Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/K1N-l-_6mjVLpOm_iIhFriyyeZM.roa
File: K1N-l-_6mjVLpOm_iIhFriyyeZM.roa (raw, json)
Hash identifier: H8W1q+UN8htQGOV5QyjwKKBKhuf1bWRyARr2F0qH30s=
Subject key identifier: 2B:53:7E:97:EF:FA:9A:35:4B:A4:E9:BF:88:88:45:AE:2C:B2:79:93
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 018CC26D45220894EAE521CDBDCB692F3FA5
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/K1N-l-_6mjVLpOm_iIhFriyyeZM.roa
Signing time: Mon 01 Jan 2024 00:29:50 +0000
ROA not before: Mon 01 Jan 2024 00:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212733
IP address blocks: 2a0e:aa07:e029::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:45:22:08:94:ea:e5:21:cd:bd:cb:69:2f:3f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 00:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b537e97effa9a354ba4e9bf888845ae2cb27993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:91:7f:45:0a:81:0f:4a:04:d7:b6:92:19:23:
2c:7f:8b:b5:c3:05:48:43:20:a3:4b:ed:2e:82:0c:
2f:3c:1a:7a:5b:c5:aa:40:6b:95:0b:84:69:d9:dc:
b5:77:48:c0:87:0b:2a:6b:ff:e9:49:8a:71:80:37:
eb:a6:b8:17:6b:c3:88:cb:16:fa:90:66:90:60:f8:
aa:c6:21:e8:cc:81:77:45:6c:8e:b0:ed:ac:07:57:
8f:4c:1a:fe:86:27:64:c5:97:79:a1:51:3c:bb:b6:
fe:52:14:f8:91:a1:38:89:a3:7b:98:74:72:56:e6:
13:76:da:e5:cc:ba:17:cc:f0:61:c6:28:8e:5e:8b:
af:2d:c8:fb:7c:dc:04:78:46:b9:9d:c1:aa:33:57:
e8:bd:c8:77:4d:92:07:ec:53:ca:b9:c6:53:61:71:
1c:57:4a:66:9e:0f:cb:2d:4b:0a:4f:f8:ac:66:a7:
c2:c9:de:d8:df:29:97:e5:ac:a9:b8:65:14:83:90:
50:35:e4:cd:ba:90:15:14:c5:72:14:cc:55:8a:fc:
0c:af:ea:8d:09:44:c0:b8:d8:f1:a1:00:8a:6b:2f:
6c:ae:90:4f:a5:8d:ac:d9:0b:95:cd:81:0d:03:fa:
0a:c2:f9:86:4d:16:27:7d:66:8b:be:ff:60:bb:c8:
6e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:53:7E:97:EF:FA:9A:35:4B:A4:E9:BF:88:88:45:AE:2C:B2:79:93
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/K1N-l-_6mjVLpOm_iIhFriyyeZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e029::/48
Signature Algorithm: sha256WithRSAEncryption
49:b1:49:eb:82:8e:75:0c:6a:1e:84:b3:f1:e8:65:46:49:a5:
26:6e:1c:53:04:7e:c3:67:cd:26:00:8b:dd:75:73:65:c2:a2:
1a:c3:1b:02:cc:8c:1f:69:e6:a6:5c:ac:1e:59:fd:a2:79:d3:
7d:59:4d:95:ff:8a:1a:a7:25:a1:ef:f4:e4:9b:3c:9d:be:9d:
ac:c3:b8:29:5c:95:73:4c:31:46:5c:3d:d6:66:ab:ee:13:98:
51:13:0c:c9:2e:6a:bd:3a:df:d4:96:05:b1:66:03:df:1f:ee:
af:fe:91:dd:a6:89:6b:37:a8:19:1e:bb:7e:5d:af:0b:57:8c:
08:0d:99:b8:14:9b:51:38:ac:ad:2e:7e:36:96:42:39:85:eb:
ce:58:a0:3a:ef:98:9b:8a:4e:90:8c:2c:79:6d:a7:25:9d:98:
f5:0b:12:4e:2d:86:a0:ab:8a:56:aa:2e:58:55:b1:fd:90:fc:
b4:db:63:ea:e0:46:b4:f7:3b:d5:f5:39:2a:d8:22:e8:e2:9e:
bb:71:90:34:af:c1:07:24:17:6b:c5:51:a3:f3:71:8f:35:ca:
7b:1e:e6:de:ac:0b:1e:08:1d:66:e6:75:d4:da:e5:ea:1f:9d:
5e:d3:d7:f0:1a:35:55:2e:8d:46:80:9f:ab:12:a9:7c:b7:56:
b8:f6:fd:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:49:11 2024 by rpki-client on console-ams.rpki-client.org