Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/Bj2LFAbOgKMR2NXBjTclhHV1aag.roa
File: Bj2LFAbOgKMR2NXBjTclhHV1aag.roa (raw, json)
Hash identifier: Q830XGnF8ByDmLrlT/LkmqVLHKlTHq70xGiNb0VwqA0=
Subject key identifier: 06:3D:8B:14:06:CE:80:A3:11:D8:D5:C1:8D:37:25:84:75:75:69:A8
Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial: 018CC4930B8B2886EDFCC3F7D2724E170ABD
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/Bj2LFAbOgKMR2NXBjTclhHV1aag.roa
Signing time: Mon 01 Jan 2024 10:30:20 +0000
ROA not before: Mon 01 Jan 2024 10:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199015
IP address blocks: 2a01:190:39::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:0b:8b:28:86:ed:fc:c3:f7:d2:72:4e:17:0a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
Validity
Not Before: Jan 1 10:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=063d8b1406ce80a311d8d5c18d372584757569a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8a:50:b8:cd:cb:a1:9b:6d:03:ff:0b:5b:c3:
57:fd:b5:b7:e0:38:71:0e:29:0c:dd:86:8d:a3:f2:
ae:48:80:83:89:d4:c6:5b:23:a8:f6:5e:f7:78:a3:
29:11:9b:a0:d6:4d:da:61:34:7b:2b:2e:e3:f6:44:
d1:1b:47:0f:7c:d4:ce:d5:9d:49:89:6d:b3:12:77:
79:42:ee:64:f2:e2:e5:4d:55:20:81:ed:c9:56:86:
9f:1b:5f:91:83:20:8a:c5:9e:52:d9:5a:ad:02:c8:
ac:af:22:0f:da:f7:4c:65:b6:41:a0:58:d1:de:83:
f0:13:3e:4e:a2:fb:a3:78:d2:ae:de:b1:02:f2:2c:
c5:19:00:16:e4:ea:f1:24:08:76:a8:bd:ff:bf:b0:
84:d9:79:4f:07:a1:44:89:aa:32:9c:f1:96:e6:23:
54:b4:5b:92:08:26:a1:4b:66:43:0a:b3:c6:52:74:
dc:3c:b2:6f:92:05:cd:21:94:a8:fa:08:41:56:e5:
51:60:7e:51:cc:92:98:d9:2d:6f:f4:08:f1:11:0e:
e5:bb:3e:8a:f1:73:22:c0:8e:23:6d:8c:1e:99:62:
5b:9d:70:26:0c:9a:cf:6c:85:5e:85:2a:9e:d2:80:
90:5c:11:c9:be:50:b8:d6:77:60:ea:a6:eb:9b:8c:
d2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3D:8B:14:06:CE:80:A3:11:D8:D5:C1:8D:37:25:84:75:75:69:A8
X509v3 Authority Key Identifier:
keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/Bj2LFAbOgKMR2NXBjTclhHV1aag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:190:39::/48
Signature Algorithm: sha256WithRSAEncryption
30:d1:65:d4:d2:68:f5:58:32:71:b7:12:c4:1a:e1:f2:da:d6:
f0:32:55:46:04:ed:b2:1b:9e:72:6b:51:9e:4d:a5:85:a1:d9:
da:e0:00:21:09:83:bd:b5:85:df:4b:1b:89:50:72:0a:84:ad:
ad:8e:43:67:2f:13:c6:86:2f:79:79:b4:8f:cf:7b:65:cc:82:
04:3b:7d:b8:80:20:c9:f2:bb:d0:88:47:ec:4a:32:59:27:b6:
ca:77:5a:c7:c7:0c:4e:7d:fd:6c:4a:a6:bf:88:18:e5:9d:82:
89:c2:02:97:2a:19:93:ff:90:f8:5f:59:d8:2d:ec:22:ad:f9:
b6:3b:28:91:7a:03:1b:46:de:60:69:f8:90:7d:6e:b7:19:86:
66:23:a8:80:76:85:fa:6b:41:5f:43:c2:95:a9:fb:22:dc:6d:
2c:f8:3a:4d:3d:17:33:3c:6b:e5:e3:37:3a:99:ac:4b:c4:b0:
93:d1:ec:52:a2:3b:80:1a:1b:76:50:00:2d:2d:ce:3f:ca:ef:
00:34:48:74:15:20:c5:84:8c:e8:a6:a6:5e:6a:d5:27:69:af:
98:89:81:61:bf:a6:12:7d:c5:52:1e:5e:06:17:76:f6:c9:06:
6d:c0:0e:8d:e8:1c:89:09:2a:51:75:0a:17:92:dc:15:77:0d:
a4:56:9d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 18:22:33 2024 by rpki-client on console-ams.rpki-client.org