Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/uaFcuRoO45lNd9P8JPnUVNIW4G8.roa
File: uaFcuRoO45lNd9P8JPnUVNIW4G8.roa (raw, json)
Hash identifier: TnJ7BSk8F8FtPi8ngs69dOQJuQa89aV0V4YHFJi+DcU=
Subject key identifier: B9:A1:5C:B9:1A:0E:E3:99:4D:77:D3:FC:24:F9:D4:54:D2:16:E0:6F
Certificate issuer: /CN=edb926f8c603aab79cb46a883bf632564a3faabf
Certificate serial: 018CC2DACAB6F5F72655DD68CCDC064CDDD6
Authority key identifier: ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/uaFcuRoO45lNd9P8JPnUVNIW4G8.roa
Signing time: Mon 01 Jan 2024 02:29:27 +0000
ROA not before: Mon 01 Jan 2024 02:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25369
IP address blocks: 2a03:b000:a00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:ca:b6:f5:f7:26:55:dd:68:cc:dc:06:4c:dd:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb926f8c603aab79cb46a883bf632564a3faabf
Validity
Not Before: Jan 1 02:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9a15cb91a0ee3994d77d3fc24f9d454d216e06f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cd:c6:ef:b8:61:e6:7e:71:9e:0e:15:a2:ae:
b1:4e:a5:6f:6d:f9:b3:5f:31:e6:3a:6c:b3:1a:6b:
ff:b3:fe:55:f0:9a:da:f2:d7:8d:0e:e3:f7:46:9a:
c5:8d:79:74:44:d3:84:ae:bb:cc:ef:a2:93:3f:4b:
a8:85:fb:35:6d:3a:91:c9:a2:6a:cd:68:62:a1:dd:
61:8a:48:37:10:4e:11:e1:38:a2:39:73:98:49:77:
ae:2d:86:6d:ee:67:61:af:37:8d:a5:60:45:31:7c:
8b:b6:dd:ce:af:9e:cd:e1:f0:36:cd:63:68:8b:30:
d8:eb:b1:95:4a:44:d0:e7:6b:ed:65:92:13:62:a6:
27:6f:d5:fd:e4:34:9a:91:92:87:50:e0:bf:10:b4:
37:f5:a5:a6:01:b9:0c:75:21:35:ea:8b:20:2f:d5:
02:41:48:ed:2a:14:b6:f8:ea:9e:b5:c5:5b:5d:b0:
f6:24:5a:e8:01:b7:7b:f4:04:92:c4:3b:d4:92:eb:
7b:17:ad:96:dd:6e:f4:ff:90:ef:ce:c1:ca:0d:ab:
a3:c0:69:53:40:d8:4f:53:30:ef:47:33:7d:6a:3d:
04:3f:a7:fe:2f:f8:10:13:0f:14:bc:53:29:04:20:
ba:ba:1f:7b:3f:12:ce:b6:5c:1b:5e:71:3a:cc:b2:
cb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A1:5C:B9:1A:0E:E3:99:4D:77:D3:FC:24:F9:D4:54:D2:16:E0:6F
X509v3 Authority Key Identifier:
keyid:ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/uaFcuRoO45lNd9P8JPnUVNIW4G8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:b000:a00::/40
Signature Algorithm: sha256WithRSAEncryption
64:9a:58:8c:f2:e7:c2:cd:65:4f:62:c1:46:dc:d3:9d:22:ef:
15:5b:1b:ba:08:28:f4:c1:7b:73:48:ba:56:70:3d:84:3f:1e:
c9:5c:94:44:8c:75:ba:9c:73:3e:4c:ed:02:da:9d:56:c4:a2:
16:1b:ff:ca:c6:86:8f:b9:63:72:0b:cf:cb:d8:02:ba:61:26:
0e:54:ba:25:7e:54:8b:e7:3b:6a:22:df:1a:43:f2:bd:c3:97:
68:74:15:8c:eb:01:2d:a7:a9:7f:d9:d6:ad:b3:f7:f1:d6:8e:
c5:2e:8a:68:8e:46:10:58:ef:c3:4c:b3:95:94:6d:32:7f:74:
79:a6:4f:5d:c7:a4:c8:e5:8c:af:36:cb:48:ee:73:1a:66:26:
a0:df:16:52:c5:3b:ed:40:f2:f5:a3:ed:1a:b4:b8:91:cf:68:
20:fd:35:79:dc:9e:0a:12:53:2b:da:f8:a2:ce:b8:29:31:6d:
4e:ce:b8:b0:f7:1b:86:9b:94:3a:a2:13:38:99:f8:2c:1b:80:
64:8e:29:19:18:24:a6:8e:cd:0c:78:a4:d0:42:09:98:5d:29:
93:0d:3c:29:9e:a2:7e:96:24:88:a9:83:7e:d0:ab:e1:60:f1:
44:f9:44:2e:d4:a9:02:17:ed:f9:d5:23:21:94:e5:b3:c9:86:
77:86:1b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:40:36 2024 by rpki-client on console-fra.rpki-client.org