Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/bTWAGD69mx0_1ZE39R7YJzdlgpQ.roa
File: bTWAGD69mx0_1ZE39R7YJzdlgpQ.roa (raw, json)
Hash identifier: d0UmavIMZwMye2b/lu+sbTW1E2OKVTTmL9PAHFZE90E=
Subject key identifier: 6D:35:80:18:3E:BD:9B:1D:3F:D5:91:37:F5:1E:D8:27:37:65:82:94
Certificate issuer: /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3
Certificate serial: 018CC56E26B522076F617F4D0417E6655004
Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/bTWAGD69mx0_1ZE39R7YJzdlgpQ.roa
Signing time: Mon 01 Jan 2024 14:29:39 +0000
ROA not before: Mon 01 Jan 2024 14:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212222
IP address blocks: 2a04:2b00:14cc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 02:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:26:b5:22:07:6f:61:7f:4d:04:17:e6:65:50:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3
Validity
Not Before: Jan 1 14:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d3580183ebd9b1d3fd59137f51ed82737658294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:de:f0:eb:b9:d9:b7:5e:7f:25:ab:ad:87:17:
52:fe:ef:36:7e:25:2b:b4:51:7f:45:60:35:c6:fd:
1e:fe:cf:19:16:b7:96:24:57:f7:af:a0:87:bc:a6:
3c:80:1d:d0:3e:f8:28:4c:0c:ae:6e:eb:d7:8c:cd:
a2:d0:ec:c9:84:d9:2a:f1:4a:f0:18:14:d0:e4:2c:
ba:7b:2c:03:0b:c3:07:84:16:21:f1:76:a0:7b:2e:
62:93:d9:54:6e:b3:44:0c:97:c7:e9:1a:6f:e6:a9:
de:72:e5:a9:4e:b3:17:04:f5:2f:78:c3:ef:53:27:
ef:32:bd:b7:d2:78:ab:cb:0a:85:a3:e2:57:5e:3a:
8a:5e:11:39:c6:12:3a:83:4f:6e:54:4e:6d:62:a2:
b6:5b:30:c5:02:98:f2:f9:90:59:01:5e:72:37:16:
39:07:d3:00:99:5a:7b:21:ae:25:8b:3c:31:e7:e5:
a9:d1:ae:39:32:ac:ad:26:a9:a2:79:59:c2:7b:b5:
6d:0e:4a:73:49:0f:5f:f6:54:04:73:ed:a2:26:33:
33:2e:46:55:4f:3f:de:02:0d:e2:94:a6:37:51:69:
87:f3:44:6e:3f:12:d7:24:0c:e6:db:50:27:ed:42:
ed:78:c8:e0:6d:13:79:4d:47:f2:4b:2c:db:82:27:
df:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:35:80:18:3E:BD:9B:1D:3F:D5:91:37:F5:1E:D8:27:37:65:82:94
X509v3 Authority Key Identifier:
keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/bTWAGD69mx0_1ZE39R7YJzdlgpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:2b00:14cc::/48
Signature Algorithm: sha256WithRSAEncryption
89:3a:d3:08:ca:47:83:01:b1:e4:de:a5:24:9d:ad:45:1e:b6:
8b:f9:c6:e1:ad:c9:ef:64:15:ef:2c:2f:d1:74:9d:8f:06:0f:
e1:ec:6b:73:ee:77:0e:13:02:8c:7b:c8:2c:c4:03:f1:e4:b9:
8f:77:56:de:c6:42:d8:66:d0:65:2d:1b:b9:11:4d:75:b3:f8:
77:2b:a1:f2:2d:b8:30:5d:cc:b1:5d:6e:11:bf:1a:14:37:b9:
c9:ad:f1:3d:a3:9a:c3:98:43:ad:ae:89:c1:38:8f:ed:79:fa:
1b:6b:ce:ab:78:8e:a3:10:9f:be:5d:bd:1f:8e:fb:be:57:41:
ae:f6:6d:6c:19:79:1a:ff:58:83:12:6f:da:19:31:9a:7d:04:
49:20:eb:49:64:49:0f:d9:3b:6d:c9:1d:78:b0:ef:28:8a:fb:
a7:cd:f4:3d:e8:04:15:08:6f:63:f5:31:22:93:c5:e6:b4:04:
30:28:23:a5:53:b3:25:d9:fe:e3:12:d6:76:c3:f5:28:42:d0:
91:60:5c:71:9a:7f:79:c0:db:f9:2f:6d:ea:a6:09:6f:03:47:
06:9e:2c:46:d0:b7:83:28:d2:9a:ce:db:ff:cc:c0:6e:3f:dd:
7c:4c:a4:7e:41:ca:d3:94:68:64:1e:cc:e6:2a:47:a1:db:5d:
14:3c:09:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:11:00 2024 by rpki-client on console-ams.rpki-client.org