Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/Xk4Vy5CvRP9Mzt0la6q89tXrno4.roa
File: Xk4Vy5CvRP9Mzt0la6q89tXrno4.roa (raw, json)
Hash identifier: +9tLaPSB1hjrsXnzTD13UJznCbAOt1TaKSpeOufKlpQ=
Subject key identifier: 5E:4E:15:CB:90:AF:44:FF:4C:CE:DD:25:6B:AA:BC:F6:D5:EB:9E:8E
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 018CC2DB03AAC09AFE8626CBD6E6ADC55232
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/Xk4Vy5CvRP9Mzt0la6q89tXrno4.roa
Signing time: Mon 01 Jan 2024 02:29:42 +0000
ROA not before: Mon 01 Jan 2024 02:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207469
IP address blocks: 2a0f:5707:ffe0::/46 maxlen: 48
2a0f:5707:fff3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:03:aa:c0:9a:fe:86:26:cb:d6:e6:ad:c5:52:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 1 02:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e4e15cb90af44ff4ccedd256baabcf6d5eb9e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:be:4e:bb:66:ab:9e:5d:0f:44:e4:e9:9d:d4:
a4:0e:7c:1d:fb:18:3c:f8:8e:21:c8:fe:6e:9b:3d:
37:d0:89:56:a6:f1:14:88:41:75:4b:c4:bf:87:d3:
a6:71:b0:79:bc:dc:1f:30:c6:b3:2c:ae:6b:d6:a8:
5d:ec:04:b4:82:4e:c8:0c:ab:df:f6:dc:4f:bd:34:
9e:73:d5:db:ca:4a:7e:a4:3a:ff:09:81:b0:b7:07:
c5:9f:17:16:d8:83:26:60:37:32:04:2e:6c:57:41:
ca:ea:50:c2:fe:c4:26:77:3a:17:eb:68:17:d9:5f:
f8:4c:eb:80:78:d4:6c:17:33:20:0d:5c:3d:eb:c1:
ae:be:a8:ba:d8:c2:43:20:e7:cc:20:ea:76:e9:9f:
9d:8b:fc:a8:85:45:8a:33:05:60:b9:3e:97:81:f2:
e0:16:d4:0e:c0:de:83:85:5d:b3:ee:60:09:4c:64:
7b:57:8e:40:aa:e9:0e:38:6e:67:1e:f3:4c:ec:ed:
85:c0:3d:be:54:dc:de:c7:ba:55:2d:39:49:7c:41:
0b:26:b1:65:e0:be:9c:e7:60:c3:bc:cd:70:e0:e6:
d2:5e:c0:df:b2:6d:e5:30:2d:4c:07:26:49:a9:23:
3e:38:2d:1f:c3:6a:4c:e8:46:a0:ce:7b:1e:50:23:
4b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:4E:15:CB:90:AF:44:FF:4C:CE:DD:25:6B:AA:BC:F6:D5:EB:9E:8E
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/Xk4Vy5CvRP9Mzt0la6q89tXrno4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:ffe0::/46
2a0f:5707:fff3::/48
Signature Algorithm: sha256WithRSAEncryption
bd:a9:c3:d9:d3:29:62:0b:58:71:86:5e:e3:e1:31:f8:6a:39:
86:58:ef:68:18:a1:1b:d4:67:11:b4:98:6d:d1:f7:05:7f:23:
e8:a2:8e:13:80:92:ad:2c:4e:bb:b9:7a:08:11:7f:68:32:89:
37:9c:57:95:72:e8:32:ee:01:a6:1d:f8:6f:a3:2a:a2:95:9c:
42:fd:87:2b:f3:11:31:bc:3a:0e:13:48:16:d8:4f:1f:37:24:
b7:3e:3e:96:31:6d:37:75:a6:8c:c4:52:5f:b9:c6:fa:1d:2a:
fa:25:6b:f4:d9:59:18:72:06:d0:8b:85:5c:13:a3:4a:7a:5d:
b7:3a:c8:3f:59:7e:be:06:b3:9c:00:90:20:f4:d6:cc:de:54:
56:18:22:c6:73:b0:0b:f7:4f:fa:1b:78:50:5c:bc:53:f5:0d:
5b:3a:56:d7:8e:9b:e8:3e:41:04:91:13:5f:f3:42:a5:99:ea:
8e:bd:22:da:d4:5f:39:fe:cb:45:e6:20:dd:7c:0d:69:84:d9:
db:1e:ed:72:e0:c7:b2:80:c9:91:80:81:3b:2a:01:c5:bc:64:
0a:fd:45:ac:b2:9b:87:58:35:35:ff:19:e8:13:77:13:3e:22:
d9:1e:43:37:e9:dd:71:f1:ae:1d:42:7d:32:d0:26:46:7d:84:
65:ef:99:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 20:28:38 2024 by rpki-client on console-ams.rpki-client.org