Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/9KBuaUEn9p-ZDoiDydO3lFC6720.roa
File: 9KBuaUEn9p-ZDoiDydO3lFC6720.roa (raw, json)
Hash identifier: 5r1hgZGTUwMMakPnHVHxZMT7wg2r4Ffc1NgOHYl6LOA=
Subject key identifier: F4:A0:6E:69:41:27:F6:9F:99:0E:88:83:C9:D3:B7:94:50:BA:EF:6D
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 018CC64B3A88DA069D8349C3DBF7830E6F16
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/9KBuaUEn9p-ZDoiDydO3lFC6720.roa
Signing time: Mon 01 Jan 2024 18:31:08 +0000
ROA not before: Mon 01 Jan 2024 18:31:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202811
IP address blocks: 2a12:3fc0:2028::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:3a:88:da:06:9d:83:49:c3:db:f7:83:0e:6f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jan 1 18:31:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4a06e694127f69f990e8883c9d3b79450baef6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:da:8d:48:d7:c8:f1:d1:fe:0e:d1:dd:73:be:
b8:4e:60:e8:d5:5f:ca:31:0c:b6:83:3d:3d:db:7a:
cf:e0:b3:c5:fa:36:2b:db:db:5e:cb:3d:ac:85:5f:
6f:63:7b:62:a9:2c:f9:da:f9:58:a6:64:be:a6:3d:
66:a3:c2:01:21:d2:b0:90:1b:e9:3d:c8:eb:db:62:
79:4a:91:a4:ff:20:96:fd:d6:e9:69:95:5b:f2:fb:
0a:ea:94:22:0c:8e:a3:88:fe:a9:63:4f:c7:23:47:
8d:87:06:90:05:f5:88:6f:b5:8a:f2:c8:3f:57:ee:
99:78:c3:1f:8b:bb:b2:97:46:06:47:0e:84:f1:55:
28:e6:d9:c9:1f:f3:dd:3b:14:7c:d3:43:89:fa:94:
d2:a0:c8:7e:d3:77:0b:0e:bd:93:18:3e:30:8c:85:
90:83:bb:f8:d6:79:b4:54:cb:91:d9:31:54:63:c8:
87:3f:ff:56:14:03:df:eb:7a:50:66:e8:f6:fa:4f:
97:d7:b5:33:8f:f0:88:3c:e2:0c:5a:47:bc:d0:fa:
8c:07:05:ed:9b:76:f3:74:14:27:de:6c:88:53:04:
e0:93:54:fa:59:6e:ae:43:e0:01:2b:7b:d8:0f:a7:
72:ee:b6:9a:2f:d8:f6:71:3c:c2:ef:c1:6f:25:47:
fc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A0:6E:69:41:27:F6:9F:99:0E:88:83:C9:D3:B7:94:50:BA:EF:6D
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/9KBuaUEn9p-ZDoiDydO3lFC6720.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc0:2028::/48
Signature Algorithm: sha256WithRSAEncryption
b4:c1:18:f1:6c:44:54:c1:4b:82:8e:e7:8e:14:c0:cf:a0:fd:
d1:e0:84:e1:d8:04:5d:10:66:40:be:a7:1c:97:62:2a:b6:6d:
95:8b:5e:7b:c5:d9:d9:8c:7f:26:31:54:85:b0:60:ec:87:46:
aa:4f:81:a8:54:00:e1:91:cc:76:3d:de:4d:ed:b6:86:af:09:
09:2a:3b:ac:a5:ab:07:7a:73:1d:d9:b4:f2:95:fb:d4:a1:e1:
5b:a8:fd:ca:ea:eb:12:85:b6:dd:06:8d:c9:50:33:1f:2a:22:
b0:a6:5e:69:7b:a8:8f:1a:20:54:b8:5f:11:34:cc:03:8a:a1:
f6:e4:3d:d4:bf:cf:71:80:1b:ad:79:0d:e0:ae:8c:f4:29:d5:
7c:e4:b2:22:1a:9b:96:c9:7e:37:c4:7b:6c:0e:28:7c:03:ac:
b3:2a:a5:fa:3c:37:36:fc:32:e9:2f:76:b2:42:c5:20:5b:57:
ce:e9:b7:fb:48:f9:47:7a:98:4b:32:3a:03:9b:84:89:84:bc:
08:d2:df:55:14:61:37:1b:6c:87:10:0f:25:1b:d5:96:dd:23:
87:5c:98:5e:e1:7e:5e:a8:51:d5:99:bb:ec:98:18:f4:1d:d5:
34:42:df:d7:43:ca:63:13:21:88:77:d3:93:f8:75:77:77:26:
16:9e:3b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:31:10 2024 by rpki-client on console-ams.rpki-client.org