Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/u4ngFqwT-Gtmu-qWULVksAZdQz8.roa
File: u4ngFqwT-Gtmu-qWULVksAZdQz8.roa (raw, json)
Hash identifier: W+6V3VgIrriLFJf+tFWbO8Y9X+fEX++QWsK4POohGEo=
Subject key identifier: BB:89:E0:16:AC:13:F8:6B:66:BB:EA:96:50:B5:64:B0:06:5D:43:3F
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 018CC86FD748FB6E1EEEDEDE1E1221C280B2
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/u4ngFqwT-Gtmu-qWULVksAZdQz8.roa
Signing time: Tue 02 Jan 2024 04:30:22 +0000
ROA not before: Tue 02 Jan 2024 04:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199158
IP address blocks: 2a03:5840:f7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:d7:48:fb:6e:1e:ee:de:de:1e:12:21:c2:80:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jan 2 04:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb89e016ac13f86b66bbea9650b564b0065d433f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f9:a5:48:91:42:52:0a:d9:e4:b3:4a:74:ca:
8e:fb:5c:e4:1b:34:94:21:e5:2e:b3:b6:82:0c:5d:
a7:29:47:48:4e:02:8a:d7:66:14:9b:19:0f:41:d9:
fd:53:aa:b6:dd:23:0d:2c:a0:18:4d:6f:7f:f5:62:
f5:f8:b2:b0:fb:86:ce:22:c8:a8:9f:57:89:5d:3f:
a0:26:93:01:27:5e:4e:e7:e6:87:8a:1d:ee:60:b9:
de:ff:91:d1:47:e8:3f:28:ec:dd:bf:03:2b:b1:a0:
b2:b9:f7:e6:05:77:6d:10:4b:29:89:73:09:6f:02:
c0:f9:7e:33:fe:20:17:7d:2d:d9:cf:bf:36:25:c8:
8e:d7:36:6b:50:e7:e9:a2:03:6b:d6:4f:3c:62:d3:
f2:94:04:f4:a5:4a:2c:54:78:63:3b:2b:9e:23:9a:
f9:d4:56:3b:52:48:42:34:8e:9c:09:4b:ab:56:64:
56:d3:ad:d7:c9:5e:b9:ef:ea:e3:26:de:ca:f5:4e:
5d:27:b4:9d:e5:41:d9:64:bc:68:ef:ca:fc:ac:07:
43:25:0d:3b:26:33:c4:d7:50:ff:c0:4d:a8:5c:3d:
08:ae:77:2a:59:5b:c4:b8:26:ed:02:4f:e3:e4:99:
bb:af:8e:68:d3:53:08:a4:40:c4:ad:7a:53:be:2e:
19:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:89:E0:16:AC:13:F8:6B:66:BB:EA:96:50:B5:64:B0:06:5D:43:3F
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/u4ngFqwT-Gtmu-qWULVksAZdQz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:f7::/48
Signature Algorithm: sha256WithRSAEncryption
84:db:50:30:e4:fa:53:98:36:4f:87:93:b7:39:1b:53:aa:79:
4d:4f:1f:9f:61:fb:a6:a6:1f:51:0e:50:ee:45:a4:a5:f4:85:
3a:e8:9f:9f:6e:2f:40:00:33:23:c8:2a:c8:2d:fc:20:df:5f:
43:a5:c7:fe:dc:e7:81:0c:96:83:c8:51:3d:82:f8:33:63:2a:
ca:0c:b3:77:ee:26:1d:5b:4e:1d:86:3d:91:46:97:e7:93:77:
8a:a1:8f:3e:36:4b:12:68:92:ac:53:7c:56:3a:e3:47:ab:cd:
c1:9d:35:de:0b:4c:26:5a:62:b0:52:65:0c:24:6e:67:56:cd:
73:66:38:38:5c:45:8c:00:70:68:ce:13:e5:1b:7b:da:21:e6:
ca:83:c3:f7:41:2f:2e:8d:30:05:2c:d8:bb:b7:25:1e:a9:66:
b2:f5:f4:a3:6f:d2:be:e2:54:16:05:60:67:d6:74:16:9f:b4:
5d:c5:62:41:36:c6:bc:76:b4:87:47:72:97:92:a4:2e:65:22:
ad:69:75:74:0b:d3:62:57:c8:30:c5:ed:8c:3f:ac:e7:8f:d1:
99:57:71:26:72:cf:82:c1:c5:0b:ef:fa:3f:19:7c:95:51:6f:
79:a2:8f:0d:c3:c4:92:7c:79:be:ab:a3:62:92:00:1e:44:dd:
5f:f3:e4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:08:37 2024 by rpki-client on console-ams.rpki-client.org