Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/yAp9Pdl_fhqg2grNpTEtVW5fOf8.roa
File: yAp9Pdl_fhqg2grNpTEtVW5fOf8.roa (raw, json)
Hash identifier: O09Yg2shXLM/algKeAdXqS541W34LEbivhzmvySfLFw=
Subject key identifier: C8:0A:7D:3D:D9:7F:7E:1A:A0:DA:0A:CD:A5:31:2D:55:6E:5F:39:FF
Certificate issuer: /CN=dbc144ce154eee9dbb3562ce4cd3228338641333
Certificate serial: 018CC6B8A41F039A77B89619ABBCB8E80968
Authority key identifier: DB:C1:44:CE:15:4E:EE:9D:BB:35:62:CE:4C:D3:22:83:38:64:13:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/yAp9Pdl_fhqg2grNpTEtVW5fOf8.roa
Signing time: Mon 01 Jan 2024 20:30:38 +0000
ROA not before: Mon 01 Jan 2024 20:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133160
IP address blocks: 2a00:8422:ae5::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:a4:1f:03:9a:77:b8:96:19:ab:bc:b8:e8:09:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc144ce154eee9dbb3562ce4cd3228338641333
Validity
Not Before: Jan 1 20:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c80a7d3dd97f7e1aa0da0acda5312d556e5f39ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:6b:ec:a3:67:5f:ee:44:a3:ad:83:cd:47:ec:
0f:20:b8:e5:85:82:0e:63:76:29:0d:7a:d1:22:f8:
b1:f1:e4:7b:40:52:2f:3d:c5:17:69:c8:b2:7f:32:
e2:36:9c:20:af:af:81:bc:ef:d7:54:14:fa:42:06:
7b:4c:cd:6a:c1:9b:9c:72:56:b0:bf:b0:d0:2e:fc:
b2:42:24:2c:a2:5f:b8:1a:84:45:8e:55:bc:9a:8c:
ff:47:c8:61:6b:51:3e:67:cd:90:8c:44:37:67:5f:
37:5f:94:62:46:fb:ec:96:6c:44:fe:46:b2:63:48:
b0:eb:5d:82:4d:78:d1:64:83:bc:00:0f:2f:f1:d4:
d1:9e:b9:8b:9f:ef:8d:2e:b0:72:05:45:cb:91:6a:
c7:15:ca:6e:98:bf:1e:77:47:df:cc:d7:aa:48:ab:
9c:df:f6:bc:1d:f3:08:0f:28:e1:45:2e:79:90:72:
95:74:33:a1:31:d7:b8:a0:3d:ed:53:aa:ed:65:1a:
aa:57:94:9e:e5:c3:53:8f:2f:1e:a1:90:3e:7f:da:
a0:07:62:df:88:40:33:bd:f6:a6:66:a6:c2:2c:2a:
4d:c6:42:58:f5:b8:de:fd:2e:f5:a9:a1:a2:59:ec:
d0:b7:a8:f1:e0:20:3c:79:de:1c:13:aa:63:d1:b5:
4c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0A:7D:3D:D9:7F:7E:1A:A0:DA:0A:CD:A5:31:2D:55:6E:5F:39:FF
X509v3 Authority Key Identifier:
keyid:DB:C1:44:CE:15:4E:EE:9D:BB:35:62:CE:4C:D3:22:83:38:64:13:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/yAp9Pdl_fhqg2grNpTEtVW5fOf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:8422:ae5::/64
Signature Algorithm: sha256WithRSAEncryption
9b:05:03:ad:e6:1b:6f:d4:37:77:09:58:d5:01:4e:18:bf:ef:
6a:f6:ab:13:fd:3f:8e:fc:66:76:65:a3:7c:7a:ff:fa:dc:9a:
a7:96:e2:2c:94:3a:3d:b0:50:43:48:ec:1c:3a:46:7d:68:73:
b7:2a:4d:94:fc:df:45:68:f8:b8:09:ff:6a:16:bb:7e:ff:1f:
cf:7f:bc:d3:83:5f:de:5e:c3:bd:c2:3d:b8:fd:08:d5:c2:7b:
f8:e3:7d:d7:16:d0:c1:44:2e:a8:de:5b:5f:78:50:bf:a7:e6:
52:01:e2:82:b6:ce:63:d3:86:e9:39:08:d4:8f:66:2b:34:1b:
12:0e:b6:f4:b8:79:98:b1:e5:44:f0:bb:b1:b4:0c:4e:44:eb:
44:9d:0e:8b:fe:55:01:e0:da:af:9c:01:da:83:86:d5:5f:42:
9a:27:81:26:3d:f8:99:87:6f:00:42:82:e9:c2:6f:19:71:ec:
cb:c8:bb:2e:56:21:cc:95:69:06:08:bc:cf:bc:de:fc:32:b1:
9d:7c:1f:eb:ac:71:5c:41:ca:ab:42:89:bb:a8:24:d6:31:22:
a0:b8:d0:46:dc:09:99:36:f0:e7:22:17:7e:1e:2a:77:80:a8:
a6:c8:35:9b:97:c1:67:30:2a:47:74:d3:c6:b7:bf:b2:5d:9b:
e5:63:2e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 23:13:41 2024 by rpki-client on console-ams.rpki-client.org