Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/AmZVGql7RYq1twWaUIV3a5Ua7LI.roa
File: AmZVGql7RYq1twWaUIV3a5Ua7LI.roa (raw, json)
Hash identifier: DGNpHEjg8tuxfbUnjSYGHRlHIOqM2PiPf7fvau145tg=
Subject key identifier: 02:66:55:1A:A9:7B:45:8A:B5:B7:05:9A:50:85:77:6B:95:1A:EC:B2
Certificate issuer: /CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Certificate serial: 018DC748E763C9ABFBE3B82D6040E23BF47A
Authority key identifier: AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/AmZVGql7RYq1twWaUIV3a5Ua7LI.roa
Signing time: Tue 20 Feb 2024 16:11:00 +0000
ROA not before: Tue 20 Feb 2024 16:11:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12513
IP address blocks: 2a02:c2c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c7:48:e7:63:c9:ab:fb:e3:b8:2d:60:40:e2:3b:f4:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Validity
Not Before: Feb 20 16:11:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0266551aa97b458ab5b7059a5085776b951aecb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:63:9f:36:20:5e:99:f8:d5:28:8d:f9:4e:24:
e7:ad:99:62:41:e8:9f:a7:97:5a:42:00:08:0e:7e:
67:50:e0:3e:0f:6f:0b:e7:5b:d7:49:de:91:75:82:
9c:a0:7f:83:db:0d:6d:1b:1b:d5:a1:76:f1:0a:76:
d8:20:8b:0b:75:03:74:a2:67:8d:ae:bd:57:ee:67:
7d:13:cc:62:d0:da:f3:83:44:47:ec:4b:33:0f:b7:
87:ed:d7:ec:a7:0b:50:27:8d:ae:03:8a:f1:c1:fe:
0d:b8:26:c5:d3:06:25:79:b8:90:86:6b:b8:85:ef:
88:d0:65:95:e4:46:a0:9e:50:6b:83:cf:ef:11:53:
d0:66:12:c4:1b:37:20:27:f2:f9:be:94:95:85:65:
db:54:f1:1f:2d:ed:49:f9:de:93:09:6a:4a:4f:51:
79:f4:58:b7:56:7e:e0:3d:a5:ff:c0:e7:53:b8:d3:
dd:28:ad:93:01:3f:da:5c:60:d0:5f:e4:27:5d:ab:
42:59:3f:09:69:56:10:45:5f:f8:08:34:5f:a9:82:
d5:3d:08:25:69:69:9f:98:e9:41:5f:8c:0d:97:96:
4b:e7:14:75:12:d5:01:c8:0e:c3:46:44:d3:b7:d7:
71:f1:b0:84:eb:d7:42:aa:a7:5c:7c:b0:57:44:eb:
e6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:66:55:1A:A9:7B:45:8A:B5:B7:05:9A:50:85:77:6B:95:1A:EC:B2
X509v3 Authority Key Identifier:
keyid:AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/AmZVGql7RYq1twWaUIV3a5Ua7LI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:c2c0::/29
Signature Algorithm: sha256WithRSAEncryption
40:d1:d6:28:fa:8d:cd:d6:02:45:76:a7:d7:9a:28:ae:9a:23:
70:32:3e:a5:d1:02:6c:db:be:54:52:a7:5b:50:eb:53:27:82:
19:7b:fd:56:19:f7:a9:cb:02:a5:72:f2:78:d1:76:8c:91:31:
eb:fc:3a:35:1f:c6:91:63:ff:e0:ff:33:19:97:8d:0e:a5:c1:
9d:04:b0:f5:c3:4a:c5:ae:01:33:47:5a:71:6b:4a:fa:ef:7d:
5f:8f:e8:a9:d3:a2:df:dd:e9:92:16:e5:a1:6f:8b:78:d3:a8:
7c:c7:25:c0:dc:bd:bc:05:2e:4e:74:f6:b3:6a:27:8a:df:a3:
5b:19:4d:6a:7f:9a:f0:69:a7:e8:29:0a:f6:09:64:de:f7:b4:
e0:ae:64:6e:03:05:e0:7f:5e:f5:8b:13:03:7b:3b:b4:ae:29:
e7:89:c6:de:8e:0b:74:5a:8d:62:59:f2:6f:e3:f6:38:da:1d:
4d:9e:ed:5a:ee:f1:fd:e4:61:7c:73:27:e5:d5:2b:54:6c:05:
38:d8:7c:21:e7:8d:97:f3:f6:88:97:22:91:56:47:f4:33:5d:
d0:6d:e2:56:65:15:f7:13:87:c9:bb:6a:61:97:71:f0:70:40:
fe:35:aa:e6:6a:46:58:32:da:24:7f:5c:17:aa:d0:7f:e4:18:
1f:30:05:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:37:25 2024 by rpki-client on console-ams.rpki-client.org