Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/AgAUUr68A29sxAcuucu-QH395yc.roa
File: AgAUUr68A29sxAcuucu-QH395yc.roa (raw, json)
Hash identifier: xvjrIYn8OY2/7hrGdLU8S91rQrgcAqUlhnhRI/ftz+Y=
Subject key identifier: 02:00:14:52:BE:BC:03:6F:6C:C4:07:2E:B9:CB:BE:40:7D:FD:E7:27
Certificate issuer: /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3
Certificate serial: 018CC56E276F8254F0C68A53B042E9F89A2A
Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/AgAUUr68A29sxAcuucu-QH395yc.roa
Signing time: Mon 01 Jan 2024 14:29:39 +0000
ROA not before: Mon 01 Jan 2024 14:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212391
IP address blocks: 2a04:2b00:14ee::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:27:6f:82:54:f0:c6:8a:53:b0:42:e9:f8:9a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3
Validity
Not Before: Jan 1 14:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02001452bebc036f6cc4072eb9cbbe407dfde727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b2:12:1e:f8:ea:63:79:90:dc:8b:3d:f8:0c:
e9:93:1b:34:aa:0c:d0:c9:1e:9c:6f:91:fc:ee:c9:
65:6c:18:90:75:43:e1:cb:ec:14:2a:bc:a6:60:8b:
49:ae:3f:d5:fc:b5:a9:f2:bd:5e:3a:52:86:c6:eb:
aa:36:d3:8a:1b:f4:fd:7e:67:44:bc:e4:63:6b:ca:
85:ec:55:62:60:a3:50:ad:db:38:6a:f8:7b:3c:f3:
19:d7:71:31:96:e8:ca:6e:47:0d:67:39:5f:3c:05:
45:9c:10:ec:bf:72:d3:4b:ef:27:e4:50:ff:f5:09:
b6:a9:b3:40:e4:e1:06:fc:f2:80:2c:c3:3f:b3:3b:
4d:30:39:37:52:65:a4:33:70:7d:5c:4e:c7:84:fa:
7d:13:4c:df:db:ee:1e:de:3c:12:81:48:da:f6:f2:
1e:82:97:65:20:85:c5:33:0a:6f:bf:54:f0:0e:92:
6e:cb:08:ad:d2:ca:57:aa:79:96:49:d9:87:19:e6:
62:1b:f9:6a:1a:62:cf:30:c3:ec:82:41:cd:da:cf:
9d:11:1a:d4:07:71:ba:e4:e5:0f:ae:62:eb:93:76:
cd:39:70:d6:65:9d:6b:29:70:1c:a8:29:59:e3:f0:
3a:9e:3b:36:40:51:3a:e9:c6:6a:c7:25:99:2a:6e:
e4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:00:14:52:BE:BC:03:6F:6C:C4:07:2E:B9:CB:BE:40:7D:FD:E7:27
X509v3 Authority Key Identifier:
keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/AgAUUr68A29sxAcuucu-QH395yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:2b00:14ee::/48
Signature Algorithm: sha256WithRSAEncryption
9a:d7:7f:be:90:11:ab:8c:8a:ea:2f:e5:9f:4d:68:ee:24:e6:
88:2a:94:60:ea:19:6c:cf:89:c3:47:1c:59:3d:d7:0f:d7:6d:
1f:52:51:bf:ce:3c:7d:bd:b6:77:d9:3e:4d:54:ec:a4:6c:3d:
9e:08:48:9a:fa:7f:e8:b3:1a:e7:d1:65:04:d9:96:dc:c0:df:
51:af:b3:1d:2d:3a:fb:9f:bf:87:5b:cc:57:8e:e2:e2:ae:b4:
48:58:9c:b6:ab:81:1e:64:37:f6:57:62:52:c4:2f:12:c5:88:
dc:83:70:ba:87:ff:fc:c3:00:cd:f9:23:62:a7:e4:bf:3a:a1:
b1:1b:0f:4b:1c:ef:d0:e9:b9:0a:b4:8a:ca:9f:ce:b3:23:ed:
0d:b9:62:52:7b:91:6e:6e:ef:99:6f:79:47:8a:b6:14:97:90:
42:69:06:b8:21:fc:d4:4d:c5:99:5b:2b:56:4f:b3:2f:ee:2c:
86:a8:19:ac:e1:79:5c:d9:75:95:84:0d:74:0b:e8:25:ec:26:
87:d2:95:9e:30:90:9e:6e:89:3b:5a:69:ba:b2:d5:fa:29:51:
b2:fb:8b:d8:8f:44:32:04:75:89:e6:fd:f3:20:61:af:8d:49:
b6:83:3c:79:48:03:27:7b:6a:04:2b:66:14:76:a2:48:57:f5:
28:9e:c5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:53:39 2024 by rpki-client on console-fra.rpki-client.org