Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9f9bf3-cf1d-4b33-8123-36a762fb5ec1/1/G3vd5KFOr_eao-NKVqt-pq0x2rY.roa
File: G3vd5KFOr_eao-NKVqt-pq0x2rY.roa (raw, json)
Hash identifier: +SbdiMqa9219Fqbhi62SlvBaMdQcxHRFUZbNThjquFs=
Subject key identifier: 1B:7B:DD:E4:A1:4E:AF:F7:9A:A3:E3:4A:56:AB:7E:A6:AD:31:DA:B6
Certificate issuer: /CN=cf5e22e798ae3169daab1ceba670bda1fff7b517
Certificate serial: 018CC6B7A1B2BC4D44A905E0289951A3BDF4
Authority key identifier: CF:5E:22:E7:98:AE:31:69:DA:AB:1C:EB:A6:70:BD:A1:FF:F7:B5:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z14i55iuMWnaqxzrpnC9of_3tRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9f9bf3-cf1d-4b33-8123-36a762fb5ec1/1/G3vd5KFOr_eao-NKVqt-pq0x2rY.roa
Signing time: Mon 01 Jan 2024 20:29:32 +0000
ROA not before: Mon 01 Jan 2024 20:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15701
IP address blocks: 2a13:28c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9f9bf3-cf1d-4b33-8123-36a762fb5ec1/1/z14i55iuMWnaqxzrpnC9of_3tRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9f9bf3-cf1d-4b33-8123-36a762fb5ec1/1/z14i55iuMWnaqxzrpnC9of_3tRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/z14i55iuMWnaqxzrpnC9of_3tRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:a1:b2:bc:4d:44:a9:05:e0:28:99:51:a3:bd:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5e22e798ae3169daab1ceba670bda1fff7b517
Validity
Not Before: Jan 1 20:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b7bdde4a14eaff79aa3e34a56ab7ea6ad31dab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:19:49:eb:ee:e3:5a:85:6a:d1:f6:38:c0:63:
42:76:38:a3:1d:7d:cb:41:89:f5:22:64:d4:c4:86:
38:96:89:65:ea:91:5a:3d:9f:7a:41:0b:7c:51:c1:
26:96:e9:00:ee:5c:11:c2:1f:af:1a:a9:f4:6c:74:
93:38:bd:b1:f0:68:fa:6b:cc:71:69:2b:3e:f2:fe:
f0:ba:e0:4f:d7:4e:74:7c:65:1c:b5:ed:90:37:72:
99:b2:11:ad:a8:65:c7:0a:31:74:94:c2:ea:af:36:
93:5e:c7:23:5b:a4:87:30:ee:63:8c:37:48:04:3b:
82:23:07:c7:61:b0:91:1a:79:2b:a4:3a:d2:26:d1:
6b:79:e6:b5:da:fb:c6:c0:73:b0:79:fd:1c:3d:2d:
57:fd:22:7d:10:0a:11:a2:f9:ab:12:c1:d8:67:a8:
46:ab:29:d5:37:4b:25:78:79:30:7c:b3:f6:93:ab:
0d:f4:55:b4:fa:0a:02:53:20:ba:66:66:0a:fb:fd:
7b:68:c0:7d:0c:ac:10:a8:78:17:25:62:d3:70:c6:
c6:09:73:7e:a3:c4:80:9e:4c:bd:7f:4b:ab:7a:ad:
eb:cd:ce:f8:71:c9:8c:e0:26:77:e3:6e:d9:f5:33:
51:4c:52:8f:fd:4a:48:e5:ea:07:0c:9a:a0:f9:19:
32:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7B:DD:E4:A1:4E:AF:F7:9A:A3:E3:4A:56:AB:7E:A6:AD:31:DA:B6
X509v3 Authority Key Identifier:
keyid:CF:5E:22:E7:98:AE:31:69:DA:AB:1C:EB:A6:70:BD:A1:FF:F7:B5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z14i55iuMWnaqxzrpnC9of_3tRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9f9bf3-cf1d-4b33-8123-36a762fb5ec1/1/G3vd5KFOr_eao-NKVqt-pq0x2rY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9f9bf3-cf1d-4b33-8123-36a762fb5ec1/1/z14i55iuMWnaqxzrpnC9of_3tRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:28c0::/32
Signature Algorithm: sha256WithRSAEncryption
12:a9:b3:26:b0:3b:f7:7e:c2:52:d0:57:cb:8b:4b:71:60:b6:
b4:6c:bd:35:f0:9a:24:00:15:d3:a7:fc:70:48:10:5f:f7:98:
32:b7:02:dc:10:81:0d:b3:7d:91:65:2d:a3:9a:99:f8:45:28:
d2:78:8c:c7:36:a8:52:fd:e1:ed:e1:fa:2c:c5:56:a4:55:ea:
10:ab:a7:41:a9:b3:2a:0f:07:99:93:52:e0:f6:77:39:0f:62:
81:f9:51:70:2a:5a:93:8c:8f:60:28:16:af:f9:47:28:7b:cd:
4b:f1:2e:06:52:6a:04:d9:e9:2e:65:3e:58:4a:83:0a:da:66:
51:7b:f5:2a:64:25:44:37:f5:63:a8:34:3c:db:cc:09:23:4c:
e7:48:1b:a0:46:5c:6c:e7:66:10:0b:11:87:c2:4e:68:e2:d4:
6a:0f:25:86:ef:0f:45:0b:d4:9b:1f:1c:cc:eb:91:5f:41:86:
8b:08:b8:ca:6e:8c:06:7d:f7:3a:b2:d1:08:67:e1:05:3f:8b:
f8:32:18:dd:ac:1c:ee:a8:d5:df:e9:ae:e9:d0:24:7d:3a:b6:
42:df:2b:7e:ea:c3:1d:35:82:7a:2d:ed:14:c8:28:14:41:34:
c0:bc:76:81:ef:4b:31:95:14:f0:21:27:fa:39:53:86:71:75:
c4:a3:d4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:18:11 2024 by rpki-client on console-ams.rpki-client.org