Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/2RvPad9r4iTuZ143-0AZeF3V6XM.roa
File: 2RvPad9r4iTuZ143-0AZeF3V6XM.roa (raw, json)
Hash identifier: HeEShDdgfQuVCXpSDtSHFYuuTfo4hc8wB4drTO3yQpQ=
Subject key identifier: D9:1B:CF:69:DF:6B:E2:24:EE:67:5E:37:FB:40:19:78:5D:D5:E9:73
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 018CCA2A4E108109BC45022D93421659A0BA
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/2RvPad9r4iTuZ143-0AZeF3V6XM.roa
Signing time: Tue 02 Jan 2024 12:33:39 +0000
ROA not before: Tue 02 Jan 2024 12:33:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 2a06:e881:73ff::/48 maxlen: 48
2a06:e881:650f::/48 maxlen: 48
2a06:e881:9200::/45 maxlen: 48
2a06:e881:7340::/42 maxlen: 48
2a06:e881:9300::/44 maxlen: 48
2a06:e881:9700::/44 maxlen: 44
2a06:e881:9700::/48 maxlen: 48
2a06:e881:9600::/48 maxlen: 48
2a06:e881:9701::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:4e:10:81:09:bc:45:02:2d:93:42:16:59:a0:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 12:33:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d91bcf69df6be224ee675e37fb4019785dd5e973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0f:bd:c0:1a:08:a6:c8:db:c4:0a:58:3c:c8:
0f:21:e4:74:7c:f9:c5:67:07:08:51:ba:e6:4b:f6:
5a:51:37:e7:84:1b:c0:52:b7:e5:f1:38:45:30:e7:
2c:2b:55:af:62:ee:09:8c:91:86:65:85:89:0e:c7:
3a:19:67:da:52:a5:c7:5c:c6:7c:08:78:33:b2:a7:
7b:95:67:f8:6c:2c:48:9e:a9:09:02:66:31:93:60:
7e:92:53:d6:73:e1:d4:e7:12:fa:e1:17:3f:bd:c6:
47:13:bd:f2:19:fe:69:11:5b:fc:a9:6d:b4:ca:a3:
f3:0f:bf:84:24:e3:0e:51:aa:35:1c:dd:6f:f7:89:
32:4f:34:98:38:0b:f8:93:ee:14:bc:0c:80:3e:72:
19:fa:de:5f:5b:70:c9:02:15:5e:b5:0e:bb:ba:bd:
d7:f1:db:9e:14:83:17:67:fa:fe:5a:f1:d0:30:84:
e6:28:28:cd:3a:58:61:a4:ac:95:83:23:d4:40:c3:
39:7c:57:b3:bd:67:af:ef:14:ad:89:e3:22:3d:58:
1a:26:b7:92:39:4c:ed:ce:1e:77:1b:e1:95:1a:b1:
b3:bd:76:5e:ff:bc:10:70:ea:ac:72:14:43:b6:74:
5b:13:3c:52:1a:82:1d:10:f9:68:0e:8b:14:9d:bf:
1f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1B:CF:69:DF:6B:E2:24:EE:67:5E:37:FB:40:19:78:5D:D5:E9:73
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/2RvPad9r4iTuZ143-0AZeF3V6XM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:650f::/48
2a06:e881:7340::/42
2a06:e881:73ff::/48
2a06:e881:9200::/45
2a06:e881:9300::/44
2a06:e881:9600::/48
2a06:e881:9700::/44
Signature Algorithm: sha256WithRSAEncryption
72:a7:56:df:62:e0:33:16:b8:2a:14:46:15:e3:89:33:33:c5:
46:3f:4f:46:2b:fb:76:66:ea:dd:1b:fe:6c:7c:bf:e6:a8:13:
b2:9e:e5:30:03:ab:c3:14:3c:ec:4e:d9:b7:96:83:4d:8a:59:
82:ad:fd:75:60:8e:98:e4:a2:c2:67:fc:78:a0:f3:63:14:bb:
1f:37:cb:2b:05:fe:77:65:4a:a6:45:4d:a0:20:73:46:ef:7f:
dd:5e:8b:a2:f4:59:92:d6:b4:9f:63:40:39:ab:37:3b:f8:90:
cf:85:bf:d9:27:4d:61:36:63:29:c9:97:23:9d:ba:46:45:45:
5b:d2:9f:24:51:13:b4:ce:41:9e:ba:e9:a6:0c:b5:08:8a:60:
ad:29:f0:34:46:9a:08:b0:0a:08:3b:68:f1:aa:3b:ae:75:19:
a7:0a:be:20:bf:8f:0c:90:69:b6:20:be:d8:d1:c3:c7:7e:31:
6e:de:d1:d7:40:2b:44:83:f0:37:9d:07:75:89:60:35:24:d4:
72:6b:e8:25:34:43:67:cd:e6:b0:2d:47:69:0a:a0:e1:9c:7f:
bf:ef:27:46:2f:a7:63:69:13:da:78:b0:d1:b0:60:ae:58:68:
31:48:40:41:33:4c:6f:52:db:48:8e:a0:d7:6d:70:3a:40:96:
1e:c5:8e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 10:52:19 2024 by rpki-client on console-ams.rpki-client.org