Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/JAtLlmyr2dCa8ViT0Nm7noF5_8o.roa
File: JAtLlmyr2dCa8ViT0Nm7noF5_8o.roa (raw, json)
Hash identifier: N7hNUvyq10FxZbmdPNVoAXwavqkEoXEpkCRceSpsABA=
Subject key identifier: 24:0B:4B:96:6C:AB:D9:D0:9A:F1:58:93:D0:D9:BB:9E:81:79:FF:CA
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 018CC26D3ACF4C231BFF39FD3266EA417849
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/JAtLlmyr2dCa8ViT0Nm7noF5_8o.roa
Signing time: Mon 01 Jan 2024 00:29:47 +0000
ROA not before: Mon 01 Jan 2024 00:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210041
IP address blocks: 2a0e:aa07:e030::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:3a:cf:4c:23:1b:ff:39:fd:32:66:ea:41:78:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 00:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=240b4b966cabd9d09af15893d0d9bb9e8179ffca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d5:d7:a3:86:22:e3:e0:6d:3b:f9:c1:6b:e5:
90:41:d7:76:64:ab:8f:6a:a6:98:71:10:ae:43:26:
c8:b3:70:96:89:de:42:7b:71:92:7f:e4:08:ce:19:
b2:aa:ca:88:ee:54:ca:1c:de:8b:ab:1d:50:64:40:
1c:4d:1e:a2:61:2b:e5:74:bd:ae:01:5e:c3:ef:ea:
8e:30:d5:40:33:18:bc:a6:92:1f:b9:5b:a9:1e:73:
01:24:17:00:71:2b:61:cc:2b:b7:39:c8:9e:95:3e:
aa:af:ee:62:af:f9:42:58:9b:e2:54:d4:4a:cf:b9:
55:c3:01:db:90:64:5d:10:45:1f:bb:4c:19:1c:29:
b9:94:fb:d9:bc:51:50:03:c4:6c:66:3a:40:f5:24:
9a:3d:99:25:a2:57:2c:35:51:44:44:43:2f:d8:76:
c9:ba:da:a8:dd:8f:cb:b5:ed:9d:77:df:8c:4d:f8:
a4:f4:51:bf:59:bc:a1:f0:26:de:27:5a:8f:d5:00:
8e:88:37:a9:ea:9a:93:29:59:a1:8b:89:84:04:12:
84:16:3d:c0:f5:53:0e:84:51:05:e1:88:5b:51:7a:
cc:9d:4c:20:db:ea:1e:93:21:e0:1b:3c:6e:74:a6:
2e:a2:fe:79:38:04:32:55:57:ac:93:ef:99:f5:77:
ae:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:0B:4B:96:6C:AB:D9:D0:9A:F1:58:93:D0:D9:BB:9E:81:79:FF:CA
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/JAtLlmyr2dCa8ViT0Nm7noF5_8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e030::/48
Signature Algorithm: sha256WithRSAEncryption
2e:65:59:0a:f7:08:18:6c:dd:fe:98:8a:02:bd:65:3f:0e:56:
92:57:5e:37:20:48:2e:bf:0b:0b:77:b0:a4:dc:e8:7d:b0:1a:
5f:f5:9d:3f:d6:f8:7b:11:d4:65:59:a0:3c:73:2e:42:1a:3a:
eb:61:35:d4:bc:09:41:f8:c7:26:99:e2:c0:e2:f0:f0:b6:59:
c7:10:9a:c5:40:7b:6b:e1:14:3b:e0:7e:7c:b6:6f:af:43:34:
89:8b:cc:00:13:c3:46:57:97:d4:43:23:70:de:f0:f9:41:81:
2a:24:2e:c1:b1:a8:16:55:13:a1:68:2c:01:7e:0c:a0:17:2a:
f5:35:3b:56:1d:4a:bc:56:60:86:5a:b4:cd:3b:00:77:36:58:
35:45:ae:ec:b0:67:95:82:a4:45:f3:6c:d8:e8:f0:8b:b3:66:
71:e0:52:67:a2:a6:31:45:63:89:c6:70:56:ea:2b:67:5d:31:
72:83:06:f6:f7:54:77:cb:27:4a:25:fd:cb:82:6d:e9:46:8d:
d5:9b:9f:83:50:bc:1e:ed:2a:a5:e9:00:bd:ca:1c:6f:cf:e8:
03:eb:64:56:c9:e7:7d:ca:49:a2:64:cb:d2:f5:16:7c:4b:d9:
74:6a:f3:2f:58:d8:18:e8:19:10:62:b5:37:8c:e0:43:19:1f:
f2:43:5e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 15:54:57 2024 by rpki-client on console-fra.rpki-client.org