Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/RX8wjXcZUY7DYf9hW2f9H3IS-pg.roa
File: RX8wjXcZUY7DYf9hW2f9H3IS-pg.roa (raw, json)
Hash identifier: T4vrBMD6d0jVff9P7T+kB8g+f/Cgzygbns7bYlwCo6w=
Subject key identifier: 45:7F:30:8D:77:19:51:8E:C3:61:FF:61:5B:67:FD:1F:72:12:FA:98
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 018CCA2A4E62EFF8A2B7B1CFC5B240C08CBD
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/RX8wjXcZUY7DYf9hW2f9H3IS-pg.roa
Signing time: Tue 02 Jan 2024 12:33:39 +0000
ROA not before: Tue 02 Jan 2024 12:33:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 2a06:e881:73ef::/48 maxlen: 48
2a06:e881:73ff::/48 maxlen: 48
2a06:e881:650f::/48 maxlen: 48
2a06:e881:9208::/45 maxlen: 48
2a06:e881:9200::/45 maxlen: 48
2a06:e881:7340::/42 maxlen: 48
2a06:e881:9700::/44 maxlen: 44
2a06:e881:9300::/44 maxlen: 48
2a06:e881:9600::/48 maxlen: 48
2a06:e881:9700::/48 maxlen: 48
2a06:e881:9701::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:4e:62:ef:f8:a2:b7:b1:cf:c5:b2:40:c0:8c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 12:33:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=457f308d7719518ec361ff615b67fd1f7212fa98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:23:f4:8b:70:16:8a:e0:e6:bc:de:4f:a7:28:
b4:09:51:fe:ff:00:e3:3a:b9:b7:b9:03:62:68:d7:
14:69:29:d8:fc:f3:ec:4a:38:16:dd:d2:02:7c:f5:
a3:0a:e8:bd:de:f5:f0:4e:0d:60:f4:db:16:93:dd:
8e:3c:46:09:6c:4e:6b:77:b7:89:fc:fd:d9:b6:dc:
7d:9a:d5:95:b3:fb:41:73:3f:55:47:3e:42:b6:33:
dc:a3:3a:68:29:85:18:c4:36:89:58:4a:5f:d7:aa:
bd:d1:5d:be:e2:4a:b2:b1:6b:7a:8e:a0:b9:27:f8:
af:99:40:c5:df:b0:75:a6:03:9c:62:ee:a4:fa:7a:
70:9b:c3:16:9e:52:27:bf:1c:04:0e:fc:8e:9c:f5:
65:1f:77:44:b7:1c:05:30:95:9d:f5:9e:49:23:8d:
58:94:01:37:9d:fc:db:ff:4a:09:7d:44:88:90:a4:
ac:70:c5:46:76:e4:75:77:a9:eb:f5:15:11:ed:a9:
02:e2:e2:08:6c:35:81:15:27:95:e0:91:9b:cf:68:
75:17:16:7a:5c:0c:30:bd:38:ac:63:3f:0b:a3:a0:
e2:87:fb:88:ae:f9:10:5f:d7:9f:86:da:e4:13:38:
ef:bb:5e:27:aa:77:cf:da:b1:66:d3:0c:c2:80:6e:
3d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7F:30:8D:77:19:51:8E:C3:61:FF:61:5B:67:FD:1F:72:12:FA:98
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/RX8wjXcZUY7DYf9hW2f9H3IS-pg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:650f::/48
2a06:e881:7340::/42
2a06:e881:73ef::/48
2a06:e881:73ff::/48
2a06:e881:9200::/44
2a06:e881:9300::/44
2a06:e881:9600::/48
2a06:e881:9700::/44
Signature Algorithm: sha256WithRSAEncryption
1a:6b:27:3b:43:58:54:30:0c:21:38:bb:0a:98:56:79:ff:7f:
da:e5:e7:d6:c6:54:19:e1:42:2e:b1:ee:89:7e:b3:0f:b2:92:
18:31:3d:15:35:45:7b:b7:d9:14:74:18:f9:cb:b2:cd:0d:7f:
70:1f:f1:03:87:72:f2:53:fc:b9:7b:4f:eb:ec:30:c2:bb:58:
e9:31:9c:37:f3:04:1e:a1:a3:7c:34:ff:0d:39:20:66:70:c2:
b1:2f:1f:ba:cd:65:d5:23:66:21:95:f0:92:45:32:89:c0:69:
c3:93:a0:ce:0a:71:74:c7:62:f5:8c:c9:37:02:79:88:08:4d:
50:44:b5:e1:ce:37:3b:75:04:2b:ec:e5:56:af:a9:09:cf:03:
85:f7:2e:8d:be:42:f0:64:ba:c2:a6:d7:90:a1:55:18:8b:b1:
43:8c:d6:4b:b5:43:32:ef:84:2e:f4:2e:f8:48:96:07:c2:c5:
d5:5d:37:33:6f:24:32:4c:03:5f:df:ab:73:92:16:d4:ba:c6:
b8:5c:cf:12:d7:09:08:31:aa:8d:bd:6f:90:d4:72:02:af:be:
fe:3d:a8:d9:23:02:3a:62:f5:be:e4:f4:f5:14:b7:84:0a:93:
7a:fe:d9:70:d4:55:53:fb:33:66:75:36:7a:53:11:d3:8c:5b:
05:7a:f6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:41:43 2024 by rpki-client on console-fra.rpki-client.org