Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/21f1ef-d6f5-4ad4-ad11-af4c1de0249d/1/lG4X-uNoxVz-mGsDkGvBgFkR4sc.roa
File: lG4X-uNoxVz-mGsDkGvBgFkR4sc.roa (raw, json)
Hash identifier: uF7l3ofHJKn8kOEPXddR69TKPpUzRAWGV1Qpfwe/RHA=
Subject key identifier: 94:6E:17:FA:E3:68:C5:5C:FE:98:6B:03:90:6B:C1:80:59:11:E2:C7
Certificate issuer: /CN=77c3131201b08679481a03a494a1367cae81ea03
Certificate serial: 018CC725E31324C9012EA93268D0884043AA
Authority key identifier: 77:C3:13:12:01:B0:86:79:48:1A:03:A4:94:A1:36:7C:AE:81:EA:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8MTEgGwhnlIGgOklKE2fK6B6gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/21f1ef-d6f5-4ad4-ad11-af4c1de0249d/1/lG4X-uNoxVz-mGsDkGvBgFkR4sc.roa
Signing time: Mon 01 Jan 2024 22:29:58 +0000
ROA not before: Mon 01 Jan 2024 22:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44406
IP address blocks: 2a03:7540::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/21f1ef-d6f5-4ad4-ad11-af4c1de0249d/1/d8MTEgGwhnlIGgOklKE2fK6B6gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/21f1ef-d6f5-4ad4-ad11-af4c1de0249d/1/d8MTEgGwhnlIGgOklKE2fK6B6gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8MTEgGwhnlIGgOklKE2fK6B6gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:e3:13:24:c9:01:2e:a9:32:68:d0:88:40:43:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c3131201b08679481a03a494a1367cae81ea03
Validity
Not Before: Jan 1 22:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=946e17fae368c55cfe986b03906bc1805911e2c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4d:9d:b2:40:31:77:1e:a2:39:b1:f6:21:2d:
d1:98:37:92:2b:88:90:9b:91:c6:62:22:f5:77:18:
5f:dc:83:46:d5:b5:47:61:64:8f:11:47:95:d8:53:
c0:5a:ef:42:ae:17:b5:aa:17:82:32:59:db:27:53:
19:2d:36:8b:7a:fc:66:13:66:78:ec:3e:13:8d:41:
af:ce:92:e0:4e:fd:25:b5:21:99:f7:c1:49:67:18:
55:bd:f4:3a:d3:fe:31:c1:d3:24:df:ea:c4:5c:bb:
b7:ec:c2:4e:c4:ce:4b:2f:51:74:f9:38:ae:25:94:
b0:7c:a3:a1:23:02:5c:c3:7b:05:05:ef:39:98:5b:
fd:91:dd:70:6e:ce:f1:b2:c1:2e:40:cc:76:ec:09:
cc:ac:15:d0:14:7f:d9:f0:18:4a:25:1b:61:0f:5e:
44:33:90:12:b5:39:20:2b:e0:7a:45:6a:92:1c:ae:
f2:ef:2d:07:fd:39:66:f6:1d:6e:51:31:72:72:69:
e3:92:1c:1a:f8:aa:d9:03:88:1b:ef:ee:6f:9b:98:
1c:ff:7a:9f:66:78:ef:2a:eb:c7:d3:3b:54:42:dd:
c4:47:80:85:fc:53:68:ee:fa:bc:b5:97:dd:4b:7c:
e2:ea:a8:7c:af:ef:08:4a:66:cd:84:bb:ef:a8:65:
32:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6E:17:FA:E3:68:C5:5C:FE:98:6B:03:90:6B:C1:80:59:11:E2:C7
X509v3 Authority Key Identifier:
keyid:77:C3:13:12:01:B0:86:79:48:1A:03:A4:94:A1:36:7C:AE:81:EA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8MTEgGwhnlIGgOklKE2fK6B6gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/21f1ef-d6f5-4ad4-ad11-af4c1de0249d/1/lG4X-uNoxVz-mGsDkGvBgFkR4sc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/21f1ef-d6f5-4ad4-ad11-af4c1de0249d/1/d8MTEgGwhnlIGgOklKE2fK6B6gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:7540::/32
Signature Algorithm: sha256WithRSAEncryption
0d:2b:7f:b8:a0:6d:f4:60:f0:12:cb:59:85:b7:1f:34:8d:3a:
86:2a:7e:55:21:8c:67:a9:38:7e:f2:a6:c3:cc:c2:8b:e6:9c:
7d:42:84:41:3c:88:4c:7a:a9:e2:13:e5:5a:3c:f6:30:bf:44:
35:21:68:64:e5:b7:4d:fd:26:fb:95:6a:ad:c1:52:ad:af:0f:
c2:99:b2:02:64:f0:bd:f6:80:da:ad:8e:f7:d8:4d:cb:60:a7:
ae:24:86:23:45:26:39:22:52:10:d4:5a:a9:9f:fa:2a:24:7f:
3c:59:2e:20:41:62:fe:fa:a5:56:a1:63:0c:14:53:11:85:e8:
a3:34:8f:c1:99:28:96:2d:8b:9b:65:89:76:42:d3:20:9a:27:
e5:5e:33:b0:f6:e8:c3:7b:86:95:ac:08:4e:d9:57:7d:7a:5a:
18:55:02:d8:31:06:88:73:cb:39:ac:4a:e5:e8:ed:88:f8:3e:
21:50:08:3b:0e:44:1c:5f:eb:9a:59:b2:4a:63:27:84:c8:78:
06:a9:5b:c7:15:4c:40:1f:fe:79:eb:78:68:08:50:ec:56:dd:
de:4c:dc:aa:1d:fc:29:ec:ff:94:ff:86:4c:e1:ec:10:35:28:
93:a2:b3:81:34:d6:e2:b8:f9:d9:7f:82:65:01:23:35:0e:cc:
a5:f8:d4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:59:33 2024 by rpki-client on console-ams.rpki-client.org