Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/8siTdEEjMZ5PPJmfeyQJ3vXD0rg.roa
File: 8siTdEEjMZ5PPJmfeyQJ3vXD0rg.roa (raw, json)
Hash identifier: tXhTEJ8vA8CSaYzha3sMVmUih4eMwBD0jjV61+mz70I=
Subject key identifier: F2:C8:93:74:41:23:31:9E:4F:3C:99:9F:7B:24:09:DE:F5:C3:D2:B8
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 018CCA2A5AC429A6F11CCADE3C21CC98B1AC
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/8siTdEEjMZ5PPJmfeyQJ3vXD0rg.roa
Signing time: Tue 02 Jan 2024 12:33:42 +0000
ROA not before: Tue 02 Jan 2024 12:33:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210090
IP address blocks: 2a06:e881:5100::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:5a:c4:29:a6:f1:1c:ca:de:3c:21:cc:98:b1:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 12:33:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2c893744123319e4f3c999f7b2409def5c3d2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7e:7c:ce:40:5f:19:96:d2:ec:9b:5d:32:3c:
64:b1:ad:40:ab:9f:c0:30:b7:6c:a4:0c:17:50:27:
1a:31:11:e5:da:0d:0c:cf:57:74:c3:31:78:d0:5f:
c9:6e:ab:b6:3e:90:34:1f:c2:fe:de:34:e0:f3:1d:
9a:1b:83:ec:b8:8b:fe:9d:f4:e2:c7:1c:29:49:c0:
ed:b0:fe:15:1e:6d:16:96:c6:89:ad:12:15:32:4f:
67:fa:d5:87:c6:f8:de:47:00:e5:0a:e8:36:c5:58:
62:cd:57:29:61:0f:87:cf:b6:1f:1c:dd:03:c7:3a:
a3:79:dd:58:52:dc:41:02:77:b0:6a:57:1f:76:47:
82:69:4d:b6:86:de:40:13:ca:5b:65:ef:ab:53:75:
f3:36:a3:84:70:89:17:70:35:fb:a4:4d:b0:60:3b:
f4:06:46:2e:6a:49:ca:f2:c5:ba:c8:ef:79:a8:33:
ac:1e:55:64:ae:99:43:14:2c:5f:78:08:3c:35:18:
76:30:0d:bc:11:3d:48:44:97:62:99:c6:ff:4c:ac:
5e:5f:f8:3a:19:d8:7a:de:f4:ba:6e:a0:17:f8:88:
4e:41:fc:07:9c:10:63:b3:b7:7b:bd:b8:6f:12:29:
8e:2f:2a:ce:b7:f5:d3:94:0b:e1:34:b6:b4:67:5d:
e3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C8:93:74:41:23:31:9E:4F:3C:99:9F:7B:24:09:DE:F5:C3:D2:B8
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/8siTdEEjMZ5PPJmfeyQJ3vXD0rg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:5100::/44
Signature Algorithm: sha256WithRSAEncryption
93:b8:33:4e:de:fd:00:f0:02:cc:44:00:7b:8e:67:87:43:c5:
64:f3:70:15:4a:dd:6b:a8:eb:2f:40:d1:42:62:bc:f9:98:26:
80:e3:50:ee:74:b4:58:04:3e:37:46:68:ec:39:8b:8c:39:5d:
25:79:ba:da:d7:93:ee:8f:29:6f:5d:e7:8f:7c:c5:32:75:e8:
3e:66:3e:45:85:c5:ba:94:c3:23:fe:ab:8b:76:1a:4c:a9:5f:
06:99:23:a0:ba:40:81:32:24:45:3a:9a:22:77:89:ef:5e:6b:
fc:b0:60:30:de:a8:ad:0c:60:83:33:aa:68:ca:45:f6:48:35:
8f:14:cc:e3:bb:3d:4b:e8:44:6c:2a:0e:93:e7:b1:0d:2b:48:
35:f4:5d:e5:a6:1e:90:ec:bf:01:0e:e1:c3:a2:46:b8:12:50:
17:40:1d:d3:01:b1:d7:c9:fb:9d:d8:e4:60:3f:57:7e:26:89:
7a:a9:1f:de:2a:a0:64:fb:c6:d9:ea:1d:b0:87:40:f0:7a:bb:
cf:a3:fd:eb:90:32:c0:7e:b1:a3:9a:ed:4c:d2:ab:49:99:a4:
1d:cb:dd:5b:7a:59:57:2c:9b:67:24:f1:56:10:bc:a3:24:24:
0a:ce:8d:11:3b:6e:63:6f:d8:28:87:0d:95:b6:00:ec:4d:a7:
25:c1:3a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 18:37:01 2024 by rpki-client on console-fra.rpki-client.org