Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/g6V6MldGmYbyYWeWQefqBeS9Dvs.roa
File: g6V6MldGmYbyYWeWQefqBeS9Dvs.roa (raw, json)
Hash identifier: nNI45+9buxy+3rCL5F4pvw7cHQr1mg/0y6d7FCZGr/Y=
Subject key identifier: 83:A5:7A:32:57:46:99:86:F2:61:67:96:41:E7:EA:05:E4:BD:0E:FB
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 018CC26D33F708390F7B3EDDEC5DC8221703
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/g6V6MldGmYbyYWeWQefqBeS9Dvs.roa
Signing time: Mon 01 Jan 2024 00:29:45 +0000
ROA not before: Mon 01 Jan 2024 00:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208577
IP address blocks: 2a0e:aa07:e03c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 06:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:33:f7:08:39:0f:7b:3e:dd:ec:5d:c8:22:17:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 00:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83a57a3257469986f261679641e7ea05e4bd0efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e4:ab:62:fe:d3:ce:36:5e:fc:d4:41:d4:29:
8a:50:63:94:84:00:0d:a2:75:37:97:d9:32:e7:30:
7b:31:8d:30:cf:91:01:61:41:09:d1:a6:9e:32:c1:
21:e5:a7:c7:91:f2:91:2f:3c:77:4f:1f:70:c8:58:
73:a3:13:8e:c5:eb:bf:0e:7b:e3:7d:9c:d7:31:50:
7e:74:70:fb:cb:2d:9a:ee:ee:7c:aa:be:7a:7b:f1:
48:cc:6a:82:4f:57:e5:b7:d5:58:2f:4d:a9:00:1f:
a8:3e:87:ec:17:48:b6:71:25:b3:24:14:79:fa:c8:
a7:14:4f:99:8f:b8:58:f0:84:f6:d2:76:bd:89:f2:
7b:7c:9d:c9:64:3d:62:fe:ef:65:74:9b:21:04:57:
e2:6c:37:fa:ae:33:38:96:9f:82:87:b6:9e:04:11:
64:53:49:9e:b3:71:58:8e:bf:01:68:ed:7c:80:72:
62:d2:b6:c4:eb:0f:46:75:d7:43:ad:f3:4d:59:b4:
25:bb:de:60:5b:35:ad:d5:55:3d:b8:05:04:e2:95:
9b:52:a2:8a:fa:84:42:4d:1b:5b:6e:64:9f:12:50:
b1:c0:94:fb:84:27:25:0f:88:22:3c:17:12:72:d8:
51:0c:cd:8f:f6:70:c5:58:63:df:be:dd:d1:2e:6d:
82:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A5:7A:32:57:46:99:86:F2:61:67:96:41:E7:EA:05:E4:BD:0E:FB
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/g6V6MldGmYbyYWeWQefqBeS9Dvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e03c::/48
Signature Algorithm: sha256WithRSAEncryption
3a:7a:3a:1d:77:e9:29:e4:db:1d:11:c5:21:df:0a:09:38:a7:
f2:4e:0c:41:34:f1:92:5a:57:b4:7a:c2:eb:32:fb:f6:e0:97:
e8:f2:2d:2a:ec:67:35:ad:17:61:d9:9e:dd:d0:0b:cd:23:0f:
24:9a:00:74:cd:66:5c:b2:5b:bd:bb:d7:62:cc:fa:da:7f:fd:
46:24:2b:9a:27:25:1e:d3:38:be:e6:d7:98:a9:e7:03:b9:17:
c5:f4:c2:9d:53:55:31:fa:17:7a:76:88:6c:ab:51:67:d8:56:
31:26:40:47:22:31:94:be:14:dc:12:d8:f8:76:9d:b2:4e:51:
7c:0b:af:c3:c9:3d:ce:75:3e:be:1f:40:76:f6:b1:3b:14:7d:
10:05:d3:95:06:d2:ea:5d:af:f8:20:de:8b:39:e4:9e:84:a8:
fe:1d:e8:eb:b4:a6:81:96:d9:52:3b:1c:21:82:95:a1:22:7b:
80:96:b8:08:78:9d:2d:17:20:8f:85:fb:13:f6:62:84:b5:23:
4a:d7:20:a6:67:61:eb:b0:e9:8a:69:04:3e:07:37:a7:bd:7e:
17:5d:88:1a:da:8b:39:e6:7e:f4:ef:f7:ea:68:d4:8b:6d:e0:
18:fb:fe:e5:03:9b:59:69:a6:af:3c:70:37:cf:30:ae:6c:dc:
fd:60:bb:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:49:39 2024 by rpki-client on console-fra.rpki-client.org