Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/mwhJ8uq9F_nov2fljLpsQfUuXEw.roa
File: mwhJ8uq9F_nov2fljLpsQfUuXEw.roa (raw, json)
Hash identifier: oud9F+4gspdMiDxOM1/uOv7p8rbzJtaUiNUt75qegy8=
Subject key identifier: 9B:08:49:F2:EA:BD:17:F9:E8:BF:67:E5:8C:BA:6C:41:F5:2E:5C:4C
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 018CC86FDF1F2743B46253E71137317E030F
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/mwhJ8uq9F_nov2fljLpsQfUuXEw.roa
Signing time: Tue 02 Jan 2024 04:30:23 +0000
ROA not before: Tue 02 Jan 2024 04:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216324
IP address blocks: 2a03:5840:ff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 13:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:df:1f:27:43:b4:62:53:e7:11:37:31:7e:03:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jan 2 04:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b0849f2eabd17f9e8bf67e58cba6c41f52e5c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:12:70:99:4b:e1:e5:9c:81:94:09:74:2e:4a:
ce:e4:67:3a:6a:a7:10:5b:f2:15:3d:27:83:6a:13:
dc:f5:ac:5e:5f:90:5c:59:49:3f:d4:94:53:59:6b:
b3:8a:4e:3e:10:8a:43:77:0c:09:c8:4d:49:cf:e8:
7b:5b:d4:3d:9a:67:13:47:60:e3:e2:5c:64:5f:b4:
14:7a:d0:d7:1b:c7:08:c3:f4:df:94:b1:a8:7d:d9:
7a:43:f7:c0:73:2c:7b:a2:80:69:e7:fb:84:0c:9b:
b0:95:fa:32:f8:38:2b:85:27:81:dc:61:ae:37:89:
93:91:35:ff:8e:cb:9b:a3:f6:ce:da:53:fa:71:48:
59:7f:a1:63:03:71:c2:4c:00:fe:44:6a:60:fe:05:
21:e1:3b:dd:e1:dc:27:d6:4c:cd:d8:d4:cb:0c:aa:
b0:ec:b9:29:d6:b3:19:80:70:8c:4f:9c:cb:6b:52:
15:66:56:a4:dd:18:27:4c:81:a2:85:88:7c:93:ef:
55:97:73:60:dd:de:49:da:bf:85:50:88:63:cc:d7:
e5:71:42:4f:0b:22:9c:38:ff:5b:3e:da:4a:20:01:
0d:8c:27:73:f7:29:91:cc:c9:0e:36:dd:b1:62:2b:
b7:a8:c7:92:71:a3:3c:71:30:6d:10:2b:57:b4:f4:
21:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:08:49:F2:EA:BD:17:F9:E8:BF:67:E5:8C:BA:6C:41:F5:2E:5C:4C
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/mwhJ8uq9F_nov2fljLpsQfUuXEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:ff::/48
Signature Algorithm: sha256WithRSAEncryption
b2:47:aa:3b:f5:fe:57:43:1e:56:92:f8:2a:81:f6:bf:8a:86:
53:da:49:47:56:9d:d3:a8:e2:49:f6:b6:15:6e:19:cd:ee:73:
5a:bb:05:5e:4e:30:35:b4:78:db:3a:6d:d3:5f:6f:0f:9b:16:
12:83:7d:5d:ef:d8:e6:28:23:08:d5:1f:6f:63:75:c0:92:37:
fc:3d:c9:80:30:34:0a:c8:61:d4:09:76:bb:ff:71:51:05:78:
10:cf:b5:0b:c9:f8:5b:99:42:0c:81:30:ac:30:ac:d2:6f:17:
bd:5c:fb:b6:07:19:64:39:72:4a:2d:e0:a9:30:1b:f3:de:4f:
b0:2d:0b:ad:66:42:2b:db:f6:df:77:b1:b9:11:ff:ba:65:d0:
8a:d4:b6:b1:b3:4a:12:86:f3:9a:9e:4e:56:db:9b:44:1a:e7:
f0:45:a9:a4:d6:f4:76:52:5c:93:12:2d:25:68:5f:2e:bc:27:
38:d9:24:35:51:d7:7d:05:f9:9a:96:ac:eb:28:39:cd:ee:90:
03:3e:71:68:f4:e6:8c:c5:be:bb:1a:df:79:11:39:43:58:9b:
72:21:de:55:8f:45:17:5b:67:4c:fa:66:32:46:ac:bd:6f:49:
79:b2:84:b9:8c:54:30:0c:8b:2e:77:bc:c2:36:91:87:cd:7d:
d8:eb:e1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:56:39 2024 by rpki-client on console-fra.rpki-client.org