Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/kwhPxpbIaMiIT0AnxXa-bDn8xn0.roa
File: kwhPxpbIaMiIT0AnxXa-bDn8xn0.roa (raw, json)
Hash identifier: ZC/Fs1Px/EIf5KnCRYDVstWvWgQG3PTxeekau8he2WU=
Subject key identifier: 93:08:4F:C6:96:C8:68:C8:88:4F:40:27:C5:76:BE:6C:39:FC:C6:7D
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 018CC26D2FB44A7B062E670E50282BA2C3B1
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/kwhPxpbIaMiIT0AnxXa-bDn8xn0.roa
Signing time: Mon 01 Jan 2024 00:29:44 +0000
ROA not before: Mon 01 Jan 2024 00:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204721
IP address blocks: 2a0e:aa07:e040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 14:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:2f:b4:4a:7b:06:2e:67:0e:50:28:2b:a2:c3:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 00:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93084fc696c868c8884f4027c576be6c39fcc67d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c7:29:10:ad:c2:8a:cf:da:81:e5:4f:58:57:
9c:ce:7b:7a:3f:b7:b0:d8:6d:68:38:eb:63:c9:bd:
60:af:29:53:02:31:57:47:5d:3c:4e:99:7c:23:46:
cf:ec:ed:e3:39:2e:7c:87:9b:fe:31:d6:5d:ae:ed:
77:85:af:d4:aa:e7:2e:e7:76:0d:b7:4c:7f:35:fe:
9c:f6:4a:13:e8:9d:cb:6b:43:32:0b:c4:7f:11:1c:
14:ac:9f:57:ef:75:1e:12:c8:54:ae:bd:a8:9c:4a:
cf:a7:99:9d:26:20:d0:6b:cd:39:09:18:85:27:98:
9a:8c:46:84:bb:60:a7:31:de:6c:71:33:47:d1:04:
86:f7:e1:a9:85:3d:75:74:ac:7c:7c:05:e4:6c:bd:
94:67:0b:3f:e2:54:96:d7:bf:80:10:3a:b6:a7:fe:
b3:2a:7d:2d:5c:80:c5:45:3d:e4:28:78:bb:03:cc:
cd:11:c7:1a:53:c0:54:1d:b2:81:61:54:0a:a5:5c:
d6:bc:d4:04:b0:03:15:26:88:4f:d5:f9:5c:4d:5a:
9b:6d:93:4d:5b:fb:c4:f7:74:c4:7c:7d:d3:20:27:
8d:4a:ec:59:60:9b:3f:83:b4:a6:66:97:8b:9e:22:
0c:41:35:14:7e:04:63:19:a1:1e:70:5d:b8:d5:8f:
35:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:08:4F:C6:96:C8:68:C8:88:4F:40:27:C5:76:BE:6C:39:FC:C6:7D
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/kwhPxpbIaMiIT0AnxXa-bDn8xn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e040::/48
Signature Algorithm: sha256WithRSAEncryption
91:42:1a:74:4d:f9:85:26:b7:d9:83:b4:a3:12:6d:97:eb:5a:
62:0a:40:24:c0:86:45:f3:4b:46:ce:5e:2d:cf:81:a3:62:52:
d4:46:00:e5:48:c0:59:d2:07:c5:93:1d:b5:43:f5:0a:3f:29:
f2:01:b3:cf:95:38:09:51:f0:a9:c5:6b:65:39:a1:59:12:f3:
24:44:b1:6d:5a:e5:d3:ae:73:9b:c5:90:55:33:c4:dd:79:38:
35:57:01:85:e3:fb:6d:37:4c:6f:f2:4d:7f:21:da:57:da:23:
df:cd:68:08:68:0b:16:58:f3:34:82:99:bd:fc:2f:04:17:33:
17:ed:a0:bb:ae:cc:b1:47:53:1b:a7:29:b8:ff:c8:71:2f:bc:
99:2d:71:60:b5:f3:ea:ec:90:ec:97:52:26:3b:7f:03:af:33:
51:9d:72:e9:e3:f7:6e:65:dd:12:8c:ad:83:f9:4e:d3:34:5c:
d8:9d:3a:f3:aa:e8:c4:39:55:76:64:62:02:ba:75:d0:3c:a6:
3b:56:d8:c8:29:2c:b4:6c:77:2f:84:37:d7:5e:0a:82:70:59:
b4:c1:23:e4:86:c6:e9:3b:58:47:d9:9b:83:24:a2:91:6c:f1:
a7:25:de:17:d5:03:4d:37:6d:07:12:d8:3f:d6:5b:54:11:c3:
7e:08:9d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:51:56 2024 by rpki-client on console-fra.rpki-client.org