Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/fAGxiND_Jv2nA6cClnn1EIQCPTc.roa
File: fAGxiND_Jv2nA6cClnn1EIQCPTc.roa (raw, json)
Hash identifier: GPM8FeaCvFvyOkYbHzq6UF8cVfiLv6sChbfpTuVxLz4=
Subject key identifier: 7C:01:B1:88:D0:FF:26:FD:A7:03:A7:02:96:79:F5:10:84:02:3D:37
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 018CCA2A592348E9BCDE5E1B762BE4F218ED
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/fAGxiND_Jv2nA6cClnn1EIQCPTc.roa
Signing time: Tue 02 Jan 2024 12:33:41 +0000
ROA not before: Tue 02 Jan 2024 12:33:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208751
IP address blocks: 2a06:e881:6700::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:59:23:48:e9:bc:de:5e:1b:76:2b:e4:f2:18:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 12:33:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c01b188d0ff26fda703a7029679f51084023d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:32:04:17:63:d8:44:b5:9a:c6:6e:19:2e:4a:
ff:9a:e8:63:cd:a6:10:73:51:8c:50:9e:83:95:8e:
8b:99:6c:b3:56:78:f2:22:2b:93:4f:34:5f:7b:8d:
40:4d:ed:33:fb:6c:f0:f2:80:2e:20:d6:73:70:79:
be:b4:ff:d1:1a:bb:e4:f4:aa:20:6c:de:38:ba:1f:
f0:65:07:0e:1a:ac:bc:f4:17:ef:9c:bf:bd:2f:ad:
b8:be:20:cf:77:20:28:04:6c:5b:17:ba:f7:1a:cc:
02:a8:7b:b8:47:91:b7:68:80:e1:37:e1:99:d2:57:
32:7c:90:85:d3:8d:dc:f9:60:8a:f7:96:d6:d8:4e:
d3:c1:62:84:01:54:40:5a:e4:e9:11:1c:26:c8:49:
49:0e:42:f6:64:b2:b2:81:57:da:ff:64:b0:65:86:
db:b1:b1:eb:94:e1:b7:72:ab:1e:cd:5c:2c:34:f8:
d3:b4:1a:08:c4:03:81:24:1f:28:d6:a0:de:08:e5:
9a:df:9f:c3:ca:fe:8d:b7:f0:75:2e:7c:4d:1e:db:
a9:e7:09:3f:21:14:d2:e6:b8:e4:bc:63:4c:ee:e5:
d0:40:da:e2:5b:b0:9d:5f:47:80:2d:e8:27:64:19:
2f:e8:74:79:35:43:04:ea:05:b6:3c:09:18:34:9a:
38:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:01:B1:88:D0:FF:26:FD:A7:03:A7:02:96:79:F5:10:84:02:3D:37
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/fAGxiND_Jv2nA6cClnn1EIQCPTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:6700::/44
Signature Algorithm: sha256WithRSAEncryption
d5:2a:dc:a0:dd:c3:d5:ca:d8:0a:a9:04:0d:7f:01:1f:9c:81:
c2:95:d1:e7:b7:5a:9a:4b:7a:fc:f6:e6:f7:a3:ab:42:8e:70:
5e:fd:3f:48:75:7c:44:ab:02:24:55:27:a0:1e:f1:c9:89:85:
05:0b:3f:d5:27:08:44:45:30:42:0d:27:09:85:7e:42:4c:17:
0e:c4:92:29:9b:ee:04:c2:7a:ae:06:1c:df:a6:90:15:bf:32:
3c:e0:57:e5:db:d4:cc:7b:3f:78:12:0e:b4:a8:bc:b3:7d:81:
57:f9:3b:6e:8a:75:5d:85:02:a6:d0:0f:85:38:6c:79:2e:76:
00:5a:c3:05:64:aa:92:86:ee:94:df:7b:bc:0a:ce:52:a6:4b:
c1:84:96:19:f7:82:81:f2:05:9f:63:bd:7e:0e:ac:00:d5:2b:
bb:6b:8a:0f:da:6a:39:7b:0b:7b:89:77:dd:0a:cf:48:8c:49:
06:10:2e:75:cc:32:77:46:6d:0e:b2:ee:82:68:1d:19:14:3c:
c4:f8:29:09:84:83:61:5e:3d:76:df:ff:06:fa:3f:a2:c4:46:
37:2c:92:7c:1b:9f:04:ee:3a:bd:63:5a:5e:65:ab:44:05:3e:
ca:cc:f0:f2:45:dd:22:3c:66:c0:30:9d:19:33:73:89:15:48:
41:dd:1e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:56:23 2024 by rpki-client on console-fra.rpki-client.org