Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/4yXg7FfDFvVHTPL7kPVxRBijnCY.roa
File: 4yXg7FfDFvVHTPL7kPVxRBijnCY.roa (raw, json)
Hash identifier: wdW8U+53e56cWGi5HjUZx7XUp/8QoOMJlmgQUJcfsio=
Subject key identifier: E3:25:E0:EC:57:C3:16:F5:47:4C:F2:FB:90:F5:71:44:18:A3:9C:26
Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial: 018CC64B686D1C0B252AF16495072EEB6CE8
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/4yXg7FfDFvVHTPL7kPVxRBijnCY.roa
Signing time: Mon 01 Jan 2024 18:31:19 +0000
ROA not before: Mon 01 Jan 2024 18:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211227
IP address blocks: 2a0e:46c4:1600::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:68:6d:1c:0b:25:2a:f1:64:95:07:2e:eb:6c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Validity
Not Before: Jan 1 18:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e325e0ec57c316f5474cf2fb90f5714418a39c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a6:9a:ff:df:74:fa:99:88:c3:74:db:f7:3b:
60:72:f6:90:b2:28:fa:1d:8e:35:8e:a3:c7:13:cd:
e8:fa:e5:5b:33:eb:13:a4:0b:87:e6:b4:b0:59:ed:
5f:7c:9e:d6:9e:18:7f:95:9d:8a:27:46:c7:0e:55:
a5:a3:64:d7:b7:d5:47:1a:88:f2:11:d1:26:e3:30:
24:de:cc:62:e3:e3:f8:9d:d5:40:d8:5d:26:88:c1:
8e:62:7f:58:c3:11:fb:d6:3e:30:c2:d7:97:8b:fa:
4f:18:b2:a4:60:ca:52:79:c3:93:b8:7b:b9:28:5c:
07:f8:92:50:46:e2:2e:61:a9:61:f2:55:cc:8e:71:
42:ec:f0:28:07:4c:e6:70:78:1a:ba:42:7c:cf:03:
e4:91:78:f2:4e:a0:4c:73:08:4f:2b:5b:69:e1:5d:
79:c0:68:68:ca:18:0f:0c:4e:a6:b8:16:fd:4f:6b:
68:05:0d:03:6f:5c:46:66:16:aa:4a:9f:0f:34:7c:
87:61:91:76:51:43:39:71:96:6c:7c:07:cd:f0:c9:
fe:fb:e9:21:1b:7c:c2:d7:49:bf:2c:85:b0:83:b6:
c6:81:13:4f:ee:7a:d0:ca:42:7a:9c:2d:30:be:55:
b6:62:78:68:17:42:1b:4d:ee:8b:f0:ac:95:74:c0:
2a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:25:E0:EC:57:C3:16:F5:47:4C:F2:FB:90:F5:71:44:18:A3:9C:26
X509v3 Authority Key Identifier:
keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/4yXg7FfDFvVHTPL7kPVxRBijnCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:46c4:1600::/40
Signature Algorithm: sha256WithRSAEncryption
12:de:15:ea:46:5c:79:10:0e:33:88:aa:e7:c6:d2:b7:a9:16:
18:82:79:50:d7:fc:40:64:ae:0d:9a:89:b0:06:6c:dc:b0:03:
86:d7:70:c0:16:d9:cc:df:54:71:f4:45:28:e6:98:1e:2d:b9:
75:1c:90:83:61:bc:f2:d7:e5:30:be:1e:ee:d8:11:ae:6f:38:
8c:a5:2b:16:54:72:60:7c:22:80:96:67:98:ef:38:69:c5:5d:
5a:16:e2:ea:30:65:0c:49:c1:67:40:d5:db:5a:bb:62:96:95:
b8:1f:47:6e:a9:d2:5a:7a:5a:4a:85:01:13:25:8a:04:a5:7a:
98:07:4e:d3:2f:ef:a8:0f:fe:0b:e6:fa:f4:ca:2d:38:28:b7:
56:7c:f4:41:21:38:90:bc:d0:1a:8e:40:79:1d:24:76:3c:c9:
b0:f6:45:1d:97:90:6e:29:c8:1f:4b:cd:65:32:80:3c:ee:47:
be:b5:72:62:bf:8c:c7:cf:6f:36:96:b7:34:fb:86:48:6f:d1:
dc:83:ee:6a:3f:91:58:3d:78:e4:f0:3a:8c:78:42:96:d5:89:
d8:4a:25:b2:20:b2:43:d5:89:eb:80:f9:a3:a1:05:41:9d:ac:
0c:eb:b6:b9:7e:8a:00:37:52:f9:94:d6:5c:35:f8:be:9f:7e:
99:a1:a1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:14:12 2024 by rpki-client on console-ams.rpki-client.org