Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/ate1GKm4X1qKF1vVlBa_NNMfuxM.roa
File: ate1GKm4X1qKF1vVlBa_NNMfuxM.roa (raw, json)
Hash identifier: qhSl8IIruJt2DCtNtdt1mJ8DYzebMHwGekNtFjJEwEc=
Subject key identifier: 6A:D7:B5:18:A9:B8:5F:5A:8A:17:5B:D5:94:16:BF:34:D3:1F:BB:13
Certificate issuer: /CN=57b275b9bcc45dce8b3ef0172c96737800947a4e
Certificate serial: 018CC349564E6C10FF9D0F02F3D5B5816D84
Authority key identifier: 57:B2:75:B9:BC:C4:5D:CE:8B:3E:F0:17:2C:96:73:78:00:94:7A:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7J1ubzEXc6LPvAXLJZzeACUek4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/ate1GKm4X1qKF1vVlBa_NNMfuxM.roa
Signing time: Mon 01 Jan 2024 04:30:12 +0000
ROA not before: Mon 01 Jan 2024 04:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216415
IP address blocks: 2a05:cd00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/V7J1ubzEXc6LPvAXLJZzeACUek4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/V7J1ubzEXc6LPvAXLJZzeACUek4.mft
rsync://rpki.ripe.net/repository/DEFAULT/V7J1ubzEXc6LPvAXLJZzeACUek4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:56:4e:6c:10:ff:9d:0f:02:f3:d5:b5:81:6d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b275b9bcc45dce8b3ef0172c96737800947a4e
Validity
Not Before: Jan 1 04:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ad7b518a9b85f5a8a175bd59416bf34d31fbb13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:72:d0:d6:42:c6:f2:32:96:7d:9f:2d:ea:0c:
06:e6:d8:d1:fa:05:9e:41:cc:b7:f2:b2:11:8f:1f:
58:b2:67:92:73:51:8b:46:70:b9:b5:62:e8:2a:a5:
89:9a:a7:92:ce:2f:47:1b:7e:1d:ed:f5:53:d0:ea:
4c:38:cf:38:c1:3f:39:0c:73:ad:d8:a3:f3:39:7d:
d2:67:ba:4a:17:84:45:6a:6c:92:52:1c:d2:b4:ad:
2c:7b:dd:d4:bc:a0:d4:e5:ec:e4:7e:31:e5:92:7e:
b9:0f:86:de:fb:6f:51:ee:a9:fc:1c:32:c8:18:33:
ea:4d:0e:ad:05:c7:11:cd:dd:98:7a:1a:01:9f:54:
87:a5:2b:a9:b2:c1:c0:fa:f9:1f:d2:ad:08:b8:d3:
f3:79:40:3b:e3:90:f7:da:60:b9:ac:82:c5:7c:d6:
a3:6d:48:5b:4b:88:19:f1:12:8d:ae:b4:fa:93:7c:
53:6d:ad:9c:fb:07:65:76:43:0e:f0:91:25:c7:d6:
34:79:67:2d:43:43:dd:b9:df:bd:f2:d3:d7:e1:ab:
9c:6d:1b:8d:d3:6f:9b:89:57:44:a2:f3:85:43:46:
d0:4f:df:f9:bf:22:ca:c5:13:95:9a:91:64:c1:96:
1e:e6:0e:09:d0:11:d4:7c:70:5a:fb:0d:c2:34:95:
dc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D7:B5:18:A9:B8:5F:5A:8A:17:5B:D5:94:16:BF:34:D3:1F:BB:13
X509v3 Authority Key Identifier:
keyid:57:B2:75:B9:BC:C4:5D:CE:8B:3E:F0:17:2C:96:73:78:00:94:7A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7J1ubzEXc6LPvAXLJZzeACUek4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/ate1GKm4X1qKF1vVlBa_NNMfuxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/V7J1ubzEXc6LPvAXLJZzeACUek4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:cd00::/32
Signature Algorithm: sha256WithRSAEncryption
bd:f1:b0:41:fc:ed:f4:5f:be:b9:fc:1b:07:75:a6:2c:81:b1:
a4:9a:b3:3f:93:11:75:7a:7c:9c:f8:d3:c9:e9:ba:7d:bc:a1:
04:c8:75:27:f4:cc:95:7b:75:53:e2:c3:b2:d0:fb:29:fd:f4:
9c:85:1b:d0:6d:73:55:de:3a:be:bd:ef:4e:47:d5:77:47:eb:
0d:cc:ee:d4:b5:3e:09:3b:cc:8e:ed:8c:83:0e:8e:41:72:2b:
f8:e0:db:2b:84:91:09:65:04:0a:fc:bc:07:8d:fb:39:a2:e9:
83:6b:a6:4d:12:02:23:4a:67:7c:28:11:b9:e5:d9:2c:6e:44:
2e:8a:99:7a:af:18:51:7b:75:0e:ff:5e:51:a1:0c:34:b1:5a:
dd:22:50:e5:3b:cb:3a:b6:f4:ee:75:78:78:a2:42:1a:59:a0:
43:ef:f1:1d:24:92:38:1a:f1:61:23:3f:5a:b9:c7:db:3f:73:
7f:e3:0c:5a:9f:d9:0c:90:33:54:09:c4:aa:c6:e7:39:d1:c0:
72:df:79:07:ec:ae:2c:73:74:53:6c:33:f5:5d:10:85:42:0a:
9a:0d:f0:a1:77:ad:f0:29:43:03:e7:91:97:1f:c0:f6:b3:df:
54:16:83:2b:b3:a9:55:cd:ff:99:3c:75:fa:56:77:5d:d2:ae:
05:af:83:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 05:51:52 2024 by rpki-client on console-fra.rpki-client.org