Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/h0Ch1bKbN82unRn4B5G8wu3X8uU.roa
File: h0Ch1bKbN82unRn4B5G8wu3X8uU.roa (raw, json)
Hash identifier: 1hcNL73fihh14PgvgHM7qdOguoM6mVEiizwuznlUBzg=
Subject key identifier: 87:40:A1:D5:B2:9B:37:CD:AE:9D:19:F8:07:91:BC:C2:ED:D7:F2:E5
Certificate issuer: /CN=20aa60cb0024332a2db68993f3357158af60c8de
Certificate serial: 018CC64B344D6CCF9C45EAF23D28E96324B7
Authority key identifier: 20:AA:60:CB:00:24:33:2A:2D:B6:89:93:F3:35:71:58:AF:60:C8:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/h0Ch1bKbN82unRn4B5G8wu3X8uU.roa
Signing time: Mon 01 Jan 2024 18:31:06 +0000
ROA not before: Mon 01 Jan 2024 18:31:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 2a02:3040:50::/48 maxlen: 48
2a02:3040:4e::/48 maxlen: 48
2a02:3040:4f::/50 maxlen: 50
2a02:3040:43:ff00::/56 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:34:4d:6c:cf:9c:45:ea:f2:3d:28:e9:63:24:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20aa60cb0024332a2db68993f3357158af60c8de
Validity
Not Before: Jan 1 18:31:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8740a1d5b29b37cdae9d19f80791bcc2edd7f2e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f8:fb:fd:e2:e2:8d:cf:24:9c:c3:d8:74:c3:
83:b4:1a:62:e4:db:28:3f:be:e3:94:ce:47:a2:08:
e0:c4:26:ca:7a:d8:4b:46:fd:5b:6b:0c:e7:e5:f2:
37:5f:ba:a4:08:d5:87:66:ec:b7:7a:18:55:5a:68:
5b:75:7f:e3:c9:db:d3:28:62:26:7f:19:26:5a:24:
d1:cd:64:94:c5:7c:8d:fe:d8:55:de:84:aa:1e:76:
88:4e:79:5a:ee:46:7e:d2:94:94:8a:50:f4:43:ac:
74:8e:44:43:65:3e:13:0d:cb:f9:8a:62:de:64:4a:
da:a6:1f:f5:c3:d5:58:93:1d:51:af:d0:a3:02:27:
ce:e0:af:b9:6f:da:ea:f6:5c:2b:8f:7f:52:78:54:
ff:d1:33:04:24:1d:a5:2b:f1:6e:f2:a1:a5:75:46:
09:28:24:5a:cd:d8:d6:09:a2:6f:c0:ef:8b:19:78:
d4:8d:4c:47:d4:e2:c0:44:f8:55:e0:c8:d4:9c:3e:
a0:92:78:de:a4:c4:95:8f:d0:8a:8e:67:6e:56:0d:
5f:48:bf:04:c7:ed:d4:47:e9:72:88:41:a4:c5:e1:
0e:32:cf:eb:ae:67:2d:12:94:57:24:d7:7d:89:85:
7d:8f:78:f3:bd:16:69:c4:fd:b5:e9:b9:16:03:fb:
28:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:40:A1:D5:B2:9B:37:CD:AE:9D:19:F8:07:91:BC:C2:ED:D7:F2:E5
X509v3 Authority Key Identifier:
keyid:20:AA:60:CB:00:24:33:2A:2D:B6:89:93:F3:35:71:58:AF:60:C8:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/h0Ch1bKbN82unRn4B5G8wu3X8uU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:3040:43:ff00::/56
2a02:3040:4e::-2a02:3040:4f:3fff:ffff:ffff:ffff:ffff
2a02:3040:50::/48
Signature Algorithm: sha256WithRSAEncryption
73:9d:59:2b:44:b9:b1:e7:01:d1:b9:30:16:a2:7f:b3:59:76:
f7:9d:d5:7a:71:5e:78:ea:ec:36:47:c5:15:ba:c0:6b:53:51:
12:63:1f:64:a7:93:67:a1:02:d9:a6:7b:57:90:a9:42:2e:eb:
63:ad:50:e6:ae:61:ca:e8:fb:24:12:e5:d3:e6:51:2d:35:ad:
6c:b9:fd:d3:85:30:b6:18:83:43:3b:60:72:87:7f:80:ad:a4:
1a:af:49:d7:25:c1:61:c8:23:2c:aa:7c:5e:ef:59:fe:0d:d8:
3f:9c:79:bf:5e:c2:8d:d5:2c:b0:2b:bc:72:6f:ea:2b:5d:ff:
22:0c:9d:b8:0b:3d:ef:c0:a7:04:a4:3d:b6:00:72:81:0a:92:
03:41:2c:31:8d:61:80:a5:0e:a7:b6:02:1f:e4:21:c9:72:11:
0b:17:a7:35:0e:39:5f:5d:fb:16:2b:27:ae:1e:e5:60:72:39:
74:53:95:3c:95:40:c7:08:ba:55:7f:a3:06:49:a4:9b:61:9c:
d5:cc:ae:26:cf:b6:35:1c:4d:ca:0e:13:49:c1:0b:e4:65:e5:
4c:2d:44:c6:c0:4b:9e:14:d9:f9:0b:5a:3c:30:87:1d:59:86:
3e:7f:d4:c9:c4:89:7b:fd:d7:fb:bb:db:46:3b:3f:8f:2c:fb:
17:7c:78:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:42:59 2024 by rpki-client on console-fra.rpki-client.org