Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/ToG5SVaIe1aMNp1IJXqgYZl232E.roa
File: ToG5SVaIe1aMNp1IJXqgYZl232E.roa (raw, json)
Hash identifier: 0CeH91XVh/wzRFcfzDhJZGcGpZ5aH+DyYm8Cy3Q/U1U=
Subject key identifier: 4E:81:B9:49:56:88:7B:56:8C:36:9D:48:25:7A:A0:61:99:76:DF:61
Certificate issuer: /CN=38203463eb944b25c65135ca47bdbdab646f3984
Certificate serial: 018CC2DB042A4D42A1150746453D27ED7A53
Authority key identifier: 38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/ToG5SVaIe1aMNp1IJXqgYZl232E.roa
Signing time: Mon 01 Jan 2024 02:29:42 +0000
ROA not before: Mon 01 Jan 2024 02:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2a00:8860::/29 maxlen: 29
2a00:8861::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:04:2a:4d:42:a1:15:07:46:45:3d:27:ed:7a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38203463eb944b25c65135ca47bdbdab646f3984
Validity
Not Before: Jan 1 02:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e81b94956887b568c369d48257aa0619976df61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bc:a7:06:c5:49:f3:4e:2f:61:65:e3:83:7f:
2d:fd:31:bd:ed:04:b6:51:12:1c:53:fa:70:f7:bd:
55:88:ca:55:96:12:36:3d:c4:bb:d3:25:85:08:e8:
b4:be:2b:00:6c:55:fa:fd:65:72:66:22:f2:6b:6b:
07:a3:f0:29:4f:0e:a2:8a:5c:08:5b:99:9b:9f:2b:
93:01:bf:1d:27:b7:9b:14:f5:97:6d:0c:9a:cc:06:
cd:c8:98:42:08:d2:ad:97:2e:62:78:a1:4d:58:02:
1e:e7:15:6b:86:ef:26:5f:e5:ac:b3:61:f7:ea:c4:
60:e1:af:59:a9:a0:1f:41:03:30:5f:9c:eb:ac:2b:
9a:c0:cd:b6:64:00:16:ef:ca:6d:0f:a8:9a:72:cc:
28:3d:79:64:7e:7f:4c:84:76:75:ed:13:24:64:3d:
68:80:8b:84:46:4b:85:55:fb:0e:f7:56:ad:b5:b1:
5c:d9:8a:0f:32:3d:d4:e3:01:98:12:70:9c:01:ab:
74:95:c8:22:55:ed:fc:b6:3d:5b:e5:56:f3:0e:e2:
9a:55:aa:86:ab:71:15:9c:07:a2:89:da:a0:93:41:
88:1d:e1:34:06:33:83:c0:07:22:09:ae:4f:e3:26:
0e:99:c3:cb:56:cb:26:01:67:46:c7:6b:9d:e1:25:
7b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:81:B9:49:56:88:7B:56:8C:36:9D:48:25:7A:A0:61:99:76:DF:61
X509v3 Authority Key Identifier:
keyid:38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/ToG5SVaIe1aMNp1IJXqgYZl232E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:8860::/29
Signature Algorithm: sha256WithRSAEncryption
64:98:22:1b:73:ad:f5:12:87:a8:26:5f:5a:d4:55:dc:da:ec:
9e:d9:98:2d:aa:80:5e:ae:5a:0b:33:dc:33:72:34:78:d3:f8:
e6:bd:59:a6:51:10:06:b0:dd:c1:05:19:0f:d8:51:98:1b:16:
4f:42:d3:c3:31:bd:03:96:af:de:14:f1:72:94:ae:cc:81:00:
d0:a6:1d:71:ea:da:65:95:87:6b:4d:e8:10:d9:cd:86:e8:c9:
c2:e3:29:90:3a:42:87:8f:39:87:6b:5f:d7:51:59:4f:1d:3e:
36:66:61:eb:0a:75:08:12:2c:f9:fb:89:0d:ea:d4:27:37:da:
1d:5e:1d:28:62:2b:34:ce:cd:80:32:7f:0f:a1:a1:c0:d8:a3:
c4:99:ee:ac:0a:b7:36:1f:d0:58:93:f3:68:f8:02:3c:c9:35:
d1:15:35:a2:09:6c:06:5e:0e:db:e1:23:d4:27:90:d4:b1:ed:
5d:87:5a:2a:47:76:c0:92:e6:2a:17:f5:22:41:86:95:f6:56:
50:2d:1d:a9:fe:43:81:a7:69:55:92:3c:c4:f1:3c:4c:39:82:
5b:17:d6:c2:cc:1c:0f:43:98:5a:56:aa:43:6f:11:b0:10:e5:
3d:4b:91:4f:99:8f:9e:2c:b4:7f:85:25:41:57:ff:fa:10:26:
4e:6d:78:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:44:46 2024 by rpki-client on console-ams.rpki-client.org