Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/1-16ho57nCUoRCt3d5wP-Nq_kqTo.roa
File: 1-16ho57nCUoRCt3d5wP-Nq_kqTo.roa (raw, json)
Hash identifier: DYNnRBZIlu2CbnrKl/lcAUGt+9bTA/Rm0DhWygFnsoQ=
Subject key identifier: FB:5E:A1:A3:9E:E7:09:4A:11:0A:DD:DD:E7:03:FE:36:AF:E4:A9:3A
Certificate issuer: /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Certificate serial: 018CC7275486DF951C03ED2B4EC99E8772A9
Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/1-16ho57nCUoRCt3d5wP-Nq_kqTo.roa
Signing time: Mon 01 Jan 2024 22:31:32 +0000
ROA not before: Mon 01 Jan 2024 22:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 2a0b:6b86:f00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:54:86:df:95:1c:03:ed:2b:4e:c9:9e:87:72:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Validity
Not Before: Jan 1 22:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb5ea1a39ee7094a110adddde703fe36afe4a93a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:99:1e:3a:02:fe:75:cf:c5:2f:6a:29:a4:6c:
2c:d7:e8:8f:df:bb:79:1d:fc:4d:f7:a6:35:9a:30:
79:cd:6f:b4:8a:8a:94:4e:09:00:2d:ca:09:07:76:
a9:66:ce:2b:65:b2:b9:87:51:46:74:75:0f:2e:27:
81:5c:fc:62:9d:d7:26:05:ac:31:9a:76:b1:1d:a0:
d2:48:b7:5f:44:41:d9:39:52:51:8f:fc:54:7b:6f:
00:11:57:75:6a:3e:2b:22:a5:4a:70:5b:68:c2:0f:
cf:f3:97:09:7b:6b:ec:8f:87:45:a0:90:7b:6e:63:
3c:90:63:28:ef:3a:d3:79:1f:4e:4b:da:a8:fd:f0:
13:b3:66:42:16:5e:9f:e7:1e:e2:a5:78:2a:d4:be:
67:97:2e:5c:7a:9a:92:d1:12:1e:00:3e:58:cb:45:
1e:ef:88:8e:a5:94:40:7d:0c:50:c2:bc:9f:d4:c1:
ce:67:3d:6f:96:38:07:66:4a:68:ae:b8:c8:33:6b:
f7:ea:68:7e:f4:16:b6:e3:96:53:44:a1:a2:16:f4:
45:4f:6c:38:f2:56:8b:9d:16:52:a9:f3:59:de:a9:
f0:88:73:cd:af:78:35:fa:87:62:d7:b4:db:35:83:
21:70:20:af:b6:87:08:fb:51:54:40:4f:b8:60:6a:
52:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:5E:A1:A3:9E:E7:09:4A:11:0A:DD:DD:E7:03:FE:36:AF:E4:A9:3A
X509v3 Authority Key Identifier:
keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/1-16ho57nCUoRCt3d5wP-Nq_kqTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:6b86:f00::/40
Signature Algorithm: sha256WithRSAEncryption
2d:e8:8b:7e:42:41:59:6b:97:87:8c:c7:e1:18:55:b9:e6:67:
1a:da:be:d4:21:87:0b:b9:4f:81:89:7c:0c:9d:d2:22:b8:6f:
6c:e5:e3:91:72:44:7c:b8:b7:da:d2:a3:c3:19:71:0b:9e:d1:
99:74:f1:04:c6:c0:a3:ad:d2:ac:81:db:3a:3b:2a:35:53:a0:
75:f6:2f:32:fc:e0:e2:4e:f0:a6:e0:c0:76:a1:2d:68:b2:16:
19:27:95:5c:4e:7f:02:be:1f:d8:81:2a:cb:28:ae:26:fe:b5:
c0:9c:7f:df:07:7d:65:c2:f0:bf:aa:5f:30:05:fd:dd:b9:80:
6b:cc:cb:18:c8:5a:e3:51:3d:66:3a:7e:0e:4d:70:72:3c:37:
50:40:46:3f:2e:da:5c:a7:d8:01:4c:a1:e8:f7:4c:ce:dc:f7:
f6:a7:57:ad:a8:7d:f9:be:0d:0d:41:c6:12:ff:42:f9:50:d9:
7c:e5:60:a6:34:19:8f:d7:94:50:b1:30:5b:ed:6f:19:2d:d1:
72:55:58:c2:bc:23:ad:50:d5:85:8d:8e:91:5f:1d:41:48:8b:
63:df:1e:45:f0:68:6a:86:64:d5:8b:ad:c8:2b:f5:8d:57:b7:
b1:10:e0:e1:cc:31:c3:f5:29:a9:9a:3d:29:47:53:40:ec:64:
6f:3d:f3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:28:12 2024 by rpki-client on console-fra.rpki-client.org