Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/8802b1-3c91-4f09-a265-6d60b4b8dab7/1/1-do1qLz8HTjQT7OXfmacOYKjq-I.roa
File: 1-do1qLz8HTjQT7OXfmacOYKjq-I.roa (raw, json)
Hash identifier: Fvz4+/8l8qQFUa0T0LCiTofizynOLz3quOhSwT/POaI=
Subject key identifier: F9:DA:35:A8:BC:FC:1D:38:D0:4F:B3:97:7E:66:9C:39:82:A3:AB:E2
Certificate issuer: /CN=3ce2c3edb5397f832ee8fe6a9eec3c5e43627077
Certificate serial: 018CC3B6C1AB25F694F67B427C6CB2ECA3EC
Authority key identifier: 3C:E2:C3:ED:B5:39:7F:83:2E:E8:FE:6A:9E:EC:3C:5E:43:62:70:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POLD7bU5f4Mu6P5qnuw8XkNicHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/8802b1-3c91-4f09-a265-6d60b4b8dab7/1/1-do1qLz8HTjQT7OXfmacOYKjq-I.roa
Signing time: Mon 01 Jan 2024 06:29:43 +0000
ROA not before: Mon 01 Jan 2024 06:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44838
IP address blocks: 2a02:7340::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/8802b1-3c91-4f09-a265-6d60b4b8dab7/1/POLD7bU5f4Mu6P5qnuw8XkNicHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/8802b1-3c91-4f09-a265-6d60b4b8dab7/1/POLD7bU5f4Mu6P5qnuw8XkNicHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/POLD7bU5f4Mu6P5qnuw8XkNicHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:c1:ab:25:f6:94:f6:7b:42:7c:6c:b2:ec:a3:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ce2c3edb5397f832ee8fe6a9eec3c5e43627077
Validity
Not Before: Jan 1 06:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f9da35a8bcfc1d38d04fb3977e669c3982a3abe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6e:e5:41:32:c4:62:1e:34:ca:a3:f5:49:4a:
3d:6e:b0:a0:1c:59:c5:d6:fe:83:8f:ae:a7:f1:b6:
4e:b2:c8:e7:59:a8:36:4e:e5:cb:30:fe:44:1c:47:
8d:61:f3:a6:5f:9a:60:d3:34:56:21:f9:94:c5:95:
d9:8b:3b:33:5f:56:08:d8:e3:9d:fa:ee:e6:bf:58:
24:82:9e:9c:d3:a5:31:70:3c:48:ea:ae:9e:f6:9b:
9e:8f:b5:a6:d4:d6:e3:4b:af:b0:b0:af:e9:b7:79:
8e:c4:4e:3d:27:f1:ad:11:c7:9e:f7:5b:a2:c2:6c:
06:fb:d0:52:f5:b2:b4:fd:a3:e4:ba:3a:9e:45:83:
5f:c2:ce:60:dd:41:54:1f:8b:0e:97:66:95:e4:b5:
18:a1:a6:d8:93:01:81:a4:3e:1b:3f:19:11:7a:5b:
ab:a8:5b:63:99:9e:e4:e2:cd:31:0d:f9:d7:c4:15:
7c:a8:01:96:ed:7d:f5:51:ce:49:1b:ca:61:94:cf:
97:98:5b:d8:b0:69:0f:a9:84:2c:8a:d3:d6:e5:4c:
fe:29:a0:e4:0c:e0:27:e9:67:72:5d:50:a9:6c:26:
35:d1:6f:4b:fa:d8:5e:d6:8d:fa:c2:d9:b5:db:84:
60:b4:b4:63:f4:57:74:03:d5:8c:04:77:7f:1b:e9:
21:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DA:35:A8:BC:FC:1D:38:D0:4F:B3:97:7E:66:9C:39:82:A3:AB:E2
X509v3 Authority Key Identifier:
keyid:3C:E2:C3:ED:B5:39:7F:83:2E:E8:FE:6A:9E:EC:3C:5E:43:62:70:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POLD7bU5f4Mu6P5qnuw8XkNicHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/8802b1-3c91-4f09-a265-6d60b4b8dab7/1/1-do1qLz8HTjQT7OXfmacOYKjq-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/8802b1-3c91-4f09-a265-6d60b4b8dab7/1/POLD7bU5f4Mu6P5qnuw8XkNicHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:7340::/32
Signature Algorithm: sha256WithRSAEncryption
89:83:47:4a:d6:5c:b9:f9:9f:79:fb:c0:57:3a:af:67:a7:2b:
6e:fa:40:80:8e:82:ab:3a:2b:06:bd:cc:48:9c:46:20:23:12:
65:74:20:28:49:bb:bb:7e:60:9f:7e:e7:5a:43:f6:67:ce:40:
fd:2c:8b:c3:1c:c0:78:b0:ed:a8:0f:6e:a2:8b:cb:a1:91:df:
7f:19:3f:96:2f:8a:39:72:20:66:c8:11:d1:74:49:07:4e:93:
d7:7c:4a:61:a8:6c:8e:30:d7:26:4c:b5:96:9e:d4:63:4f:51:
05:1f:19:f0:d1:02:5b:d6:dc:33:33:b9:de:50:56:41:4f:a6:
dd:18:c8:47:86:35:d0:4a:db:08:b9:53:6c:03:1e:66:c3:0a:
a1:a5:bd:73:e7:18:b2:0b:9d:a2:10:57:6e:41:ad:eb:d7:1f:
53:a2:ea:a7:37:90:2b:db:bf:f4:ce:50:86:ed:de:4f:cb:71:
87:73:3d:60:c3:3c:23:cb:b3:53:67:fb:6f:b4:94:9c:49:4c:
a9:8d:74:4d:d2:12:01:8a:17:44:7c:6c:59:13:d7:32:2b:36:
8b:32:f0:f3:5b:5d:81:b0:5c:2d:82:32:1f:f6:a9:d4:08:2f:
57:0d:58:fe:b7:e2:2a:c7:3a:d2:79:af:31:31:c9:47:8d:b3:
1c:55:f2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:51:51 2024 by rpki-client on console-fra.rpki-client.org