Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/amw_fGWF_WvocFgOnEATa77pzss.roa
File: amw_fGWF_WvocFgOnEATa77pzss.roa (raw, json)
Hash identifier: rb3wjuIH8HbSjlvSZIleXqQDE1zC/ejlfsfRtDilgfw=
Subject key identifier: 6A:6C:3F:7C:65:85:FD:6B:E8:70:58:0E:9C:40:13:6B:BE:E9:CE:CB
Certificate issuer: /CN=b194f0304eedd363c6622fd91c59b10871aa3044
Certificate serial: 018CCA99A6179C0620E5248756C7D9D3A45D
Authority key identifier: B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/amw_fGWF_WvocFgOnEATa77pzss.roa
Signing time: Tue 02 Jan 2024 14:35:16 +0000
ROA not before: Tue 02 Jan 2024 14:35:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57685
IP address blocks: 2a06:4a80::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:a6:17:9c:06:20:e5:24:87:56:c7:d9:d3:a4:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b194f0304eedd363c6622fd91c59b10871aa3044
Validity
Not Before: Jan 2 14:35:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a6c3f7c6585fd6be870580e9c40136bbee9cecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:87:52:5a:4e:f9:de:06:ff:fc:89:77:d5:0f:
de:31:ac:a2:17:e8:3b:02:b4:62:e0:3e:f0:dd:4b:
c1:83:1d:bd:2a:90:53:ab:28:44:0a:09:a3:f4:5a:
b8:45:45:55:50:5d:26:48:ff:2e:70:8a:1f:a6:1e:
e9:26:99:b1:a1:bc:22:7f:30:22:dd:2d:21:e4:5d:
8e:85:a6:7d:70:5c:55:01:7f:1f:fa:fa:e7:b2:09:
86:72:c2:07:c4:62:59:2d:e3:8b:62:a6:e3:b2:af:
1b:47:bb:ed:48:a9:12:ee:14:aa:0c:fb:13:60:61:
d3:fa:c5:5a:c7:2d:f9:95:54:54:f9:48:65:74:12:
fa:81:8a:5f:27:83:76:e5:5b:e0:d5:48:7a:e9:92:
d1:15:4a:89:c1:a7:21:fb:68:b2:79:db:59:64:06:
56:92:cc:2d:97:2f:38:14:54:f3:00:2e:dd:3e:89:
c8:b4:2d:b6:57:0e:0f:3d:ff:4b:ac:88:0b:41:1c:
4f:b6:89:19:a4:b0:13:12:f2:2a:2c:08:0e:46:9a:
08:02:46:52:31:15:30:ba:36:fe:7e:8d:96:e3:c7:
91:c3:89:e7:dc:ce:5b:f3:d7:3a:19:59:37:a4:97:
62:1d:25:46:5e:56:a7:c5:de:bc:e8:2a:05:85:1e:
1f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6C:3F:7C:65:85:FD:6B:E8:70:58:0E:9C:40:13:6B:BE:E9:CE:CB
X509v3 Authority Key Identifier:
keyid:B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/amw_fGWF_WvocFgOnEATa77pzss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:4a80::/32
Signature Algorithm: sha256WithRSAEncryption
8c:90:43:0f:3f:54:58:78:a5:41:60:d7:59:76:3d:df:e8:0c:
11:f5:ba:e7:c8:f6:f6:33:38:d8:9b:0e:a1:8e:0c:9f:ed:4c:
52:0b:a8:f8:92:02:98:c5:b8:54:fc:6f:9c:f8:2b:7a:28:3f:
f2:dc:e0:74:61:93:fb:17:0a:cc:b0:84:9f:f0:32:a4:f2:8f:
5f:45:34:6e:69:46:d3:f5:85:12:be:cd:22:18:f8:5e:0b:28:
3d:0f:b2:c9:15:72:27:26:20:6c:a9:09:4d:fc:e0:a8:45:04:
a1:3f:2d:ff:24:3a:79:fd:e9:c1:ec:0b:11:ea:08:78:82:41:
e9:27:84:c3:82:4b:b0:5f:ea:4b:ed:50:3d:29:b6:16:87:e3:
03:0f:f3:8f:4f:32:3c:5e:37:bb:bd:1f:e4:ed:1e:9c:08:28:
36:d1:1e:fb:52:6b:13:9c:1b:77:09:4e:00:df:aa:19:dd:26:
c4:0d:e5:ed:92:6c:4e:b8:05:e8:bc:da:32:bb:9f:39:b8:ee:
ae:09:13:13:b1:68:1f:b9:66:c7:07:f3:12:38:31:75:70:87:
f9:0f:c2:9f:1e:24:10:ac:50:95:2c:3b:00:17:62:27:2b:da:
f6:ed:f2:30:2d:8b:e5:65:24:70:af:33:81:b0:02:c7:92:4f:
b4:ca:7c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:07:31 2024 by rpki-client on console-fra.rpki-client.org