Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/g3HkcivgkrOp1ZjDKRpOtE0svww.roa
File: g3HkcivgkrOp1ZjDKRpOtE0svww.roa (raw, json)
Hash identifier: 4L4NHS89US2pYdeMtWpV2J2bF1xooEojtHaNDfLuJ7g=
Subject key identifier: 83:71:E4:72:2B:E0:92:B3:A9:D5:98:C3:29:1A:4E:B4:4D:2C:BF:0C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018D68CB15ED7ED2B47092704645CDB68116
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/g3HkcivgkrOp1ZjDKRpOtE0svww.roa
Signing time: Fri 02 Feb 2024 07:49:16 +0000
ROA not before: Fri 02 Feb 2024 07:49:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 2a0a:2d02::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:68:cb:15:ed:7e:d2:b4:70:92:70:46:45:cd:b6:81:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 2 07:49:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8371e4722be092b3a9d598c3291a4eb44d2cbf0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:dd:b4:d6:23:cb:66:5d:95:43:3c:d5:f4:8f:
84:51:b8:31:2e:5e:a5:e8:c2:0f:0f:fd:68:1f:ff:
7a:cd:49:1f:85:67:a7:7f:e8:e9:8c:66:98:68:4a:
75:3f:b2:45:5c:88:03:22:51:7a:bf:34:7c:f0:d5:
3d:1f:93:fc:14:cb:09:a9:20:5a:0f:f9:2e:05:f5:
0d:f9:5e:f9:f1:0f:f0:70:24:23:7f:40:9b:e2:3f:
eb:90:08:66:80:62:91:e5:91:57:7c:5d:7f:72:48:
0e:7e:70:0e:28:77:5d:f5:8c:7a:e8:dc:9d:6c:d1:
81:de:d0:ef:20:ac:8c:ad:b2:8c:7b:0f:84:f9:06:
64:b2:e6:8a:61:8b:50:e8:42:fd:8f:16:3d:2c:94:
73:bd:0b:c5:41:51:f6:ea:d0:23:ab:db:dc:6c:ac:
c6:e5:a6:1d:f0:7b:5a:9f:0a:c0:75:77:7f:c5:40:
da:db:99:1a:1c:20:be:c5:e7:12:52:69:8b:1c:65:
b2:db:3a:7b:d9:ee:6f:4e:92:1a:18:69:ff:6a:a4:
67:1a:ce:9b:2d:70:21:f1:6b:b6:4e:d0:54:22:8b:
f2:02:ef:d0:a1:30:7b:16:f1:2d:7f:f5:0a:25:58:
8d:48:12:d9:b5:74:2e:13:09:90:f8:e6:44:b3:ef:
77:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:71:E4:72:2B:E0:92:B3:A9:D5:98:C3:29:1A:4E:B4:4D:2C:BF:0C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/g3HkcivgkrOp1ZjDKRpOtE0svww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2d02::/32
Signature Algorithm: sha256WithRSAEncryption
b0:1e:4d:6f:a0:f4:11:0e:14:2a:18:64:1e:af:bc:1e:1f:62:
38:9a:13:4e:2a:56:d8:2c:ac:14:55:c1:e4:18:f1:d0:58:8f:
e7:a1:fd:3a:ed:7e:42:ae:e4:57:41:50:47:ea:fe:49:1d:58:
38:77:ef:3d:9d:6f:24:e0:df:77:8c:93:50:0c:93:9b:04:65:
a0:76:d3:08:8c:37:83:2b:64:8a:8b:b2:c9:9f:bd:d0:d4:3a:
1a:b2:a9:0b:8b:aa:a1:76:32:a7:bb:c4:2b:9a:e9:a5:23:a5:
41:41:e3:6b:28:a9:22:0b:7b:d4:46:35:86:21:0c:ef:b8:7d:
44:59:eb:7f:ad:b2:00:06:2a:8a:c5:4f:b5:b8:85:a2:a3:52:
df:9f:08:c4:38:00:82:45:16:c1:1a:96:24:e1:87:c5:5a:81:
0b:61:dc:00:0e:cd:43:a7:e0:03:ba:3b:63:7c:f2:02:6f:11:
f3:d6:5a:46:a3:60:c7:0d:3e:d8:83:b3:c7:3e:ca:a9:05:b0:
04:a3:98:71:48:18:97:e5:81:02:aa:09:ef:97:d7:da:25:c4:
ec:b9:13:e2:d2:bd:eb:fc:a3:31:1f:3e:57:7d:c1:88:29:ee:
1b:f5:a4:77:d6:14:bf:77:69:32:cb:74:7b:c9:0a:1b:41:49:
7a:72:56:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 02:45:39 2024 by rpki-client on console-fra.rpki-client.org