Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/1FTRoXbhTWcqa_pQadGLkaNwbDQ.roa
File: 1FTRoXbhTWcqa_pQadGLkaNwbDQ.roa (raw, json)
Hash identifier: Sr/zmR8DU1wCIvFRn7iGOiQsJJ3cBqOFEdHVUr/gmDQ=
Subject key identifier: D4:54:D1:A1:76:E1:4D:67:2A:6B:FA:50:69:D1:8B:91:A3:70:6C:34
Certificate issuer: /CN=3e20c700d98d76a9c640173889f9367da9de8997
Certificate serial: 018CC86F2453029B0718EFDA5B33FD7643DF
Authority key identifier: 3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/1FTRoXbhTWcqa_pQadGLkaNwbDQ.roa
Signing time: Tue 02 Jan 2024 04:29:36 +0000
ROA not before: Tue 02 Jan 2024 04:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 140951
IP address blocks: 2a03:9d40::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:24:53:02:9b:07:18:ef:da:5b:33:fd:76:43:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e20c700d98d76a9c640173889f9367da9de8997
Validity
Not Before: Jan 2 04:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d454d1a176e14d672a6bfa5069d18b91a3706c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e8:99:f4:48:dd:c5:d9:21:69:17:fc:c3:bd:
96:b2:b7:13:4a:d5:f9:84:18:7d:a2:69:d8:03:f0:
c3:71:dc:2f:31:81:c6:cc:7b:eb:7b:a2:3d:bd:40:
75:e6:30:c3:8b:49:eb:2d:13:cc:f6:dd:0b:30:84:
2e:5c:40:7b:ce:ad:9d:7c:f5:38:7e:93:8a:a7:07:
d6:ac:8b:e0:8f:e0:67:33:d5:aa:5e:a6:77:95:0b:
9a:93:66:c0:9f:d5:09:a3:ef:8a:10:eb:2e:7a:a3:
58:01:ff:f3:11:ff:5f:d9:3f:c3:70:4a:92:f9:1d:
ae:f5:59:dc:9f:aa:4e:33:8a:d4:69:b1:6d:73:1e:
f9:4e:38:b2:d3:fe:9c:ae:6e:10:e2:ca:66:db:e2:
ed:2e:28:e3:67:87:70:1b:39:bf:67:40:f0:32:c5:
fe:62:92:9a:94:9c:97:34:62:27:73:0f:e9:30:cc:
44:7e:6b:62:1a:fd:46:10:c7:e4:af:d4:c9:8e:de:
1f:c1:9b:60:84:7a:3d:f6:92:43:be:33:de:0b:68:
df:10:95:7b:d3:aa:10:0f:cb:87:8d:5b:cb:59:1d:
54:31:6c:23:18:30:71:65:4b:8d:13:a9:56:ed:8b:
02:ad:f7:34:fd:aa:e9:02:4b:92:71:0b:a8:87:92:
9c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:54:D1:A1:76:E1:4D:67:2A:6B:FA:50:69:D1:8B:91:A3:70:6C:34
X509v3 Authority Key Identifier:
keyid:3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/1FTRoXbhTWcqa_pQadGLkaNwbDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:9d40::/32
Signature Algorithm: sha256WithRSAEncryption
4b:ab:6d:3f:a1:e1:60:d0:3d:e3:1a:84:e1:45:e4:62:ff:47:
2f:6b:cd:f2:31:ce:7d:a5:c3:dd:bc:6c:b4:ad:9f:8b:7d:f7:
f0:b4:df:1b:53:d5:19:dc:4b:a1:07:23:a8:86:34:eb:bd:62:
c7:97:cf:e6:03:8d:8b:7c:35:7b:26:13:e3:91:e2:ce:06:42:
d8:6b:c9:46:c4:ad:1d:1d:f3:c2:6d:79:b5:79:b2:dd:99:49:
45:b0:fe:ab:0f:ce:34:41:5a:3b:6a:41:e6:94:bc:f7:21:e0:
d5:1c:90:5c:dd:87:0b:0b:2f:ef:c9:01:64:c8:52:ea:91:06:
54:c3:de:12:6d:07:0a:32:2d:be:26:f8:52:1e:4f:ec:72:eb:
29:fb:79:02:4b:af:0b:83:0a:b8:2a:e4:57:41:dd:a8:e8:45:
51:77:9b:50:2f:30:0f:94:3f:66:d8:9e:a8:76:3a:94:3a:0e:
a8:3d:96:28:ac:c1:e6:47:3b:96:71:0a:c7:52:ad:0c:b6:50:
25:c1:cc:50:1f:c9:c8:71:64:e4:f6:a8:5f:2a:f7:33:21:5e:
f0:de:70:c4:9d:fa:a1:6d:3d:84:97:03:b6:e1:dd:2a:0a:84:
e7:6c:40:f9:5c:32:07:de:da:83:8e:dc:36:5c:bc:62:b0:f0:
47:0f:64:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:24:56 2024 by rpki-client on console-ams.rpki-client.org