Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Py18vq0XRIEoWZCJbPWUatS-aBI.roa
File: Py18vq0XRIEoWZCJbPWUatS-aBI.roa (raw, json)
Hash identifier: xDvdTboYOPXkYILUJSF2U8Cnb5vaJ5moPNANgwQsGws=
Subject key identifier: 3F:2D:7C:BE:AD:17:44:81:28:59:90:89:6C:F5:94:6A:D4:BE:68:12
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 018CC26D398F5DA212BAC6B603F9751F3B4C
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Py18vq0XRIEoWZCJbPWUatS-aBI.roa
Signing time: Mon 01 Jan 2024 00:29:47 +0000
ROA not before: Mon 01 Jan 2024 00:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209557
IP address blocks: 2a0e:aa02:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:39:8f:5d:a2:12:ba:c6:b6:03:f9:75:1f:3b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 00:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f2d7cbead174481285990896cf5946ad4be6812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:15:a5:5a:a8:79:a6:75:3e:b4:fa:ab:9c:41:
47:fe:27:04:08:98:2d:bf:66:47:ab:64:df:3e:d4:
00:3c:32:fe:a5:b0:03:db:20:8a:da:14:fc:e6:e9:
59:83:d0:ce:b2:bb:25:f6:05:63:cc:1e:2b:64:e1:
ec:01:20:e5:70:7f:43:77:bc:f8:96:ce:eb:1a:e7:
0b:04:b6:4d:22:e2:05:69:cb:f5:70:4e:09:bd:81:
c0:7a:c9:95:3d:4d:e2:8a:97:78:1d:38:4a:99:2d:
f4:6c:26:40:2b:4b:31:bd:76:c1:b5:fc:29:aa:7e:
b6:87:d5:55:9e:2a:77:13:0b:13:1a:da:9b:8c:08:
92:b6:8e:53:84:50:b6:74:7d:6b:e8:cd:bd:9f:70:
d1:72:35:84:53:0b:93:43:aa:cc:20:ce:00:17:4a:
eb:f1:ad:ae:3d:b2:34:45:07:0d:91:4a:7d:02:c1:
63:0c:6c:ec:a1:3e:34:48:91:5e:7c:f4:f6:79:dd:
a0:c1:17:f7:6c:9d:0b:2b:d4:1d:30:3d:86:02:4e:
fd:15:c4:7c:55:7e:ed:84:fe:3a:d9:61:8c:db:98:
3f:dc:0d:d2:f9:b7:9a:0b:9a:01:79:9b:9d:87:97:
a8:8e:17:3e:7b:0f:8b:60:ec:27:8a:5b:12:b5:ca:
ec:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:2D:7C:BE:AD:17:44:81:28:59:90:89:6C:F5:94:6A:D4:BE:68:12
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Py18vq0XRIEoWZCJbPWUatS-aBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa02:1::/48
Signature Algorithm: sha256WithRSAEncryption
7d:81:48:87:05:f5:74:99:c5:88:e4:02:5c:41:af:b6:8c:ff:
44:06:de:63:7d:12:84:a7:ef:85:82:fc:7c:1b:d9:00:4a:55:
b0:34:8c:0a:49:39:02:74:45:f4:68:9f:ba:b5:be:8e:e0:d8:
38:8a:2a:4d:f8:0b:8c:d2:98:41:cc:d1:2c:cd:3a:30:b3:de:
b7:a6:a0:b2:b6:78:d9:80:46:f9:2a:fd:25:50:70:06:0b:74:
be:8d:2b:ce:1c:8c:db:44:f2:3a:41:19:f9:b6:ed:ca:64:8e:
42:54:98:0d:10:55:25:97:28:9d:6c:a1:4c:06:3c:f2:94:ae:
ff:24:ba:d2:5e:aa:b2:f0:20:3e:90:81:b9:c8:8f:9a:d9:22:
ea:da:cd:d4:27:2a:b6:8c:30:4d:e7:90:2b:43:d9:6a:3b:1f:
b9:29:55:d3:25:95:9d:38:ca:18:da:9a:fe:e9:30:5a:8a:59:
d2:50:59:8e:53:5e:4e:d1:7d:bc:3c:65:de:2c:0e:5e:6a:10:
1c:1c:f6:74:85:a9:64:09:b5:ba:ed:4a:74:c3:c8:e5:99:af:
ec:41:e2:88:1f:43:92:71:92:81:92:7e:e8:e7:53:95:f0:db:
38:7a:68:6b:a7:96:ae:f1:0a:2d:f4:4f:09:2e:8c:2e:63:c1:
e7:7f:79:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:27:00 2024 by rpki-client on console-ams.rpki-client.org