Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/69tx3oUI5NlrGzIuFKtG_syWMS4.roa
File: 69tx3oUI5NlrGzIuFKtG_syWMS4.roa (raw, json)
Hash identifier: 5j34qPFlgh5PbJDbTkx1pEEt6mjB//x3Ltlec41e1ek=
Subject key identifier: EB:DB:71:DE:85:08:E4:D9:6B:1B:32:2E:14:AB:46:FE:CC:96:31:2E
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 018CC2DB0DC36527DE7DEB05A976F3CA645C
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/69tx3oUI5NlrGzIuFKtG_syWMS4.roa
Signing time: Mon 01 Jan 2024 02:29:44 +0000
ROA not before: Mon 01 Jan 2024 02:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213388
IP address blocks: 2a0f:5707:fff7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:0d:c3:65:27:de:7d:eb:05:a9:76:f3:ca:64:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 1 02:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ebdb71de8508e4d96b1b322e14ab46fecc96312e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:49:08:fd:1b:0e:f1:78:7a:81:93:5b:67:0d:
7e:98:fe:5b:45:f2:a1:29:ab:35:69:6d:68:ab:4b:
02:dc:12:3f:72:73:2c:b6:cb:80:97:da:43:51:fb:
c1:38:22:f2:51:e8:dd:53:94:6f:c5:65:ec:45:4c:
99:8a:9c:61:88:eb:f6:23:86:04:5f:d3:f9:a9:78:
d1:58:f6:bc:30:45:fc:dc:17:02:62:ee:a0:fa:2f:
5b:87:45:64:11:7c:6f:07:6c:e0:f9:27:3e:23:06:
62:33:d7:84:5f:19:0b:e3:39:55:04:dd:43:a7:23:
fc:10:0c:e7:e3:e7:01:69:95:e2:3b:b0:e9:e2:3a:
b2:83:1b:54:a5:f3:1a:05:69:04:43:d1:99:d8:ed:
8e:ee:6d:8f:8b:c8:2d:89:45:ee:0e:f3:77:61:f7:
ce:d4:84:05:a5:5f:1c:37:8f:87:c4:98:94:f5:e0:
c8:d2:a3:26:63:92:57:de:37:64:9b:cd:9a:99:f9:
8b:8f:9c:97:26:27:30:26:88:ef:8b:be:00:51:92:
39:6a:09:47:aa:f9:a0:e6:29:c6:07:c1:b8:68:39:
1e:e2:d9:5e:27:02:e1:92:5a:be:13:76:e0:36:4e:
91:62:13:bd:df:83:ab:7a:ac:17:9c:36:94:88:f2:
8f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DB:71:DE:85:08:E4:D9:6B:1B:32:2E:14:AB:46:FE:CC:96:31:2E
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/69tx3oUI5NlrGzIuFKtG_syWMS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:fff7::/48
Signature Algorithm: sha256WithRSAEncryption
7f:f3:dd:ab:5f:70:29:3e:20:75:ef:dc:91:70:d6:bd:f7:f7:
c6:ff:d8:44:ef:93:ea:c6:99:11:69:62:0e:32:de:d6:97:87:
c4:b4:3f:90:27:3d:f1:9a:0d:7a:50:c3:87:1c:d0:2e:42:b2:
2d:a2:d4:74:d4:9b:1b:2e:f9:c7:81:d9:25:22:96:f0:35:32:
f8:5d:f0:df:ac:31:8c:ba:04:ef:16:a1:f2:12:d3:d1:aa:96:
cd:0c:cf:c8:7b:02:c6:f6:40:bc:8d:18:2f:3a:58:09:d4:c4:
f4:81:7c:5a:54:1d:5c:69:c0:3e:7e:5a:34:ea:fa:ee:70:95:
3f:90:7a:01:3f:70:96:d0:98:3b:99:8c:46:7a:00:c8:fa:24:
5a:9a:5f:95:38:54:9d:29:a6:25:b7:41:13:c8:6e:74:e6:b7:
00:cf:d0:8a:0c:eb:29:4f:81:e0:b5:1a:ec:18:b0:d9:f5:33:
27:fc:71:a1:25:06:de:96:63:33:9c:51:3a:4a:d1:d3:2c:fc:
53:2a:69:5f:5e:c8:ca:65:5b:3e:a3:0d:45:e1:bd:c6:98:7a:
75:1c:df:d3:cb:a1:ed:df:21:02:92:50:57:31:af:5f:61:b1:
84:08:3c:05:26:bb:a3:0f:1a:44:f7:4e:51:34:ae:16:f5:e3:
ab:3f:39:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:05:31 2024 by rpki-client on console-ams.rpki-client.org