Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/9gfIe-s4mtS-U6i3yotUrecvOJY.roa
File: 9gfIe-s4mtS-U6i3yotUrecvOJY.roa (raw, json)
Hash identifier: Q3LL4h797YEo9UwhEYI6MEhwYh/0zgcVAuKat9wjWAE=
Subject key identifier: F6:07:C8:7B:EB:38:9A:D4:BE:53:A8:B7:CA:8B:54:AD:E7:2F:38:96
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 018CC26D25F84B2CB69F4DC17EF30507E163
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/9gfIe-s4mtS-U6i3yotUrecvOJY.roa
Signing time: Mon 01 Jan 2024 00:29:42 +0000
ROA not before: Mon 01 Jan 2024 00:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135028
IP address blocks: 2a0e:aa07:f010::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:25:f8:4b:2c:b6:9f:4d:c1:7e:f3:05:07:e1:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 00:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f607c87beb389ad4be53a8b7ca8b54ade72f3896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b4:a1:66:53:be:9c:73:d2:97:15:2d:e7:3b:
17:e3:88:28:6e:5c:6c:d9:c9:48:ef:23:cd:62:3b:
13:7e:83:17:9c:78:40:70:76:ec:f0:22:80:be:fe:
e5:76:09:0b:20:6e:b6:49:85:7d:c8:68:86:40:04:
b4:ff:c9:b2:52:a7:51:32:8c:c5:6e:0f:97:3f:99:
22:26:ca:4a:d3:b4:b8:36:d5:93:28:ff:a6:63:f7:
ab:57:1a:60:82:8d:de:bc:2f:c6:35:1d:1d:ce:3a:
c1:d6:34:2d:e8:57:fd:42:5b:58:e0:f7:0c:8c:3a:
b6:c5:61:04:09:79:60:d1:e4:47:fe:bb:a0:fd:49:
33:cb:e6:10:c1:7f:bc:49:53:bf:6e:31:c5:ec:6e:
16:0e:ba:2a:65:a3:cc:e1:cd:94:69:1e:e1:28:c0:
ac:e4:b9:d9:9b:f5:fb:fd:6e:6d:97:38:48:ee:7b:
c1:d1:fe:eb:8e:4a:03:4e:5f:58:5f:41:5e:e5:db:
6f:d7:6f:68:af:8c:bf:96:ec:44:28:d1:a7:aa:6e:
9d:9d:ca:23:46:2c:f0:81:42:4a:12:fe:fa:47:e3:
9b:e1:db:d0:79:94:2e:58:1a:24:87:97:60:8a:68:
87:8e:c4:3f:a9:22:33:ba:73:cd:6d:7e:20:ae:80:
8a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:07:C8:7B:EB:38:9A:D4:BE:53:A8:B7:CA:8B:54:AD:E7:2F:38:96
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/9gfIe-s4mtS-U6i3yotUrecvOJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:f010::/44
Signature Algorithm: sha256WithRSAEncryption
be:4d:a2:dc:54:2c:d8:b1:ba:ff:af:79:5d:bc:e0:28:fc:3a:
cd:b0:fa:84:1b:53:b4:54:17:32:56:98:99:eb:fa:08:17:e7:
4d:94:10:45:26:11:aa:22:4f:15:f0:5b:c5:2b:9f:11:d8:23:
9d:00:a3:31:3f:e9:2b:b1:93:e8:55:a9:ce:7d:d3:b1:bf:d7:
c3:c2:76:c8:69:0b:bb:b1:84:a5:ee:82:1a:41:1c:74:d6:4a:
9c:1a:da:54:a4:c0:09:39:22:d5:ba:07:28:32:f3:11:ab:84:
7d:69:b3:ab:cf:02:61:7b:cc:fc:5f:80:e6:23:2c:cd:8f:d9:
e0:c2:5c:9a:af:9e:72:ae:7e:4c:b4:39:5a:27:2b:53:e6:25:
a1:52:06:34:f5:ba:be:d3:4b:64:07:20:c4:13:5b:11:b5:05:
04:16:cb:fa:7d:90:20:48:70:51:d0:f6:7b:39:bc:7f:71:d1:
e5:93:76:5f:ca:29:89:67:c8:21:1e:6f:d2:b8:9b:f8:b7:db:
d1:b7:cb:09:d0:20:1a:6f:6d:8d:2d:27:88:00:f5:06:a1:67:
26:45:1d:70:75:f6:d3:70:43:90:57:b6:ed:cd:6d:cd:79:f9:
34:8a:fc:e8:dd:e4:f0:f6:7a:27:e1:4e:59:50:96:62:a6:bc:
e0:26:c7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 15:54:57 2024 by rpki-client on console-fra.rpki-client.org