Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/xLgokziNR-YYQ6AMg7k4DpqeIbY.roa
File: xLgokziNR-YYQ6AMg7k4DpqeIbY.roa (raw, json)
Hash identifier: 6ESA9VZ6paosGSkbHx0VY5ShC77wNeSwlr/q7Ng5v7w=
Subject key identifier: C4:B8:28:93:38:8D:47:E6:18:43:A0:0C:83:B9:38:0E:9A:9E:21:B6
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 018D409EE5144A9C68B45A9CA59814B2AF33
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/xLgokziNR-YYQ6AMg7k4DpqeIbY.roa
Signing time: Thu 25 Jan 2024 12:36:11 +0000
ROA not before: Thu 25 Jan 2024 12:36:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43317
IP address blocks: 2a0a:4784::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:40:9e:e5:14:4a:9c:68:b4:5a:9c:a5:98:14:b2:af:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jan 25 12:36:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4b82893388d47e61843a00c83b9380e9a9e21b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:04:b9:6f:67:e4:cf:17:23:ed:a6:ba:13:c9:
a0:6d:62:c7:13:85:a4:ba:ad:b2:b6:65:9f:50:79:
38:d0:35:67:a4:27:4e:8f:cf:49:e7:96:d3:fd:26:
af:71:5a:d3:f0:6f:56:8c:e1:12:05:1e:6e:43:c3:
b8:3a:83:7c:76:77:b1:23:bd:e1:e5:d8:ba:8b:1b:
b8:6a:20:c9:5c:16:84:66:c5:cc:88:02:18:8b:83:
32:0f:cc:b7:f3:91:45:84:be:30:6b:65:30:8e:de:
44:0b:80:df:b8:84:7d:2d:a3:90:44:88:17:34:65:
c8:d2:96:7f:51:c7:e8:9b:16:52:0a:e6:d0:90:a8:
ea:62:61:02:09:99:74:50:f9:a9:29:5e:bd:cc:b6:
04:45:25:b3:1f:b1:98:5f:89:13:ac:75:91:a8:48:
00:91:4f:12:80:80:44:b3:18:85:bd:e4:33:a3:df:
ed:75:fd:d9:e1:00:82:58:44:7b:0e:fb:41:fa:08:
a2:e9:4e:e8:2a:f9:5a:9a:e4:69:ba:46:cf:fb:77:
09:2a:7a:1a:a1:ae:c9:fe:e6:ab:d3:97:db:4a:1b:
83:49:9c:d4:70:c2:7a:a7:75:88:8b:c9:c6:84:c0:
a4:fb:1a:49:2f:78:08:c4:e4:e0:56:fa:01:59:14:
a1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B8:28:93:38:8D:47:E6:18:43:A0:0C:83:B9:38:0E:9A:9E:21:B6
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/xLgokziNR-YYQ6AMg7k4DpqeIbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:4784::/32
Signature Algorithm: sha256WithRSAEncryption
ae:68:f5:38:5f:dd:55:27:45:37:d4:c2:21:cb:46:fa:9f:3f:
fe:83:b5:0f:70:6d:1e:57:b7:53:49:4e:c1:d4:d6:c2:49:34:
9a:a8:3f:ad:ea:3b:6b:f1:22:ec:0d:3e:ec:fe:c5:2f:5a:67:
eb:2e:9d:6c:cf:77:fc:91:27:b4:c7:45:a2:a6:ce:9b:85:4d:
de:5f:23:b3:d5:3e:f5:b0:26:51:8d:70:e5:81:e1:05:35:3b:
59:9a:69:b2:f0:d4:f2:90:cd:da:1c:83:2c:3c:e9:e0:87:a4:
91:02:2d:7e:da:6f:5b:22:1d:49:9f:a5:0d:9e:90:b6:1c:45:
ea:e3:c1:87:34:46:1e:5e:12:7b:35:9d:42:b2:23:27:c4:af:
dd:34:57:49:e1:56:38:9b:6e:98:53:da:4d:d0:63:dc:f6:ab:
bb:99:e8:03:bf:f9:02:c9:4b:d2:bf:98:e8:40:a3:0e:d1:7b:
84:ee:53:36:5a:1a:fd:8f:8f:b1:b3:62:00:8b:2f:f2:e7:a6:
f9:4d:04:6f:a9:ec:7e:5c:2a:db:c7:56:7c:bd:39:e8:1d:ec:
b0:ee:9a:55:0b:2c:c1:b5:11:38:96:01:af:c5:80:8d:b9:b5:
b2:67:ce:12:84:e1:49:52:31:56:ce:42:33:af:55:3f:7a:c8:
6e:dc:c8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 21:12:34 2024 by rpki-client on console-fra.rpki-client.org