Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/aKwuLAsuo4oM7ax1cJHnpC60bQs.roa
File: aKwuLAsuo4oM7ax1cJHnpC60bQs.roa (raw, json)
Hash identifier: ATQL2y4xQIY92X7l5D3fCUa2p2jvo4qght5tBMVAl2I=
Subject key identifier: 68:AC:2E:2C:0B:2E:A3:8A:0C:ED:AC:75:70:91:E7:A4:2E:B4:6D:0B
Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial: 0190D969F79CC602E36971AC76A06D018128
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/aKwuLAsuo4oM7ax1cJHnpC60bQs.roa
Signing time: Mon 22 Jul 2024 07:48:38 +0000
ROA not before: Mon 22 Jul 2024 07:48:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214784
IP address blocks: 2a04:5b81:21c0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 13:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:d9:69:f7:9c:c6:02:e3:69:71:ac:76:a0:6d:01:81:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
Validity
Not Before: Jul 22 07:48:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68ac2e2c0b2ea38a0cedac757091e7a42eb46d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e7:7c:b3:7d:ef:ec:c8:d6:bf:0d:cc:66:f9:
ce:69:4b:22:fa:2b:a0:ae:8f:79:73:4d:be:cd:7d:
55:a8:47:3f:e1:02:7b:05:f8:76:c5:ae:59:95:47:
25:9e:6e:52:7c:d6:c9:8a:ce:b9:d3:6f:04:46:0d:
cd:50:fa:a3:5a:c5:68:a5:58:cc:4d:1a:db:15:e6:
da:7a:24:1f:5f:d5:a2:b6:4f:e7:d4:7a:c8:20:46:
23:97:f8:51:c8:13:1f:ae:95:50:09:86:d7:ff:36:
7a:63:56:d9:95:1c:93:f3:a6:55:b2:5a:d6:d0:ba:
21:ec:e1:cd:75:26:3c:eb:62:f6:7d:3c:4c:94:ef:
04:73:b2:a0:7e:c9:52:9d:c8:e1:9c:d7:33:a6:9b:
99:41:84:1a:6d:e1:82:74:e5:1c:12:ce:3a:45:21:
10:ec:f4:15:13:a4:eb:c5:88:d3:b8:c5:84:ea:9c:
3d:d7:49:46:b2:f3:04:fb:d5:c1:89:a2:b4:d6:d1:
f7:78:7c:80:49:6e:bf:d5:0c:f5:ca:f6:2e:2f:e2:
1a:66:8c:1a:8d:04:e2:13:b7:a9:05:e5:79:2f:fc:
de:50:c3:fa:c8:32:cd:a9:78:d2:87:46:b3:00:4c:
42:6a:62:f3:a1:bd:be:73:f5:fa:35:d3:18:97:6f:
7b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AC:2E:2C:0B:2E:A3:8A:0C:ED:AC:75:70:91:E7:A4:2E:B4:6D:0B
X509v3 Authority Key Identifier:
keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/aKwuLAsuo4oM7ax1cJHnpC60bQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:5b81:21c0::/44
Signature Algorithm: sha256WithRSAEncryption
29:ee:3d:a8:66:f9:8e:24:52:9a:fe:19:10:e3:83:1d:9c:de:
6f:e9:26:6d:00:cd:5d:e4:3c:75:07:e3:09:6b:4b:8a:07:3b:
f9:42:7c:cd:ed:7c:74:93:60:a8:d3:0e:aa:e0:90:71:38:88:
e5:56:e2:5b:97:98:30:c8:3a:52:09:57:a3:16:76:ac:0e:b9:
bc:6a:43:4c:4b:f7:3c:87:ae:17:7a:1a:27:17:73:05:ff:29:
d8:6b:64:af:e5:1b:0b:8b:c7:f4:01:5d:56:5c:97:bc:b6:67:
9c:eb:53:0d:76:14:97:67:c6:13:bd:e2:dc:51:7c:9b:d0:da:
c7:58:15:3c:f5:e5:7e:ce:4b:e5:62:b9:f6:7f:a4:e3:e2:28:
34:5b:ac:e4:4d:62:6a:2c:dd:d4:e0:28:89:c3:71:08:88:a3:
7b:a6:1b:6c:ad:25:c0:27:0a:63:8d:30:9d:b7:72:40:30:4f:
b4:45:7d:85:11:1b:5d:0b:62:0a:54:fd:37:3e:90:8a:d6:bd:
7c:a7:93:1f:e1:54:67:55:3d:e8:ca:0d:a1:eb:06:d0:02:dc:
29:0e:8f:86:c5:bc:d6:08:c2:b5:4a:d4:46:a6:86:b1:78:b2:
35:ac:2f:19:4e:af:12:ab:b6:d5:10:c3:27:78:12:82:cf:b4:
60:83:57:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 20:09:04 2024 by rpki-client on console-ams.rpki-client.org