Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/d2y0qQHqhq9Z-pkV9jMaw5NZ78A.roa
File: d2y0qQHqhq9Z-pkV9jMaw5NZ78A.roa (raw, json)
Hash identifier: X42kxnoM7gASFhqHQH9+TLpK7iibF2TM0Jfk0gkWaSQ=
Subject key identifier: 77:6C:B4:A9:01:EA:86:AF:59:FA:99:15:F6:33:1A:C3:93:59:EF:C0
Certificate issuer: /CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Certificate serial: 018CC492E291D62886F5ED4889D566075396
Authority key identifier: 3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/d2y0qQHqhq9Z-pkV9jMaw5NZ78A.roa
Signing time: Mon 01 Jan 2024 10:30:09 +0000
ROA not before: Mon 01 Jan 2024 10:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:2098::/29 maxlen: 29
2001:2094::/30 maxlen: 30
2001:20c0::/26 maxlen: 26
2001:2800::/21 maxlen: 21
2001:2200::/23 maxlen: 23
2001:2093::/32 maxlen: 32
2001:2080::/28 maxlen: 28
2001:20a0::/27 maxlen: 27
2001:2100::/24 maxlen: 24
2001:2400::/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 01:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:e2:91:d6:28:86:f5:ed:48:89:d5:66:07:53:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Validity
Not Before: Jan 1 10:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=776cb4a901ea86af59fa9915f6331ac39359efc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:de:77:3f:a6:e6:5d:21:28:a3:96:a5:5e:f2:
b5:eb:f2:1a:29:d5:8e:8c:e2:c2:a6:30:c0:b5:3f:
0d:8a:a1:71:3c:45:cb:4c:00:1e:0d:5b:7e:e1:d4:
97:a9:93:f5:0c:b0:86:09:8c:0f:90:c1:27:d4:23:
b4:32:01:02:00:28:ca:04:4e:a1:c6:68:a7:1c:51:
cf:56:75:d2:b5:3e:9c:9e:59:42:cf:e0:2c:f5:8c:
45:9a:67:f9:8b:0a:82:3e:81:c6:7b:92:af:5e:5c:
e6:ea:c4:2c:d8:72:89:21:d0:f4:05:22:08:4d:71:
51:42:7d:98:98:8e:96:92:47:b6:5d:ff:aa:e1:b1:
42:14:85:bc:8b:65:5b:41:2b:01:15:b8:1e:6b:3b:
be:68:82:3b:79:87:76:9b:cf:03:bf:fa:d3:61:d9:
03:99:ed:52:74:61:7f:da:a3:b0:31:58:48:3d:fe:
5a:d0:cc:32:6e:b3:9c:15:c7:0f:e1:70:46:3d:98:
47:fb:3c:6a:3b:25:ed:d7:92:2d:85:d8:4b:ad:f2:
ea:36:d2:b3:ad:47:52:7c:3c:8b:54:d5:31:fd:27:
5f:bd:94:89:30:ef:11:14:6b:c6:73:c0:eb:2c:5f:
da:ca:71:07:7d:e9:a0:2f:3d:9a:1c:6c:cf:3c:22:
09:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:6C:B4:A9:01:EA:86:AF:59:FA:99:15:F6:33:1A:C3:93:59:EF:C0
X509v3 Authority Key Identifier:
keyid:3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/d2y0qQHqhq9Z-pkV9jMaw5NZ78A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:2080::/28
2001:2093::-2001:2fff:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
06:d3:d2:c8:6f:8c:ae:38:44:c9:73:0a:d8:71:c3:a1:b2:a0:
0b:d2:ee:68:c5:b7:ad:fc:96:a8:1a:74:93:c6:9d:1f:eb:2b:
ec:f4:f7:bb:d7:9a:98:52:d0:22:fa:16:b7:80:ac:cf:74:69:
90:fe:16:88:a8:45:b1:de:00:9b:85:c6:86:7c:de:bb:c5:78:
36:be:86:bc:7d:24:9d:c7:69:52:76:fa:00:8f:45:07:4c:63:
39:56:2a:b0:57:11:34:69:9e:5d:e3:5a:b4:f5:4e:62:4b:44:
bb:69:b3:04:be:fa:c8:cb:2a:4a:cc:a4:e9:f9:a2:9d:fa:9e:
66:a3:a1:53:ed:40:60:f5:89:4b:1d:4c:dd:b6:a7:bd:04:d9:
cf:00:82:69:80:e3:7f:ac:09:b1:fd:12:10:2f:b9:3e:da:4f:
39:64:29:57:64:6a:b9:a1:40:de:a1:e1:99:c9:41:29:27:06:
23:81:b9:f6:98:63:19:e5:f6:25:e3:cd:11:85:c6:72:38:4a:
96:4b:52:d9:42:28:af:87:8a:a4:f2:6e:7a:3e:0f:01:42:50:
f1:8b:c1:19:11:f5:5f:b9:01:1a:e0:75:89:9a:7e:77:4a:f8:
46:ac:ba:bf:9d:40:c8:79:01:28:38:15:f2:96:69:ad:4f:76:
7a:49:5b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 11:37:10 2024 by rpki-client on console-ams.rpki-client.org