Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/G10N9QIJrw78dwc6N6vHPg1h-dY.roa
File: G10N9QIJrw78dwc6N6vHPg1h-dY.roa (raw, json)
Hash identifier: GzfGW1VX6jchYsyt0iS1CzyCJEq9P6KCAtvflPmGACw=
Subject key identifier: 1B:5D:0D:F5:02:09:AF:0E:FC:77:07:3A:37:AB:C7:3E:0D:61:F9:D6
Certificate issuer: /CN=93503061e1ae503ec63d970b30875dd93ffabbdf
Certificate serial: 018CC348AB3BCE6783FC9445D449F0872ECF
Authority key identifier: 93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/G10N9QIJrw78dwc6N6vHPg1h-dY.roa
Signing time: Mon 01 Jan 2024 04:29:28 +0000
ROA not before: Mon 01 Jan 2024 04:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 2a01:bb22::/33 maxlen: 33
2a01:bb22:8000::/33 maxlen: 33
2a01:bb20::/29 maxlen: 29
2a01:bb24::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:ab:3b:ce:67:83:fc:94:45:d4:49:f0:87:2e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93503061e1ae503ec63d970b30875dd93ffabbdf
Validity
Not Before: Jan 1 04:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b5d0df50209af0efc77073a37abc73e0d61f9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a0:a1:c7:ca:d9:bf:ad:c9:c1:33:c2:f4:a8:
8b:35:ed:dc:bb:0d:af:68:1d:6b:89:59:5f:f9:f5:
52:49:14:c4:f1:26:01:36:d5:85:33:b2:2d:68:9a:
2b:bd:c0:1c:0c:0c:dd:20:31:70:ec:21:50:a1:a2:
74:67:53:75:1a:b3:78:0c:9c:7f:e9:fa:ef:87:a9:
3c:4f:4d:ad:a8:e0:a0:08:88:95:e1:c3:19:50:f2:
bf:8d:8e:7a:88:94:76:b2:0d:6a:4d:31:b5:72:71:
e6:27:9e:de:89:57:f4:ba:79:25:8e:c0:9a:9f:68:
13:49:08:37:fd:9b:25:f9:d5:d7:77:4a:74:0f:e0:
33:fa:4d:af:b8:4a:ef:42:0d:6a:21:f1:b2:90:aa:
18:b6:39:7e:f4:f7:a1:2e:d0:f9:99:b4:90:f6:17:
cd:12:ac:27:ad:f1:28:2b:97:77:5b:28:90:4d:26:
0b:84:3f:a2:31:b0:83:1a:2e:e5:8f:f8:8f:23:34:
b6:b3:15:b2:5c:62:84:5c:2e:cd:d5:de:52:ef:bc:
dd:d9:77:52:ff:6a:fa:eb:3f:25:7d:99:2c:5a:5e:
9b:d0:7d:d0:6d:22:c3:be:6c:61:b7:ee:08:17:fc:
50:f0:67:ba:17:ad:95:4a:29:b2:f7:1d:69:3f:80:
6a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5D:0D:F5:02:09:AF:0E:FC:77:07:3A:37:AB:C7:3E:0D:61:F9:D6
X509v3 Authority Key Identifier:
keyid:93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/G10N9QIJrw78dwc6N6vHPg1h-dY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:bb20::/29
Signature Algorithm: sha256WithRSAEncryption
11:0a:76:32:ba:11:c6:b3:40:df:a6:5b:72:5e:9d:1e:48:64:
32:e6:cd:5e:5a:e8:40:32:38:2c:3a:c9:e9:84:8a:3d:00:a8:
72:ed:71:9f:4a:e8:98:00:32:34:6f:d6:f3:15:4b:e9:af:df:
02:39:18:49:f4:10:54:fd:33:8a:33:1a:e0:82:55:a0:03:49:
60:f9:f0:63:ff:79:3a:72:46:2f:ff:fc:bb:6d:c1:00:c5:c7:
1c:05:4b:00:5a:26:63:43:9d:e0:9d:ae:36:3c:00:c9:2c:7f:
18:55:c1:d3:8b:55:49:ac:62:2b:fb:9c:9d:40:17:4c:b0:af:
20:9c:57:8e:b9:25:99:ad:a3:44:d5:e9:e2:89:00:0f:aa:4f:
4f:b1:a7:9f:b8:f7:bb:dd:7b:cb:79:e3:13:67:03:3e:cd:ef:
ce:dd:11:4f:bc:8d:6c:73:94:f9:31:ee:e6:24:44:0e:bf:29:
40:43:15:78:16:cb:c9:85:ae:e4:a7:6c:e2:32:93:7a:36:47:
ef:c1:d3:d7:6c:be:1e:6d:fa:5d:d3:ab:dd:09:75:3b:06:26:
b7:04:2b:7d:e4:b7:39:b5:f0:c1:c7:b1:d3:fc:20:6b:7f:9f:
ec:57:1a:5f:a5:f6:52:b6:c2:6c:21:a8:13:01:fe:4b:ed:f1:
1a:9e:d1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:52:25 2024 by rpki-client on console-ams.rpki-client.org