Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/P43V_C7qRkxCIX3frlbxOEnFbiU.roa
File: P43V_C7qRkxCIX3frlbxOEnFbiU.roa (raw, json)
Hash identifier: ZPXdVNVVcRtgSAyjrafMRFLPwRyxgo1C/VAaSvei4pg=
Subject key identifier: 3F:8D:D5:FC:2E:EA:46:4C:42:21:7D:DF:AE:56:F1:38:49:C5:6E:25
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 018CC3B6AD5A49C1A00DB42343D959C92EFB
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/P43V_C7qRkxCIX3frlbxOEnFbiU.roa
Signing time: Mon 01 Jan 2024 06:29:38 +0000
ROA not before: Mon 01 Jan 2024 06:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24595
IP address blocks: 2a04:9a01:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:ad:5a:49:c1:a0:0d:b4:23:43:d9:59:c9:2e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Jan 1 06:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f8dd5fc2eea464c42217ddfae56f13849c56e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:7c:6d:09:64:a9:1a:b1:cf:22:35:ec:8b:3f:
3d:78:8b:cb:b2:11:71:e0:51:b8:73:b1:9b:16:2d:
a1:91:a3:39:75:24:0d:d8:c6:d0:ba:42:54:37:ec:
3f:e9:1f:2a:5d:56:79:d3:00:f0:33:d9:0f:0f:c6:
ae:3f:e1:2e:01:3e:2f:67:9f:e2:8e:00:c7:bf:a3:
1d:7f:2a:b4:a9:33:c1:d9:f4:36:50:06:b0:44:c1:
dd:bd:d4:bc:41:a4:66:43:ff:df:1e:9f:85:62:72:
69:93:ee:27:6c:ff:8c:96:b9:88:57:22:e5:73:1b:
a5:08:10:23:bc:ba:2d:ed:d4:16:36:bf:a2:56:de:
b2:dd:b2:60:04:f2:7a:15:b9:c8:13:d5:a2:f3:e8:
a5:c6:73:a3:27:e7:84:57:cb:26:04:48:5d:ad:6a:
54:ab:75:43:22:62:61:26:ff:97:93:24:d3:18:29:
f4:d6:70:4d:95:93:52:e4:24:49:2d:ce:ea:03:e1:
4e:07:41:b3:9c:1d:0d:b1:06:38:0f:14:f1:8b:f8:
ef:58:21:50:5b:1f:f0:7f:0c:d7:53:3a:70:90:60:
2e:0b:17:d5:b3:6a:80:35:53:00:3c:b8:b2:76:26:
04:b0:f9:f2:45:2a:86:b9:cc:79:17:f4:46:ec:7b:
23:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8D:D5:FC:2E:EA:46:4C:42:21:7D:DF:AE:56:F1:38:49:C5:6E:25
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/P43V_C7qRkxCIX3frlbxOEnFbiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:9a01:1000::/36
Signature Algorithm: sha256WithRSAEncryption
33:ea:b9:67:d0:33:b1:c3:45:94:7c:58:fb:e1:fc:71:43:b1:
44:5e:a5:f9:32:48:93:3e:b9:74:30:19:79:ad:52:fe:9c:5f:
69:cc:6c:17:24:26:0a:5f:99:ed:48:be:2b:c9:b1:b9:04:a4:
28:68:5c:ae:a1:48:cb:04:94:23:75:9b:19:9b:2a:d8:8a:7b:
36:9a:b1:b7:ee:29:a0:99:dd:d2:4b:71:a9:61:e6:a5:9e:5a:
d6:d7:be:87:28:25:51:1b:f7:0c:bc:9b:89:4f:8f:56:39:eb:
1e:ca:14:b8:06:23:2b:f0:c1:93:2a:41:32:42:b0:f7:9d:9e:
a0:a9:52:e9:a1:23:bb:7a:ea:a0:af:ba:b8:5f:83:25:fa:c1:
63:00:43:e4:0e:ac:e4:fd:02:c7:b2:14:99:d0:78:7f:06:96:
72:ae:49:28:ba:25:87:8b:92:7e:a2:0b:b7:8d:b3:99:3c:ae:
f3:65:26:4c:5d:69:03:8c:a3:59:02:c8:e4:ca:81:63:7d:c7:
84:bc:03:b7:c1:18:cc:87:a0:a5:4c:6c:23:67:df:a1:02:c9:
ca:9d:19:19:45:0d:ba:0b:da:c2:41:46:ca:d7:7c:69:0b:11:
85:85:57:d2:72:cd:65:da:2e:94:94:7b:21:00:24:a0:78:1a:
32:00:a2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:29:25 2024 by rpki-client on console-ams.rpki-client.org