Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/4j6k1OE_qPcFWnRaefeedXXon18.roa
File: 4j6k1OE_qPcFWnRaefeedXXon18.roa (raw, json)
Hash identifier: 9LANX3bmuIJsrOACMY7os8P8CDkzDNGPu/Jxxt+gVGo=
Subject key identifier: E2:3E:A4:D4:E1:3F:A8:F7:05:5A:74:5A:79:F7:9E:75:75:E8:9F:5F
Certificate issuer: /CN=4a7f4f8ac8ca7343ed1b4ff12ce276318b69d10e
Certificate serial: 018CC424755F7158DD15DFDC8B4F1BD0F132
Authority key identifier: 4A:7F:4F:8A:C8:CA:73:43:ED:1B:4F:F1:2C:E2:76:31:8B:69:D1:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/4j6k1OE_qPcFWnRaefeedXXon18.roa
Signing time: Mon 01 Jan 2024 08:29:32 +0000
ROA not before: Mon 01 Jan 2024 08:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213346
IP address blocks: 2a10:b9c0:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:75:5f:71:58:dd:15:df:dc:8b:4f:1b:d0:f1:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7f4f8ac8ca7343ed1b4ff12ce276318b69d10e
Validity
Not Before: Jan 1 08:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e23ea4d4e13fa8f7055a745a79f79e7575e89f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e4:ca:f5:02:79:c6:42:4f:6f:37:ba:4f:00:
59:2a:28:13:3f:42:8c:02:d8:e5:33:87:38:fc:77:
50:03:f3:9f:86:1a:f4:61:ff:9e:6b:4c:e3:df:ba:
4e:5b:ef:c9:c7:c1:3d:06:51:10:92:b9:20:25:40:
97:0b:17:d1:5c:95:b9:ea:ef:23:09:42:d1:34:da:
7b:bf:c1:08:e6:57:b5:09:e8:2e:e9:32:8b:ba:2d:
86:1e:ad:52:6e:07:60:52:81:7e:18:44:56:d0:8c:
10:39:c5:6e:e4:e9:49:06:f9:41:7f:90:ed:bc:a7:
50:fc:b2:2f:7a:e1:99:f6:0f:33:e8:f6:03:c6:57:
f4:e5:2c:fa:7f:ad:9c:0b:5d:59:8d:f5:80:02:99:
08:5e:9c:6e:90:88:f9:06:7f:c6:58:64:d8:7f:39:
3c:cf:34:83:9d:c3:e3:c8:b2:11:df:ad:90:4e:aa:
64:4a:04:75:c3:e8:23:8a:a9:98:7c:40:3f:f1:80:
7f:be:d6:13:ce:e2:9e:60:59:ca:28:97:67:89:d9:
ef:77:78:08:79:63:57:e8:54:04:0e:e5:86:4d:eb:
6d:51:e6:55:0d:03:69:24:ab:ff:f9:58:47:76:af:
ff:1b:0a:2c:26:4c:dd:c0:09:d1:02:85:4b:54:c1:
54:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:3E:A4:D4:E1:3F:A8:F7:05:5A:74:5A:79:F7:9E:75:75:E8:9F:5F
X509v3 Authority Key Identifier:
keyid:4A:7F:4F:8A:C8:CA:73:43:ED:1B:4F:F1:2C:E2:76:31:8B:69:D1:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/4j6k1OE_qPcFWnRaefeedXXon18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:b9c0:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
c9:de:87:46:54:89:3c:15:ca:14:a2:a4:e0:20:53:12:e0:82:
1b:56:c4:3d:e8:35:02:2f:ce:3c:66:a2:99:72:66:81:89:da:
16:94:f1:bd:5b:0e:19:2f:73:8c:41:52:a9:bd:6d:4f:26:0f:
80:19:dc:fc:d5:9a:6b:15:c3:a2:2e:34:08:d9:91:2f:4e:bc:
2e:48:44:46:92:0f:8a:d4:45:36:ae:ba:56:28:ab:33:9f:49:
7c:01:bd:a4:04:b1:f2:05:9f:34:3a:59:7f:4a:bc:64:2d:56:
a8:79:7d:a5:45:dd:77:20:ad:62:b8:85:f7:54:50:25:72:78:
08:b3:eb:30:19:44:88:27:9a:10:9e:5f:20:a8:ff:f5:05:ad:
53:47:0c:f8:86:00:49:0e:c8:43:69:be:6a:9a:8b:57:de:e7:
56:35:45:0e:3f:2d:84:42:45:8d:c3:78:ac:37:bc:fb:0d:bf:
3d:51:9d:55:81:c5:1e:6b:69:fb:bc:14:1d:ec:e6:88:29:47:
d3:cd:74:56:3c:ba:6d:38:53:07:1d:c8:9c:18:32:8b:aa:e5:
bf:99:28:fb:56:bd:61:86:03:71:15:0c:1a:40:81:77:79:ee:
7e:c0:87:74:65:1d:bc:d9:63:5a:86:77:60:ff:20:7f:93:5b:
2c:a9:bb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:27:02 2024 by rpki-client on console-ams.rpki-client.org