Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/dbIf73QIPCJeDP5IBTe7_GB3Uw4.roa
File: dbIf73QIPCJeDP5IBTe7_GB3Uw4.roa (raw, json)
Hash identifier: +x/yGMgg2DHi9+f32G6e03GcqOEJaR0qF+1qYUE+Ji4=
Subject key identifier: 75:B2:1F:EF:74:08:3C:22:5E:0C:FE:48:05:37:BB:FC:60:77:53:0E
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 018CC2DB000AA1CCF868C1D681F18F6FC205
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/dbIf73QIPCJeDP5IBTe7_GB3Uw4.roa
Signing time: Mon 01 Jan 2024 02:29:41 +0000
ROA not before: Mon 01 Jan 2024 02:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205298
IP address blocks: 2a0f:5707:aaa0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:00:0a:a1:cc:f8:68:c1:d6:81:f1:8f:6f:c2:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 1 02:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75b21fef74083c225e0cfe480537bbfc6077530e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:69:ff:49:19:b5:1a:c9:69:b9:cd:63:3d:95:
5e:dd:af:8b:f4:e2:69:6b:47:56:55:d0:0c:79:52:
a3:31:18:0a:71:91:11:48:e3:11:ae:15:15:33:80:
b3:75:34:21:c9:9a:be:69:c2:fd:b8:2d:4c:43:4d:
cc:93:fe:bf:15:f6:93:ef:2f:0b:b1:ad:b6:32:8c:
27:ae:aa:c0:e6:3b:a7:b2:21:1f:7b:90:7b:e0:62:
cb:95:f6:e9:3f:fd:53:21:b9:90:50:94:eb:6e:51:
a9:ed:22:08:45:a2:69:42:93:35:c4:6f:39:d4:89:
c1:7b:ae:2f:34:b7:3a:12:d4:2b:38:4e:97:85:1f:
84:2d:6b:69:e4:57:bb:57:ad:59:27:5b:15:d6:02:
e2:4a:2a:bb:9d:d1:77:88:30:6c:d0:a3:dd:de:3b:
48:b7:d2:ac:a2:08:44:b7:21:a4:9b:f1:ca:94:4b:
95:93:a8:e8:ee:3a:42:20:98:8c:aa:ad:f4:92:bb:
ac:5e:ce:d2:f0:fe:16:f9:de:d7:d5:f1:56:89:39:
4f:cd:2a:10:42:f6:b6:ea:a4:53:3d:9f:9c:6f:83:
29:ce:b5:ae:81:b9:71:49:8b:f4:ba:50:73:c1:16:
e6:c1:5e:5d:71:33:85:16:98:a5:58:f2:aa:01:2a:
1c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B2:1F:EF:74:08:3C:22:5E:0C:FE:48:05:37:BB:FC:60:77:53:0E
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/dbIf73QIPCJeDP5IBTe7_GB3Uw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:aaa0::/44
Signature Algorithm: sha256WithRSAEncryption
1c:35:fa:09:16:20:d0:5f:7b:3f:bf:f6:6e:b7:9d:30:cd:bb:
ce:66:15:e8:2e:5b:e6:62:a6:9e:73:31:14:38:ec:a5:ac:6a:
01:c8:bc:6c:09:8c:22:e2:8f:46:8d:9b:8a:6b:65:fd:84:f5:
be:0d:2a:5d:7f:b5:17:e5:3d:80:01:96:36:ea:1c:19:d4:4f:
8c:ed:6f:a3:91:4e:d1:5c:b8:be:f4:ab:f2:a8:c0:4f:81:67:
dd:04:84:99:81:d8:e7:e7:72:d3:46:63:39:19:20:27:4e:09:
96:29:0d:f5:75:88:d1:14:64:08:68:67:37:13:55:25:88:db:
19:c0:d1:ce:88:de:bd:40:4a:17:e6:ed:ce:61:b6:e7:f0:db:
ed:9b:a3:5c:c9:48:e1:1a:51:29:b3:4e:f3:8a:4f:4c:47:08:
ff:b6:56:b4:db:da:bd:ad:2a:a5:6a:98:33:ac:d7:ec:a2:8f:
f6:5e:0c:3a:7a:b9:6f:fc:0c:09:ac:65:f9:b3:98:91:98:c6:
c3:dd:d8:3a:99:61:c7:3e:a2:8e:8a:bb:83:c9:24:42:dd:53:
ea:d8:f8:4e:38:85:8d:0c:86:64:c5:ec:6f:58:bb:27:19:61:
00:05:c3:2e:14:bb:14:ac:bf:f1:6b:6a:44:4c:ac:ca:68:75:
2d:36:a2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:00:05 2024 by rpki-client on console-fra.rpki-client.org