Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/SmPHBCyS0_VAiLgu4DPmEGVjJTw.roa
File: SmPHBCyS0_VAiLgu4DPmEGVjJTw.roa (raw, json)
Hash identifier: I1o6qXCZRblPZMtDerGBIGButL+CFwM1KCECeWX4fqs=
Subject key identifier: 4A:63:C7:04:2C:92:D3:F5:40:88:B8:2E:E0:33:E6:10:65:63:25:3C
Certificate issuer: /CN=8ce735129f777a25bf84727206bf978d9a1db200
Certificate serial: 018E2DB0CC134E02504E51A2CB0C7F559BBF
Authority key identifier: 8C:E7:35:12:9F:77:7A:25:BF:84:72:72:06:BF:97:8D:9A:1D:B2:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOc1Ep93eiW_hHJyBr-XjZodsgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/SmPHBCyS0_VAiLgu4DPmEGVjJTw.roa
Signing time: Mon 11 Mar 2024 13:25:45 +0000
ROA not before: Mon 11 Mar 2024 13:25:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47530
IP address blocks: 2a03:e60:8000::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jOc1Ep93eiW_hHJyBr-XjZodsgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2d:b0:cc:13:4e:02:50:4e:51:a2:cb:0c:7f:55:9b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ce735129f777a25bf84727206bf978d9a1db200
Validity
Not Before: Mar 11 13:25:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a63c7042c92d3f54088b82ee033e6106563253c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:30:05:7c:94:01:81:97:f0:5b:f5:93:52:bc:
cc:42:0e:dd:fb:95:a6:63:70:db:17:71:eb:9c:2d:
45:de:3b:58:92:cb:75:54:9b:61:02:d6:da:e3:44:
67:18:d6:ac:4e:6f:74:50:25:04:d0:09:f1:06:40:
2a:fe:1f:d1:cf:b6:2d:47:d7:c5:22:ce:28:0f:46:
a4:bf:7a:9a:e2:b5:17:2d:e6:50:1a:2b:ee:61:e7:
af:93:fc:8f:9f:60:da:8c:37:b0:a1:52:2a:4d:fc:
eb:a0:f9:4c:7b:f2:c6:1a:21:4c:80:6c:02:b6:00:
d7:d0:80:c8:6b:8c:6a:89:b1:4f:5a:a1:cc:6c:90:
5c:94:59:42:08:65:e9:be:37:68:6a:76:4c:dc:2f:
ab:1a:9b:ba:9a:07:97:96:6d:04:ed:cd:00:4b:62:
54:fe:a1:6b:22:63:e9:4d:d7:f6:64:6e:0f:4a:53:
67:40:e1:0c:1a:0c:c3:ed:0f:70:4c:a2:be:cf:84:
19:92:68:85:fe:e4:22:eb:87:45:20:26:2b:d7:db:
9b:6b:35:9c:d3:95:39:57:d4:ef:d2:c6:72:ea:83:
5a:b5:08:4e:81:80:a1:fc:cc:02:81:5a:8e:0c:45:
82:f4:cd:6e:57:01:06:b3:02:d0:df:30:d9:5c:43:
95:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:63:C7:04:2C:92:D3:F5:40:88:B8:2E:E0:33:E6:10:65:63:25:3C
X509v3 Authority Key Identifier:
keyid:8C:E7:35:12:9F:77:7A:25:BF:84:72:72:06:BF:97:8D:9A:1D:B2:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOc1Ep93eiW_hHJyBr-XjZodsgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/SmPHBCyS0_VAiLgu4DPmEGVjJTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:e60:8000::/46
Signature Algorithm: sha256WithRSAEncryption
37:52:1c:23:37:e7:a8:f2:3b:b0:06:9d:44:b7:2a:f2:ac:73:
d2:4c:72:c9:06:f0:5d:3d:6a:08:74:f7:3d:a6:98:84:a9:05:
4d:f4:0c:dc:3e:5b:29:2f:ad:dd:e9:fb:f1:e9:a8:70:15:0d:
31:f7:78:8a:87:fd:e8:aa:84:f2:33:9c:0a:0f:bd:95:0f:26:
9d:96:02:4f:0b:42:67:8f:e8:6e:67:73:27:f7:79:f2:4e:ee:
2f:6a:e4:e2:a3:c8:77:0e:fa:ea:91:1b:14:92:16:4a:02:1e:
86:82:a7:9f:ff:be:e1:db:f8:81:68:59:37:9d:00:1e:2c:76:
31:27:a9:f8:36:e9:2d:30:c3:23:b5:f2:d8:91:c1:25:42:94:
ee:20:c2:c4:fb:68:c4:0f:3a:a1:5e:a4:b8:2a:f2:55:f5:a2:
27:ca:69:4e:7f:51:5b:c9:c8:2f:a0:a5:e8:e0:8e:59:2d:91:
a4:5a:e3:91:49:65:fc:53:46:16:75:59:da:f3:63:6f:c1:3d:
f0:87:08:2f:42:79:4d:79:9c:3a:56:79:8c:a7:5f:0b:b4:92:
1c:72:b2:ba:f4:28:b1:f5:e5:71:a8:b4:92:34:b3:d4:e0:8f:
d1:1a:6c:69:9a:f8:93:99:f9:28:0c:5f:7d:27:55:43:a6:80:
22:13:f9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:34:12 2024 by rpki-client on console-ams.rpki-client.org