Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/xo_yKraSY0l5fth24fzfvQVwHn0.roa
File: xo_yKraSY0l5fth24fzfvQVwHn0.roa (raw, json)
Hash identifier: NfFOIP2B9PY+ZxQ7zJjukYkBNjvDB6viKEkHEsXv8TM=
Subject key identifier: C6:8F:F2:2A:B6:92:63:49:79:7E:D8:76:E1:FC:DF:BD:05:70:1E:7D
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 018CC2DB06DB9334D91CCD39BE86953725C1
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/xo_yKraSY0l5fth24fzfvQVwHn0.roa
Signing time: Mon 01 Jan 2024 02:29:43 +0000
ROA not before: Mon 01 Jan 2024 02:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210023
IP address blocks: 2a0f:5707:29::/48 maxlen: 48
2a0f:5707:b140::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:06:db:93:34:d9:1c:cd:39:be:86:95:37:25:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 1 02:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c68ff22ab6926349797ed876e1fcdfbd05701e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d4:be:45:dc:e9:ff:f6:bb:43:42:50:05:69:
46:3c:e8:8b:91:2b:ac:9c:df:c4:b1:2c:c4:bb:93:
b3:ef:97:30:00:1f:65:dc:c5:29:ef:d3:b5:e6:f5:
23:66:c8:5a:bc:31:05:f1:dd:c7:2e:f5:97:ec:30:
42:3b:3f:d4:50:5a:40:29:62:36:1e:1e:ea:8e:b2:
8e:22:3e:e4:11:df:18:48:96:50:98:b2:03:05:b7:
57:09:ef:ae:f7:64:37:0d:b1:27:2d:c5:82:80:22:
1f:81:40:d1:50:4a:cb:5e:cb:00:86:92:c0:92:e9:
ac:23:3d:cd:9d:d2:7c:c8:ef:66:52:fb:ae:6e:04:
cb:05:c2:96:8b:2e:57:b5:50:91:98:e8:35:8a:28:
c4:a4:e9:7b:61:0f:69:59:0d:df:4c:e0:82:46:c9:
c9:2c:c2:21:31:c9:27:a4:55:3a:99:a7:a1:09:dd:
e4:c4:c1:94:ea:5e:6c:a8:ab:29:18:b4:8d:23:3e:
e2:ac:2c:97:9e:2e:9d:bb:6e:0f:de:dd:e6:bb:c0:
da:89:5a:32:c2:b9:bc:c1:8e:43:04:0d:b8:bc:1c:
77:67:02:a3:2d:a3:e9:81:04:c7:37:7e:b0:b3:44:
50:f9:20:4e:a7:de:b8:8d:b2:56:26:6a:c1:29:96:
65:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:8F:F2:2A:B6:92:63:49:79:7E:D8:76:E1:FC:DF:BD:05:70:1E:7D
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/xo_yKraSY0l5fth24fzfvQVwHn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:29::/48
2a0f:5707:b140::/44
Signature Algorithm: sha256WithRSAEncryption
b5:12:4f:6d:47:e9:ad:7b:94:ea:e1:16:f8:a6:17:f7:34:12:
94:21:ba:f6:30:9c:7b:fc:f7:9c:74:83:d0:48:22:e5:64:dc:
b5:60:2b:a2:b2:4f:f2:25:92:9f:6f:ed:da:55:56:62:97:49:
e2:d0:21:d0:4c:17:43:58:70:88:51:4c:d8:ba:7b:06:3f:70:
22:e6:37:e7:60:dc:71:3a:17:58:3b:1e:65:91:95:83:bb:85:
8d:c9:98:be:37:6e:1c:cb:ce:76:3d:c2:53:0a:d2:0d:c9:7b:
39:7f:0f:6c:be:18:74:5d:c6:4c:c0:6e:ea:e7:f5:f2:e7:75:
f9:83:d2:66:5b:ff:9b:df:55:f6:af:dc:b6:7d:3d:b8:7a:c2:
af:ff:d1:46:e0:f5:1a:78:bd:51:f0:d8:ec:0b:5d:7a:e8:73:
46:97:3d:fe:c9:e4:42:eb:29:c6:1f:ef:35:a4:b2:98:0a:df:
12:ec:ad:03:ca:15:72:16:f6:cb:8e:b1:17:2f:8a:0d:4a:6c:
19:a0:91:6b:b5:aa:77:e2:84:fc:34:69:fa:83:bb:ac:cf:87:
bb:12:1c:d2:30:ea:ac:08:fe:97:c6:7b:f0:00:c2:e8:e4:8b:
2c:ae:9d:fb:94:b5:94:7b:55:8e:48:e4:46:c3:80:11:a4:1e:
7a:f4:c2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:36:28 2024 by rpki-client on console-fra.rpki-client.org