Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/n8dFJ-T1GfZmwYd3yR2qVOUfwD8.roa
File: n8dFJ-T1GfZmwYd3yR2qVOUfwD8.roa (raw, json)
Hash identifier: wwLjvHboV0pk5l8aIa21kLZzR5E+CCz+d0ln6UPclIA=
Subject key identifier: 9F:C7:45:27:E4:F5:19:F6:66:C1:87:77:C9:1D:AA:54:E5:1F:C0:3F
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 018CC64AE804FC0171FD6FAFA3AB2F611A52
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/n8dFJ-T1GfZmwYd3yR2qVOUfwD8.roa
Signing time: Mon 01 Jan 2024 18:30:46 +0000
ROA not before: Mon 01 Jan 2024 18:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204254
IP address blocks: 2a07:6fc6:2::/48 maxlen: 48
2a00:f826:a::/48 maxlen: 48
2a07:6fc6:100::/40 maxlen: 40
2a07:6fc6:200::/40 maxlen: 40
2a07:6fc6::/40 maxlen: 40
2a07:6fc6::/32 maxlen: 32
2a07:6fc6:1::/48 maxlen: 48
2a07:6fc6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:e8:04:fc:01:71:fd:6f:af:a3:ab:2f:61:1a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 18:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9fc74527e4f519f666c18777c91daa54e51fc03f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:49:9d:06:40:36:79:63:b7:64:d9:dc:6b:82:
6b:16:f3:a5:6a:05:99:06:c8:d4:de:b3:6b:d5:ab:
c6:41:b5:6e:96:10:59:61:7c:06:cc:d0:29:8a:bd:
9a:20:83:ef:fb:89:f2:1c:32:6e:ed:77:6c:8b:9f:
f2:f7:c4:5c:0b:0c:b9:9a:e7:e0:77:06:0a:18:e5:
1b:42:60:89:42:fd:a4:56:19:d7:63:91:06:be:05:
1d:a4:b9:ad:c9:0f:75:85:9c:49:94:35:49:ce:f7:
74:7d:2f:52:33:62:c0:59:08:8f:d9:df:0b:49:ee:
38:5f:d1:14:e6:6c:26:23:e0:ee:9d:ed:69:39:d1:
96:64:c5:e4:55:cd:a4:01:49:1b:66:c0:80:64:c4:
3e:23:d3:24:7d:62:af:34:50:36:96:9b:41:39:f0:
b2:cb:6e:9f:fd:20:e2:ca:eb:5e:89:10:90:d6:7c:
92:e3:66:50:17:99:17:a7:c6:84:17:d3:2c:5d:d4:
b3:73:38:68:40:95:50:96:af:e4:c5:1c:dd:59:e6:
b2:df:e4:79:4d:c5:db:d0:8c:c5:bf:c2:64:ac:43:
36:ba:c4:c6:80:61:13:f6:e6:8b:fa:a6:14:50:79:
a8:d5:85:36:59:9b:e9:eb:64:17:11:72:96:00:c1:
7d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C7:45:27:E4:F5:19:F6:66:C1:87:77:C9:1D:AA:54:E5:1F:C0:3F
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/n8dFJ-T1GfZmwYd3yR2qVOUfwD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:f826:a::/48
2a07:6fc6::/32
Signature Algorithm: sha256WithRSAEncryption
65:22:63:32:8b:f5:9e:c7:fb:87:d3:19:a3:69:c3:a6:e4:36:
53:6e:1d:29:cf:41:0d:8a:50:fc:e0:3a:b4:70:f0:46:5e:fb:
b5:9f:d9:2c:3e:c0:ce:8b:07:4f:fe:1c:f7:56:52:e4:20:b1:
5e:2c:65:7d:32:7c:7b:58:7a:1c:db:66:f6:88:77:57:69:02:
df:7d:1a:14:52:78:9d:65:74:33:69:e5:31:1e:96:16:6f:9d:
2c:60:10:4b:b5:7a:e7:78:08:37:95:fb:86:25:10:bb:92:94:
f5:bf:9c:67:50:79:7c:bd:d9:84:1f:6c:d8:3b:c6:ac:cd:4b:
42:2e:00:52:ed:10:81:69:68:60:6d:70:b4:ca:72:51:8a:e6:
4c:70:a9:b8:38:ef:23:6a:4a:dc:63:23:be:76:62:9c:1b:ed:
0b:29:4c:43:e7:55:b0:79:d9:51:3c:84:88:6e:f7:60:85:ea:
40:ef:de:9a:f9:0b:f5:35:52:72:6e:db:74:8f:fd:f1:48:6f:
0e:a4:d1:1e:20:4d:72:46:77:97:a8:6f:a0:41:01:d5:5d:cd:
1f:51:5e:26:56:de:ec:14:5b:55:97:92:48:a5:22:ba:3e:c4:
1f:4e:da:f5:43:f2:52:40:f6:92:f2:29:c0:db:e4:e4:db:1c:
df:cf:93:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 20:28:21 2024 by rpki-client on console-ams.rpki-client.org