Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/suKsV1vPOCgvSilx-Fpcux7tjOk.roa
File: suKsV1vPOCgvSilx-Fpcux7tjOk.roa (raw, json)
Hash identifier: +jJy3WQDJG7ePBDb6q1iZAQcLSW5qkpKMKArjy438yg=
Subject key identifier: B2:E2:AC:57:5B:CF:38:28:2F:4A:29:71:F8:5A:5C:BB:1E:ED:8C:E9
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 018CD1668E758AEE3D7460EE2E6C02CFE515
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/suKsV1vPOCgvSilx-Fpcux7tjOk.roa
Signing time: Wed 03 Jan 2024 22:16:48 +0000
ROA not before: Wed 03 Jan 2024 22:16:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 2a0f:5707:ba0f::/48 maxlen: 48
2a0f:5707:ba0e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 19:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d1:66:8e:75:8a:ee:3d:74:60:ee:2e:6c:02:cf:e5:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 3 22:16:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2e2ac575bcf38282f4a2971f85a5cbb1eed8ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2b:e2:a2:7c:4b:d8:49:86:52:af:b9:e3:90:
ef:72:03:a0:93:5f:93:2d:d0:fe:c5:25:66:13:b2:
19:fc:65:b3:b5:72:16:8f:b7:33:c1:66:67:0c:a9:
d3:88:33:42:53:c6:13:ee:56:31:11:4d:f5:4b:81:
7e:22:73:77:09:16:12:30:1d:c7:9b:7b:78:b2:cb:
49:c6:c5:ae:bc:66:3f:d2:b5:90:1e:bb:37:6c:5b:
bd:05:88:79:d2:18:d4:00:bf:cb:d2:5b:96:5d:94:
f6:d9:6a:18:ad:f5:bc:f4:68:76:ca:e7:75:81:3b:
17:cd:04:d7:a8:10:9e:9e:6b:2b:f8:dd:00:51:e8:
64:4e:ab:55:9b:a3:68:0a:1b:1d:21:e8:60:37:dc:
51:42:f5:f5:f0:fe:b5:af:3a:34:d0:02:ba:94:1b:
c2:f0:cd:7b:3f:66:97:07:7a:6e:68:3e:da:37:7b:
e2:68:42:ad:bb:db:83:10:ae:fe:79:08:93:f5:96:
56:a1:1c:c8:20:67:d4:9d:58:7a:9c:64:cb:a7:e7:
eb:4b:84:fd:ed:80:30:3d:57:2e:86:fb:24:ae:64:
6a:34:af:ce:7f:89:ac:c7:8d:75:6d:d3:f3:31:16:
4e:ad:ff:0a:0b:11:00:2a:be:56:94:88:be:c8:02:
e8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E2:AC:57:5B:CF:38:28:2F:4A:29:71:F8:5A:5C:BB:1E:ED:8C:E9
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/suKsV1vPOCgvSilx-Fpcux7tjOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:ba0e::/47
Signature Algorithm: sha256WithRSAEncryption
44:4e:3d:80:d5:7d:c7:7a:b9:ba:b0:23:37:0e:f6:ec:bd:f7:
c0:d4:72:80:c1:c8:cf:5e:7b:e6:4e:b7:ac:ed:76:d6:a8:55:
2c:e1:62:1e:23:8c:5e:f6:02:21:4f:69:6b:e4:89:a0:27:3a:
35:18:d4:9e:72:38:ed:2f:bd:84:14:5f:17:93:98:0b:94:06:
d8:0f:96:d1:2a:e8:53:4d:aa:06:8f:fa:29:5f:d0:48:bf:43:
64:a0:04:2d:60:29:bd:ef:41:31:8c:6f:b2:19:2b:e7:ac:f5:
20:26:f0:02:59:b1:37:74:94:ce:54:49:72:d7:4c:63:a3:3e:
7f:1d:ba:91:4e:0f:b7:68:9f:53:b3:eb:c0:05:fa:11:ab:42:
47:2a:17:80:63:f6:08:ba:15:c9:eb:58:2e:b2:b1:dc:01:f0:
73:3b:01:12:3b:60:54:e2:f1:64:be:a7:ac:6e:fb:44:3a:82:
3a:0b:5b:e3:72:08:ae:30:72:aa:aa:b8:d4:64:76:43:2a:e6:
04:fb:1d:bb:f2:46:0a:06:4b:f9:b3:a9:f6:bf:53:e8:16:42:
04:d9:91:1f:3a:06:93:1d:1b:d7:1c:f2:cd:3a:1e:92:bd:47:
8d:78:ae:52:6d:8a:36:2d:75:7e:f3:02:55:22:24:58:67:04:
87:dd:3b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 02:38:51 2024 by rpki-client on console-fra.rpki-client.org