Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/G2yTp6N9CEJv02_5GBTWduOFnkk.roa
File: G2yTp6N9CEJv02_5GBTWduOFnkk.roa (raw, json)
Hash identifier: vHRwXN5TMUEf/Iboao1s2mckxFiEs0TrjHM9wrWnYcE=
Subject key identifier: 1B:6C:93:A7:A3:7D:08:42:6F:D3:6F:F9:18:14:D6:76:E3:85:9E:49
Certificate issuer: /CN=4d3c5f0aa141011ce2dbf18ccceaac8d23a80253
Certificate serial: 0192DCAFBC74ACBC2A78FFED00D6B43804B7
Authority key identifier: 4D:3C:5F:0A:A1:41:01:1C:E2:DB:F1:8C:CC:EA:AC:8D:23:A8:02:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTxfCqFBARzi2_GMzOqsjSOoAlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/G2yTp6N9CEJv02_5GBTWduOFnkk.roa
Signing time: Wed 30 Oct 2024 09:09:17 +0000
ROA not before: Wed 30 Oct 2024 09:09:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12337
IP address blocks: 2a03:62a0:4901::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTxfCqFBARzi2_GMzOqsjSOoAlM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:dc:af:bc:74:ac:bc:2a:78:ff:ed:00:d6:b4:38:04:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3c5f0aa141011ce2dbf18ccceaac8d23a80253
Validity
Not Before: Oct 30 09:09:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b6c93a7a37d08426fd36ff91814d676e3859e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:90:c5:f4:3f:b1:fb:12:68:ba:42:f0:d2:88:
9e:17:1b:78:07:74:fb:f9:5b:66:b4:6f:0d:e0:79:
5f:90:80:6f:b3:6e:56:a5:4d:87:c9:68:fe:9e:bb:
c3:0c:7d:1a:b1:8f:cb:f5:76:e9:1e:27:b7:45:38:
4c:e0:e0:f9:90:47:60:cb:e7:77:eb:0c:48:07:9c:
ea:af:32:a8:da:50:2c:fe:6c:b9:7a:5a:fc:ac:2a:
02:02:5e:1d:51:b6:8a:24:96:e3:ac:74:bd:fb:a2:
17:b8:db:64:0f:bf:1c:86:8f:3f:e3:49:c0:c3:e5:
34:e9:c9:87:13:18:67:30:7b:c4:e7:28:15:64:48:
4c:e9:63:01:e1:e9:25:98:2d:0b:e3:a2:dc:cb:1f:
85:7b:32:02:da:8e:f0:ee:9b:02:1a:63:f4:78:59:
31:d9:3d:94:36:a2:ba:9f:a6:05:b1:f8:24:91:f4:
0f:3d:de:c9:c6:c8:d2:c5:b9:e8:e5:0d:c3:fa:45:
78:4b:62:d9:67:94:54:eb:92:5f:e8:c0:71:78:c2:
17:b7:32:a7:89:bb:0f:bc:56:3b:0b:52:2b:fe:10:
7e:cd:6e:ae:a2:e1:10:3d:9b:1d:df:42:7b:00:1f:
38:11:49:97:27:c8:28:67:84:0e:f5:05:6b:22:9f:
cd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6C:93:A7:A3:7D:08:42:6F:D3:6F:F9:18:14:D6:76:E3:85:9E:49
X509v3 Authority Key Identifier:
keyid:4D:3C:5F:0A:A1:41:01:1C:E2:DB:F1:8C:CC:EA:AC:8D:23:A8:02:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTxfCqFBARzi2_GMzOqsjSOoAlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/G2yTp6N9CEJv02_5GBTWduOFnkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:62a0:4901::/48
Signature Algorithm: sha256WithRSAEncryption
72:3c:44:0f:22:8c:27:08:96:7d:6e:81:2e:19:fa:65:e0:51:
72:d3:44:bd:c9:9c:d8:a1:9e:17:8e:e8:59:38:5d:7f:6b:44:
6e:3b:eb:9b:c7:6f:3e:45:5e:a4:df:cb:13:1c:6a:99:ec:e1:
bc:f4:37:01:cd:5f:ec:6b:2d:b4:4a:7c:b2:4d:51:3d:23:68:
72:ff:2e:02:26:bc:fa:2b:56:da:93:7b:6c:57:e5:7d:61:ed:
5a:23:bc:24:59:74:7b:66:9c:93:5e:aa:12:4b:c4:5f:76:f3:
73:99:be:0d:1a:78:70:3c:82:93:1b:9c:5f:0e:e4:4a:c7:e8:
16:01:35:78:b6:3b:54:b5:7f:70:9f:97:84:90:17:d8:a2:f2:
47:0d:0e:e4:27:9d:67:c5:e0:01:08:5c:9f:01:c3:cb:cb:78:
9b:7f:35:3c:35:6a:ce:66:da:b8:0e:3c:96:59:aa:00:00:f7:
98:cd:03:7a:09:db:5a:2b:ed:7f:50:15:b5:d4:bc:5a:67:04:
fa:86:95:c7:a4:2a:1e:0d:8c:43:a9:84:7b:84:0a:4c:41:4e:
c8:f1:f1:69:19:d1:61:cc:b8:aa:62:67:ef:1d:31:f5:1e:85:
3f:f8:51:42:24:c7:22:b1:8a:b6:c9:c8:37:20:93:be:45:0b:
39:42:0c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:17:40 2024 by rpki-client on console-fra.rpki-client.org