Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/Smw3_T1wu66hyFmvZu1exlKZy4k.roa
File: Smw3_T1wu66hyFmvZu1exlKZy4k.roa (raw, json)
Hash identifier: 0Bo44yOBLolOlzBkfY6YJEEmWNHd9HyWph+0ZsFyBgw=
Subject key identifier: 4A:6C:37:FD:3D:70:BB:AE:A1:C8:59:AF:66:ED:5E:C6:52:99:CB:89
Certificate issuer: /CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Certificate serial: 0190E6D9154D28C134F8EDDB92237EED435B
Authority key identifier: 5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/Smw3_T1wu66hyFmvZu1exlKZy4k.roa
Signing time: Wed 24 Jul 2024 22:25:04 +0000
ROA not before: Wed 24 Jul 2024 22:25:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8772
IP address blocks: 2a14:1040::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 19:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e6:d9:15:4d:28:c1:34:f8:ed:db:92:23:7e:ed:43:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Validity
Not Before: Jul 24 22:25:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a6c37fd3d70bbaea1c859af66ed5ec65299cb89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:af:2a:f1:ba:d1:8c:93:b0:ac:a5:f8:69:34:
10:c1:ab:16:dc:dc:97:6d:64:14:fd:d1:71:39:b4:
78:85:1e:17:3d:09:7f:ff:cb:13:c5:71:32:9f:a9:
01:40:64:20:ec:96:a6:1c:06:90:a5:04:72:69:5d:
cc:d6:06:70:a9:f2:ed:99:a7:cb:3c:e8:83:d6:82:
2e:11:80:ae:f7:3c:b2:b1:1a:3a:f1:e8:5d:bc:76:
89:c0:0b:4b:91:28:5d:c5:8d:9d:48:e9:1c:2d:98:
98:f2:4a:e6:de:6b:88:4c:15:51:65:4b:37:7a:f0:
31:96:fe:e0:d8:c9:bb:d1:b5:8c:24:10:f5:df:ee:
b8:a8:b5:4d:42:c9:4c:70:83:dd:37:fb:c2:0b:aa:
9c:41:1c:df:8e:14:33:31:f1:ae:1d:59:eb:4a:70:
80:8b:50:f1:94:23:44:39:29:fa:b2:7a:63:93:4d:
d8:9d:22:19:62:49:c5:c5:5e:52:00:71:7f:bd:aa:
b9:3c:6f:d0:73:d6:e5:ef:c2:c5:5d:61:06:0c:04:
f4:b6:98:a9:92:c5:6f:c1:78:2f:ac:b3:18:49:93:
b1:eb:9a:b4:58:94:5b:8d:62:24:fc:8d:68:0d:31:
a8:da:95:fe:00:1d:80:a4:3a:64:c1:a3:a6:f9:f9:
4e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6C:37:FD:3D:70:BB:AE:A1:C8:59:AF:66:ED:5E:C6:52:99:CB:89
X509v3 Authority Key Identifier:
keyid:5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/Smw3_T1wu66hyFmvZu1exlKZy4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1040::/29
Signature Algorithm: sha256WithRSAEncryption
6f:45:b9:75:41:7e:bd:ee:b9:ea:79:a9:7d:eb:94:04:43:b7:
ca:90:e0:f0:a2:63:0a:6d:b7:d8:60:b2:b6:06:9b:bb:cf:ad:
05:d4:d5:63:46:f0:ef:59:e3:db:6e:ce:67:7f:75:35:e5:89:
85:ed:40:68:35:7b:ff:75:17:c4:45:d4:3e:ef:f7:92:94:e9:
8b:7a:c2:78:6b:1b:5a:cf:ab:05:d1:5f:20:bb:06:da:52:0f:
06:8f:9b:45:8e:a7:76:e2:55:fa:af:ed:15:73:31:99:03:fb:
b6:62:95:e7:8d:d0:a3:93:c5:2d:bb:eb:0b:db:0b:20:5c:a6:
8b:27:5f:09:41:3b:02:0e:08:64:a9:4f:17:1e:80:1d:ef:eb:
8f:12:67:39:85:a0:21:fa:47:5d:f0:5a:3d:de:25:1e:29:46:
44:ea:a7:b6:be:a3:be:18:d5:f4:97:51:19:3e:41:7c:2d:17:
81:f3:ab:5c:33:9b:27:68:23:49:b0:3c:51:f6:03:0a:cd:f6:
d6:b9:b3:2b:7b:8a:2b:72:1e:8c:13:5d:2d:d1:00:b5:c0:f6:
29:19:9b:08:3b:88:6f:dd:2f:e7:3f:6d:e5:2c:65:0e:cd:4a:
2d:ee:08:d3:09:66:89:a6:f0:92:22:8b:13:5e:22:81:aa:02:
67:6e:3d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:40:38 2024 by rpki-client on console-fra.rpki-client.org