Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/I0ZJbNzRNTi30nUAhSqdF33tJ6g.roa
File: I0ZJbNzRNTi30nUAhSqdF33tJ6g.roa (raw, json)
Hash identifier: k5SgeDqvHd8TA/diiTnqZImZvOjs4b33+vv0JBbyTpA=
Subject key identifier: 23:46:49:6C:DC:D1:35:38:B7:D2:75:00:85:2A:9D:17:7D:ED:27:A8
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 018CC26D2D5B6D95966FB0EB90EA1486A2E9
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/I0ZJbNzRNTi30nUAhSqdF33tJ6g.roa
Signing time: Mon 01 Jan 2024 00:29:44 +0000
ROA not before: Mon 01 Jan 2024 00:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202662
IP address blocks: 2a0e:aa07:e04d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 14:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:2d:5b:6d:95:96:6f:b0:eb:90:ea:14:86:a2:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 00:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2346496cdcd13538b7d27500852a9d177ded27a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c6:33:46:1f:92:0c:d5:42:41:c6:34:bd:0d:
df:29:3d:fc:b6:4e:f8:21:d4:ab:6a:eb:c9:5e:ed:
7b:a6:a2:73:7c:61:20:e8:1d:e1:4f:fc:13:d0:b3:
52:03:ef:ac:cc:60:35:e7:70:aa:93:6c:1f:cc:84:
7e:a4:31:02:69:fc:71:f1:e9:ab:e0:70:70:8c:3e:
b3:eb:22:ea:8f:73:dd:cf:3a:cf:a9:db:36:08:c4:
87:21:5d:e4:ac:4b:33:0a:23:99:d7:51:cd:99:ea:
ce:e1:22:72:09:c7:96:7c:d6:7c:6e:74:9a:17:d7:
9c:c5:85:a6:9a:29:76:7f:6f:50:02:9c:e9:a5:90:
d5:5e:a7:75:76:0e:31:3e:e4:14:43:36:d4:c2:b3:
fe:8f:ab:5d:7e:a2:3a:00:d9:39:52:85:70:b1:29:
7b:a8:a8:97:61:7d:13:e0:82:97:08:cd:93:aa:2e:
c5:c6:95:60:d9:07:c3:ef:87:bf:f8:bf:bf:ed:d2:
cd:c6:13:3b:05:78:b3:f3:75:9b:a9:cf:f5:67:2d:
5c:84:9b:1d:27:9f:e5:b1:17:e7:81:c6:c8:74:11:
3a:e1:87:27:55:bb:28:f1:0e:dd:f2:27:24:63:44:
50:c0:36:87:7e:af:a1:dd:72:8c:bb:3a:7b:a7:98:
22:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:46:49:6C:DC:D1:35:38:B7:D2:75:00:85:2A:9D:17:7D:ED:27:A8
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/I0ZJbNzRNTi30nUAhSqdF33tJ6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e04d::/48
Signature Algorithm: sha256WithRSAEncryption
3f:66:fb:23:2e:6d:2f:6d:e4:b7:cf:1f:58:9d:76:b2:f4:ba:
05:39:b2:68:cd:fa:c1:d5:cf:ba:8a:e8:3f:f0:82:2d:89:7f:
b9:fb:e4:4f:5a:6c:5e:fa:f8:dd:e9:a9:4c:de:62:64:32:5e:
bd:69:99:e6:5c:2e:b7:21:64:43:49:04:1a:5b:1f:1b:98:61:
41:7b:94:c7:db:c5:54:eb:87:a6:d6:7e:bc:bf:37:14:8d:75:
a0:40:64:84:fa:03:2a:c7:88:76:27:0c:d9:a0:73:4b:f3:76:
81:d8:a7:ef:89:ec:56:d6:74:d4:e1:a8:5b:3d:95:3b:54:2b:
61:bb:ba:83:15:28:99:b5:b4:83:33:f2:91:e8:e3:84:0f:39:
ce:b8:6a:7c:3c:c5:87:0a:6c:4b:06:72:3f:f9:63:7d:0c:ef:
6c:a4:87:62:15:0e:53:9c:2b:54:ed:c4:6c:34:41:8b:fa:e8:
86:57:a2:a8:1a:84:3a:6d:30:5e:fa:66:f0:7a:82:28:0c:bf:
e6:e1:cc:ec:32:85:5e:cc:f8:37:ad:71:f6:34:b8:76:bb:17:
ec:31:80:17:77:eb:23:b8:69:cb:66:c5:e6:c5:c6:ba:21:e2:
0c:68:88:2b:b5:a8:fb:83:09:a6:9d:e2:f6:16:fa:09:48:cb:
d6:18:29:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:51:56 2024 by rpki-client on console-fra.rpki-client.org