Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/Rkgaa2g8lg7qPjOWP938QS83e4k.roa
File: Rkgaa2g8lg7qPjOWP938QS83e4k.roa (raw, json)
Hash identifier: PEFBmqy/rl+ObawTe8JrUSr7HKsNyKxFwBvI4ZmAiLE=
Subject key identifier: 46:48:1A:6B:68:3C:96:0E:EA:3E:33:96:3F:DD:FC:41:2F:37:7B:89
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 018CC3B6B54CD8757E8C82B2453D3A108A93
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/Rkgaa2g8lg7qPjOWP938QS83e4k.roa
Signing time: Mon 01 Jan 2024 06:29:40 +0000
ROA not before: Mon 01 Jan 2024 06:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208240
IP address blocks: 2a07:3500:1060::/48 maxlen: 48
2a07:3500:1061::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:b5:4c:d8:75:7e:8c:82:b2:45:3d:3a:10:8a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Jan 1 06:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46481a6b683c960eea3e33963fddfc412f377b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:0a:76:be:b1:ab:02:d2:03:7a:ba:e9:40:ea:
76:71:07:72:24:fa:50:7e:ba:0f:91:dc:cb:f5:31:
f3:08:5e:7a:a7:40:2b:e6:2e:00:f3:d7:a5:c9:78:
16:0d:2e:e9:8a:9b:c1:3b:f1:8c:47:79:b5:91:5e:
35:1f:01:d3:fb:f7:51:c6:da:d2:4f:8e:39:87:37:
0b:d8:61:35:87:57:c2:9a:69:cc:3a:28:2e:fa:3b:
c2:f5:48:59:a7:6b:1a:8d:5a:6f:65:83:15:58:f4:
4e:e5:ed:e0:82:51:03:5c:32:5a:24:f8:4e:65:f5:
e0:7a:a6:d8:8d:63:44:f7:05:d2:e5:bf:b9:e9:f1:
26:db:0a:6c:03:ce:e1:ac:d4:b3:35:71:9f:28:16:
a7:ec:ad:25:8f:88:0a:a2:08:3a:d4:25:30:a5:8f:
d6:cb:84:4c:f6:2e:23:68:7d:78:b8:0f:4d:f7:90:
84:36:65:5f:e9:ad:d7:38:0d:35:04:ad:a4:4b:40:
00:59:35:e0:9c:c1:34:3f:46:b0:11:13:ee:b0:ae:
ee:78:41:dc:b9:08:2b:6d:b4:5a:47:94:bc:c1:b0:
d1:e1:2d:b6:49:99:7e:5c:04:96:0d:23:b9:ed:fd:
94:67:51:54:55:7a:10:3f:76:a8:b6:85:94:d5:94:
8e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:48:1A:6B:68:3C:96:0E:EA:3E:33:96:3F:DD:FC:41:2F:37:7B:89
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/Rkgaa2g8lg7qPjOWP938QS83e4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:3500:1060::/47
Signature Algorithm: sha256WithRSAEncryption
6e:ca:db:1c:d2:75:88:90:32:a0:60:0c:8d:9c:1b:cb:0f:56:
4b:22:8f:c6:57:44:90:1c:00:03:e6:d1:76:32:9d:8a:57:76:
57:b1:ef:cd:27:80:e3:62:e5:89:1b:ca:05:b3:f7:77:f0:86:
a2:0a:59:ea:f9:cf:fc:73:b0:b7:34:de:23:61:69:8e:d4:6e:
06:e8:f2:44:37:30:3e:16:f2:d3:76:12:96:75:cb:d8:76:7d:
26:fa:ba:b9:77:32:e8:32:64:55:5b:b4:fc:dc:68:ba:d8:92:
ed:2e:a7:1e:31:5e:a5:0d:99:d6:7e:49:84:24:4a:92:94:42:
9f:f8:ef:bb:f6:3e:e5:c5:bd:07:15:e3:e3:f5:97:23:70:8d:
1f:3c:f6:b0:b8:db:91:f8:1e:47:e2:70:bf:f3:63:b6:c6:89:
ab:bf:9a:60:0d:54:78:33:cb:05:1d:94:b6:5b:f7:63:93:5d:
fe:a3:78:4a:f3:b8:7b:68:19:87:cb:15:16:ca:13:73:68:10:
13:fc:f9:03:7e:d8:02:82:6b:01:78:df:9b:bb:a5:5d:ab:b5:
52:91:c0:5b:df:01:02:42:b6:4f:f9:ab:f4:c7:6d:2b:d0:b7:
c7:5e:65:d1:54:3e:66:e6:67:0b:ad:19:45:f0:94:99:09:01:
ed:26:42:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:20:10 2024 by rpki-client on console-fra.rpki-client.org