Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/K92fr4gLVGxWcDzSsjttkOy897k.roa
File: K92fr4gLVGxWcDzSsjttkOy897k.roa (raw, json)
Hash identifier: kfAgu2y4Gdsxa9kgSX67tHq+3bNRudNMQuLhTQZ2dhI=
Subject key identifier: 2B:DD:9F:AF:88:0B:54:6C:56:70:3C:D2:B2:3B:6D:90:EC:BC:F7:B9
Certificate issuer: /CN=6b41a95b9b941d342d07b8a17d7d835de12c8bf6
Certificate serial: 018CC64B5BB1CD06C72BFF0D74D48FCB473C
Authority key identifier: 6B:41:A9:5B:9B:94:1D:34:2D:07:B8:A1:7D:7D:83:5D:E1:2C:8B:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/K92fr4gLVGxWcDzSsjttkOy897k.roa
Signing time: Mon 01 Jan 2024 18:31:16 +0000
ROA not before: Mon 01 Jan 2024 18:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48296
IP address blocks: 2a13:a8c0:1::/48 maxlen: 48
2a13:a8c0:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 16:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:5b:b1:cd:06:c7:2b:ff:0d:74:d4:8f:cb:47:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b41a95b9b941d342d07b8a17d7d835de12c8bf6
Validity
Not Before: Jan 1 18:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2bdd9faf880b546c56703cd2b23b6d90ecbcf7b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8c:de:80:43:d1:b7:6e:4d:c6:7e:f1:f7:df:
43:cf:b4:f2:b2:e4:46:a0:45:8c:f7:35:2f:99:7a:
b4:a1:0a:9c:97:63:f8:e2:87:50:4b:53:bc:87:fa:
88:11:45:de:ef:ca:62:e6:d5:fb:14:0e:a9:6f:d5:
7f:d0:d3:15:f5:c0:b5:15:3d:d1:ca:70:e5:c3:d3:
27:aa:6d:80:14:6d:4c:0f:5a:ce:c5:28:29:93:90:
f6:12:37:3c:ae:04:bd:27:b1:a2:31:8b:cd:82:24:
4f:26:a4:58:9a:76:5a:70:71:01:13:fe:c4:95:44:
9d:8f:64:49:ff:77:64:f1:9d:1b:60:9b:7e:bf:4b:
d3:80:86:96:42:c1:76:bf:26:0b:7d:56:fd:10:9a:
68:b6:a3:76:09:f5:f7:29:37:d5:05:d0:ee:29:0f:
49:35:70:59:62:ee:6a:6a:49:df:2f:42:0c:a1:67:
a7:b8:5b:e6:11:3d:28:a6:c0:de:59:69:33:2c:e8:
16:44:4d:5c:12:d4:65:ae:f3:b9:72:7a:82:13:f2:
34:30:c9:80:f8:d9:13:4f:47:66:aa:20:2b:87:b1:
4e:22:69:3d:86:25:a2:0d:83:0f:30:75:ba:6f:cc:
5e:96:83:4a:be:cb:40:83:ca:c1:b4:12:f5:30:b8:
13:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DD:9F:AF:88:0B:54:6C:56:70:3C:D2:B2:3B:6D:90:EC:BC:F7:B9
X509v3 Authority Key Identifier:
keyid:6B:41:A9:5B:9B:94:1D:34:2D:07:B8:A1:7D:7D:83:5D:E1:2C:8B:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/K92fr4gLVGxWcDzSsjttkOy897k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a8c0:1::-2a13:a8c0:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4b:6d:e1:8c:b5:1e:29:8d:0b:62:24:a5:35:cd:b7:4c:33:d8:
63:8e:0e:07:e0:c3:37:29:a1:0a:7b:db:e5:af:63:a7:eb:14:
01:6b:00:b9:d3:fb:46:0c:82:71:3a:7a:ef:47:db:ad:55:62:
3d:d7:7b:11:1d:91:20:5b:0a:ec:78:0f:09:39:3c:7a:cd:57:
06:52:8e:cd:69:f0:d4:2b:51:a1:ba:2c:6d:d8:ff:cc:0f:bd:
ff:97:ea:20:b4:07:f3:ec:60:4a:6a:6a:a3:e6:3e:c2:77:93:
39:c1:50:e9:57:9e:35:71:1d:05:46:62:11:7d:fb:c7:fe:f3:
cc:2e:e7:fa:5d:02:7d:95:19:c1:1b:1c:c4:47:b9:59:00:95:
b0:1c:dd:54:c7:4a:92:5b:30:bc:32:1e:c6:0f:f4:77:9a:ad:
f7:d0:7e:f7:4c:a1:9c:f0:63:a8:a5:b5:1f:c6:08:78:fe:30:
be:db:96:bc:63:10:19:5f:d7:89:38:32:40:bc:18:cd:45:f9:
39:3a:cd:73:96:44:56:56:12:89:8c:25:67:8f:6e:7f:80:5f:
0c:2a:cf:1c:c4:1e:04:4b:98:2d:98:ce:87:37:ec:d4:45:46:
e9:65:39:d1:4e:a6:8f:37:81:29:30:1e:30:56:c3:a8:80:1f:
b0:dd:24:bf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 16 21:48:51 2024 by rpki-client on console-fra.rpki-client.org