7e:23:e9:33:05:8c:33:70:b6:c8:cb:4f:98:49:33:
b1:6f:ba:bb:dc:3e:eb:ca:03:a7:85:28:29:2b:74:
86:5d:a6:91:5f:0b:aa:68:8f:14:8a:22:47:23:53:
08:22:45:61:b7:c3:2a:51:b8:5f:cf:f0:d0:9a:a8:
55:5e:cd:6d:51:4d:d4:0c:ea:1b:e7:35:1e:f2:1b:
8c:0d:5d:14:88:35:fb:86:72:ce:e3:d7:58:57:7b:
bc:25:de:cb:a9:bf:eb:80:13:92:20:a6:ad:50:dc:
b6:a6:cc:80:bf:a3:ad:34:be:46:8e:59:fa:49:98:
c8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:4F:66:8A:02:32:A8:E0:9F:D2:24:D0:03:37:76:30:64:EA:46:91
X509v3 Authority Key Identifier:
keyid:FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/w09migIyqOCf0iTQAzd2MGTqRpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:b80::/32
Signature Algorithm: sha256WithRSAEncryption
54:13:50:cc:9f:9f:e4:4b:c6:78:77:35:8e:d6:e1:d5:f5:d1:
b0:4d:2e:0d:50:de:21:b8:1e:72:67:d7:74:92:6b:a2:8d:46:
3d:66:cf:4d:a2:4a:11:80:03:5e:5c:18:94:35:04:38:c0:c5:
df:c3:b4:4d:51:bc:9e:b9:a3:ac:5e:06:d8:c5:3d:4d:c3:8d:
f9:2a:2a:78:79:8a:ee:93:9f:6b:06:dc:d4:22:39:68:7d:d0:
12:9c:6d:06:ce:c6:27:34:1a:1f:69:48:a0:ad:fb:c3:96:5c:
2d:f1:bd:17:3e:02:d3:6c:ac:15:96:ae:f4:76:ac:d5:7d:b2:
65:66:49:e0:2e:3f:04:18:4c:42:77:86:89:d9:19:24:bf:45:
00:fe:f5:a3:ea:ac:28:92:b4:db:5c:65:1b:51:17:fd:7a:f6:
bb:2a:fb:f4:be:48:1b:fb:dc:36:82:db:bd:fa:94:6a:8c:b3:
37:d4:45:3f:73:32:b8:16:16:d7:a2:a5:ef:7b:38:ed:f3:3d:
5a:2b:af:4b:95:51:b7:a2:7b:64:bc:2f:bc:86:e9:1c:c6:89:
0a:1f:aa:b9:61:ac:06:c7:ae:05:b2:47:fa:63:81:94:99:fa:
15:0d:41:cd:be:56:bc:50:ca:3a:90:9e:4d:40:15:d4:d8:d1:
44:18:88:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 13:20:53 2024 by rpki-client on console-fra.rpki-client.org