Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/pUZzOdFBaRARHJnR9iae0-Dxc2I.roa
File: pUZzOdFBaRARHJnR9iae0-Dxc2I.roa (raw, json)
Hash identifier: BoNAybL6zuX9fIRbPxyP1YClHa9wb3D7hoQcPZS8UBc=
Subject key identifier: A5:46:73:39:D1:41:69:10:11:1C:99:D1:F6:26:9E:D3:E0:F1:73:62
Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Certificate serial: 018CC94CDD39E8FC5392B07ACF528E7F6D68
Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/pUZzOdFBaRARHJnR9iae0-Dxc2I.roa
Signing time: Tue 02 Jan 2024 08:31:46 +0000
ROA not before: Tue 02 Jan 2024 08:31:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49981
IP address blocks: 2a04:92c7:16::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 23:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:dd:39:e8:fc:53:92:b0:7a:cf:52:8e:7f:6d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Validity
Not Before: Jan 2 08:31:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5467339d1416910111c99d1f6269ed3e0f17362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:9e:f4:98:49:55:c3:bb:1c:73:71:8d:90:f4:
a7:db:38:3d:20:b9:c1:9a:86:93:af:df:0d:3c:e8:
a5:ce:c2:4d:35:14:de:0f:d8:04:00:25:f3:30:2f:
d1:31:19:bc:82:53:9d:5b:ed:24:ad:cd:e2:f2:c4:
77:95:2a:8b:d1:a9:da:87:b9:be:75:e6:25:d8:e7:
82:b1:57:bf:1a:5a:bf:a5:5f:5c:f9:c9:5c:11:c5:
93:e2:33:50:74:c0:39:5b:95:76:ec:38:56:44:3c:
94:8d:a3:9c:4f:da:eb:87:e0:ae:c3:21:94:50:84:
6b:b3:f1:88:1e:4e:db:f2:e8:37:e7:5c:75:2c:ed:
98:d7:5e:9d:0c:99:cf:8c:4c:1e:b0:c4:ea:ca:e7:
ba:c4:05:ee:23:21:b4:03:0c:49:6f:0c:5b:d1:20:
ff:b5:e9:30:6b:dd:de:3d:60:9a:f4:63:71:01:79:
6a:80:7b:59:6c:07:60:dc:21:b9:f0:f2:c6:ae:0f:
e9:e7:7a:fc:17:a7:c5:e3:09:17:ce:8a:65:f8:9a:
55:08:27:7e:22:51:81:b8:0a:05:2c:ef:e3:62:83:
44:61:ed:62:da:9b:a8:f9:d0:3b:58:40:1a:66:c1:
e0:c1:7b:b9:52:7e:89:2c:ac:67:27:db:80:56:4a:
62:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:46:73:39:D1:41:69:10:11:1C:99:D1:F6:26:9E:D3:E0:F1:73:62
X509v3 Authority Key Identifier:
keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/pUZzOdFBaRARHJnR9iae0-Dxc2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:92c7:16::/48
Signature Algorithm: sha256WithRSAEncryption
39:9e:2d:75:82:de:6d:06:69:fa:2c:23:12:c8:f2:86:b4:61:
69:1b:c2:e7:7a:02:fa:e7:bb:8c:69:49:49:d9:bf:70:39:09:
b9:6c:90:1a:d6:af:79:d4:bd:7f:c0:c8:8b:44:35:41:8a:29:
8e:17:fb:5b:f6:dc:e9:c9:a5:b7:b1:15:47:d3:5f:72:59:1a:
85:4a:f8:43:80:b3:a2:74:5d:8a:fb:ef:f3:3b:8a:4d:fe:8a:
7c:4f:4f:6a:aa:1b:0e:29:0c:da:a7:66:5e:26:8f:64:ff:0d:
71:f7:8b:b6:1c:d0:b8:5a:fe:53:83:29:d1:59:d8:ed:58:93:
6a:32:d0:45:82:07:fc:5c:49:ef:76:b3:2a:01:f4:86:9b:d0:
fc:a5:3e:28:f6:7d:c8:7d:29:8a:79:8a:45:bf:31:f7:3e:e8:
0d:01:3e:56:00:b0:4a:f7:87:3f:53:0f:0a:69:a4:4e:f5:fe:
09:cb:de:ee:b8:ee:e7:62:71:0c:e8:73:45:89:a1:92:31:85:
21:c0:24:63:6c:6c:20:d5:92:f2:20:bc:c6:8c:49:bf:52:92:
a8:e8:c5:7f:e1:43:a3:93:e7:f1:e1:01:96:e9:1d:5e:fa:84:
6c:45:a3:37:33:17:0a:2d:36:73:c6:35:2a:85:a9:dc:37:05:
2f:5d:3e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 08:10:18 2024 by rpki-client on console-ams.rpki-client.org