Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/wTb0gAdVGB3Hp20rxCFMe6DgMng.roa
File: wTb0gAdVGB3Hp20rxCFMe6DgMng.roa (raw, json)
Hash identifier: yJe94moiNaZCuLQJ1nsl2exPv8gdLnUXjfywkT8Sx7s=
Subject key identifier: C1:36:F4:80:07:55:18:1D:C7:A7:6D:2B:C4:21:4C:7B:A0:E0:32:78
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 01903B9897C30EC787CB976645AE59159BDD
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/wTb0gAdVGB3Hp20rxCFMe6DgMng.roa
Signing time: Fri 21 Jun 2024 16:19:34 +0000
ROA not before: Fri 21 Jun 2024 16:19:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214646
IP address blocks: 2a0a:79c0:400::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3b:98:97:c3:0e:c7:87:cb:97:66:45:ae:59:15:9b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jun 21 16:19:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c136f4800755181dc7a76d2bc4214c7ba0e03278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:08:12:b5:b9:29:4e:14:a6:16:91:27:b6:54:
d3:1f:fd:9e:dc:3b:97:f3:fe:4c:0f:46:15:a9:b8:
04:20:e9:36:bd:6c:ac:e4:ed:6c:a2:fe:4d:58:03:
7f:98:ae:0b:dc:7e:cc:16:10:da:67:b0:50:e8:85:
04:83:3a:5c:e2:81:ab:f8:c7:f9:06:d4:6d:2e:1d:
6f:ad:ba:3b:59:5b:31:1c:72:98:64:20:45:04:7b:
5e:94:84:bf:a6:ee:eb:90:e7:9f:a9:d5:63:20:fc:
1c:67:f1:6e:0a:84:7b:f6:30:12:ef:01:ef:00:ca:
9d:23:a5:80:4c:bd:bb:fc:73:5d:cb:b3:c8:bd:40:
65:5d:b4:1b:10:38:3e:96:d9:27:79:bc:95:1e:44:
ce:e1:f1:cc:df:5f:6a:d8:8c:ca:e8:d2:23:d6:b1:
18:25:39:a4:de:1d:49:db:af:f1:be:c4:99:dd:d9:
c7:b5:39:9e:62:5e:ea:6d:f5:23:85:c4:fe:de:c0:
86:30:1a:96:93:10:82:e7:39:d1:33:19:36:40:34:
9a:2e:84:49:3d:07:9f:f3:aa:ea:8e:b0:b1:b0:74:
e6:39:ff:9e:f6:e9:8a:a1:7c:db:d7:17:a0:d8:8a:
40:ef:c6:26:93:dc:da:a8:e3:e7:ce:0d:99:b7:09:
0e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:36:F4:80:07:55:18:1D:C7:A7:6D:2B:C4:21:4C:7B:A0:E0:32:78
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/wTb0gAdVGB3Hp20rxCFMe6DgMng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:79c0:400::/44
Signature Algorithm: sha256WithRSAEncryption
a9:6e:60:87:71:13:ae:0e:19:04:a0:19:33:9c:28:84:b5:a7:
66:8d:14:97:bc:2b:79:63:f8:84:18:91:01:cd:2f:78:ff:86:
48:94:ea:6f:cc:73:de:48:93:7d:9b:5d:55:65:4a:a8:b4:ae:
1d:79:fd:de:24:56:87:03:43:7e:dd:7d:a6:cd:b1:77:d2:7f:
c0:bf:18:f0:9a:68:35:82:b7:04:bd:49:01:bf:08:c0:18:60:
6f:8a:03:f6:a2:eb:dd:7a:ef:ea:35:20:2e:23:19:26:2b:82:
37:7f:2e:20:c3:07:3d:17:50:07:25:53:0b:d7:dd:15:b2:05:
e9:6f:10:de:f1:c3:ec:07:07:28:20:14:ab:1a:b7:03:5d:16:
09:eb:1c:88:15:6c:66:6b:02:95:7d:3b:0d:44:d7:71:08:f3:
55:a9:46:16:2c:ff:a9:6a:5d:6e:84:55:6d:ee:38:5f:94:fd:
f0:d7:86:49:a3:36:60:23:00:e5:15:7c:5c:79:f8:05:7d:37:
2c:94:ea:f9:ba:10:6f:f6:72:d0:61:17:e7:70:86:08:30:d7:
f6:c5:1a:4c:95:8b:5d:f9:52:c2:de:7c:3c:7d:96:40:ac:80:
99:dc:77:d0:bd:6a:f3:96:c5:29:50:fa:e1:13:af:7b:d6:c2:
8c:5d:a2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:56:01 2024 by rpki-client on console-ams.rpki-client.org