Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/fPPz7q9Kr5K8iXeErWP5YgCpeds.roa
File: fPPz7q9Kr5K8iXeErWP5YgCpeds.roa (raw, json)
Hash identifier: O4gI9VVjGQS1QAosZSXVPmzjxO/gd+qalpwTkf6CMNc=
Subject key identifier: 7C:F3:F3:EE:AF:4A:AF:92:BC:89:77:84:AD:63:F9:62:00:A9:79:DB
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 018CC26D283A9EA3CC75F32F567AE6277847
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/fPPz7q9Kr5K8iXeErWP5YgCpeds.roa
Signing time: Mon 01 Jan 2024 00:29:42 +0000
ROA not before: Mon 01 Jan 2024 00:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 139317
IP address blocks: 2a0e:aa07:f080::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:28:3a:9e:a3:cc:75:f3:2f:56:7a:e6:27:78:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 00:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7cf3f3eeaf4aaf92bc897784ad63f96200a979db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cf:03:77:73:93:14:2c:bf:25:e1:ca:7f:e0:
d4:b8:4b:6c:b4:b2:1b:5c:25:ec:21:34:e3:3e:35:
14:37:9e:56:06:8a:aa:22:7e:47:91:c5:60:df:6c:
81:df:15:17:23:93:94:4b:6a:29:13:62:dd:f5:37:
09:71:81:61:89:74:9c:40:ba:da:46:78:21:3e:a4:
59:11:26:8f:5c:97:44:47:0c:c7:4c:b4:52:be:21:
bd:b8:7e:07:f2:0a:a1:68:5f:fa:00:74:36:31:ae:
46:fc:4e:63:a2:53:ed:30:d4:80:1d:2f:72:7a:1f:
ec:cc:15:6c:eb:a5:e0:78:16:42:95:06:28:93:77:
bd:4a:84:9b:44:9b:e8:54:33:b1:9d:53:83:d7:bf:
a8:dc:b5:c6:8f:25:48:5a:17:e4:c8:f4:1c:14:28:
f7:a7:d6:03:0f:88:3c:c5:d8:4b:73:ae:b1:72:ba:
59:68:1b:98:bf:c9:77:22:7d:66:e5:b9:72:69:5f:
8f:e4:90:0b:47:38:2b:92:f9:76:5b:44:0f:04:04:
19:7c:1d:58:80:ac:60:b1:69:34:bb:72:e4:52:37:
fb:bd:c1:ea:b6:bb:95:c4:27:1f:94:8b:5d:03:1c:
10:5b:38:98:c0:f2:c0:64:6e:2d:e5:84:68:77:78:
55:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F3:F3:EE:AF:4A:AF:92:BC:89:77:84:AD:63:F9:62:00:A9:79:DB
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/fPPz7q9Kr5K8iXeErWP5YgCpeds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:f080::/44
Signature Algorithm: sha256WithRSAEncryption
20:6c:3c:c2:c3:1e:b9:b4:d4:6c:8a:b1:2e:6f:45:7e:6f:db:
56:d7:27:ca:81:e5:e9:79:14:ea:55:ae:2c:18:87:12:59:3c:
d1:6c:4b:cf:2a:e8:52:fa:c9:c2:d9:59:bd:d3:82:a7:d6:ee:
24:ec:53:f5:14:3a:71:91:0c:49:7b:ea:e1:ce:c3:c4:36:54:
41:79:3b:bd:69:90:b0:74:b9:8f:04:1c:9a:9b:be:63:fe:ab:
bc:37:4c:e4:1b:28:e9:30:1f:af:e5:0f:20:24:29:86:aa:1e:
be:1d:e5:d1:ba:e9:a9:f3:d8:63:8b:75:40:95:6b:96:56:69:
9e:8f:9a:9f:2d:13:79:07:c5:54:66:a0:56:26:e4:78:70:45:
d8:cc:2f:68:04:e6:d1:18:33:81:8d:fa:aa:20:79:9c:18:5b:
b0:41:68:1d:9b:fa:e5:ff:6f:1a:ad:80:1f:4d:7a:36:53:7e:
c8:4f:70:74:0b:15:f9:c3:6c:c4:dd:4e:c3:33:dd:0e:36:f6:
de:f4:7b:78:70:38:40:f8:e0:74:95:9a:d9:01:c6:ac:3b:09:
0d:7b:b7:a8:ba:19:6d:35:42:22:56:3a:80:e8:31:b4:ed:4f:
79:7b:cc:d0:4c:c0:c1:c3:61:c3:53:20:1d:18:64:c5:8d:68:
a0:e7:a4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 16:04:35 2024 by rpki-client on console-ams.rpki-client.org