Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/gjhsVKEIv9al7V5mbcCPNtMlQ4g.roa
File: gjhsVKEIv9al7V5mbcCPNtMlQ4g.roa (raw, json)
Hash identifier: piabN72zugUAJMZYOTEGjgO/41arSNpXegP//ICf92s=
Subject key identifier: 82:38:6C:54:A1:08:BF:D6:A5:ED:5E:66:6D:C0:8F:36:D3:25:43:88
Certificate issuer: /CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Certificate serial: 018DD4C94036910C44A270FFA9B84CE638D2
Authority key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/gjhsVKEIv9al7V5mbcCPNtMlQ4g.roa
Signing time: Fri 23 Feb 2024 07:06:15 +0000
ROA not before: Fri 23 Feb 2024 07:06:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207518
IP address blocks: 2a09:d2c1:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 10:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d4:c9:40:36:91:0c:44:a2:70:ff:a9:b8:4c:e6:38:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Validity
Not Before: Feb 23 07:06:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82386c54a108bfd6a5ed5e666dc08f36d3254388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:48:9c:ea:e8:6a:35:3d:40:18:f1:ec:8b:be:
de:8c:5c:5c:df:9b:f3:fc:ce:10:68:35:be:6e:cc:
88:e7:99:ed:b6:73:09:13:0e:a2:80:0a:95:d9:b3:
23:d5:ff:0c:48:de:3d:b4:dd:f1:ec:e7:3d:95:62:
5a:af:51:ea:5b:12:7f:48:4e:0b:8a:88:3a:77:45:
f7:69:6c:ea:ed:8e:fb:d0:f7:08:bc:33:d8:57:39:
0c:fb:f6:e6:d6:d3:53:50:2e:95:ed:fd:c6:37:a0:
a4:c1:5a:01:71:e7:38:e2:bf:20:a6:3e:b0:91:15:
fc:05:02:d5:a3:2a:7c:df:98:10:4d:03:9d:4f:7e:
63:be:36:65:4d:ac:7b:ae:41:b3:f4:47:f4:aa:86:
b9:d9:b1:ea:0d:cf:cf:e1:18:26:d2:2f:5a:c7:04:
03:93:3c:66:0a:ba:b1:97:b9:41:49:84:75:8e:6a:
31:a7:69:36:05:75:18:4d:bb:39:5c:fe:31:7d:80:
56:16:83:34:c0:7a:f8:f0:1a:39:5d:e5:df:a8:45:
31:b0:6a:74:fe:d8:08:24:77:b1:8a:0a:bf:c1:4d:
77:1e:4c:1c:b0:1e:11:c4:58:67:84:67:24:53:4d:
d4:ca:97:54:2b:d6:86:6b:23:9b:95:a0:df:28:4f:
5d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:38:6C:54:A1:08:BF:D6:A5:ED:5E:66:6D:C0:8F:36:D3:25:43:88
X509v3 Authority Key Identifier:
keyid:CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/gjhsVKEIv9al7V5mbcCPNtMlQ4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:d2c1:4::/48
Signature Algorithm: sha256WithRSAEncryption
b0:54:57:12:bd:48:0f:81:41:a6:4d:f6:dc:e8:bb:0a:89:4a:
ba:7b:07:aa:07:0c:d0:14:2d:6c:c0:be:26:2c:c8:6a:cd:be:
2b:8f:5f:58:9c:7a:fe:1c:0d:7f:34:2b:e7:a1:22:8b:6c:c1:
4a:2c:c0:89:3d:f1:97:74:40:40:a2:5d:53:4b:8f:99:54:63:
9a:d4:ab:0c:72:54:a6:15:14:63:31:53:46:56:1d:2a:e5:60:
74:93:c1:c7:d8:26:be:ee:6e:f0:07:d7:21:24:8b:7d:6e:b9:
6e:e6:58:4c:39:db:3b:ca:15:e9:93:81:8a:7a:4e:23:64:49:
35:c2:df:8e:35:c4:63:16:7a:0a:7d:fc:9d:e6:80:29:d3:69:
ce:99:69:f4:7a:85:9a:b5:f8:fe:fe:a5:08:93:c0:95:66:d8:
67:9e:89:52:9d:bb:06:e6:e9:ed:b5:23:45:ab:b6:84:72:89:
1a:fe:9d:c5:ca:39:59:13:4f:05:71:41:4d:9b:01:2d:34:17:
e8:3c:ea:a3:dd:e7:bd:fa:36:93:91:50:7b:74:46:eb:d8:b7:
45:70:6a:84:64:d1:5b:94:a0:09:e2:b9:2e:56:ad:61:8c:5f:
33:8e:b9:75:48:f7:10:47:d7:67:13:7c:fa:05:8a:68:a4:d6:
f9:0a:5e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 12:01:07 2024 by rpki-client on console-fra.rpki-client.org