Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/06ZZAbYBxsAybGZzNY9v5iOyBBc.roa
File: 06ZZAbYBxsAybGZzNY9v5iOyBBc.roa (raw, json)
Hash identifier: 7HHHI2HYbd2PmsR09uzVbc/w/8vqp7VvwcZcQ2Mv500=
Subject key identifier: D3:A6:59:01:B6:01:C6:C0:32:6C:66:73:35:8F:6F:E6:23:B2:04:17
Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3
Certificate serial: 018CC2DB59210A7FCE8BA1A48470077FA003
Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/06ZZAbYBxsAybGZzNY9v5iOyBBc.roa
Signing time: Mon 01 Jan 2024 02:30:04 +0000
ROA not before: Mon 01 Jan 2024 02:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208806
IP address blocks: 2a10:4741:20::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:59:21:0a:7f:ce:8b:a1:a4:84:70:07:7f:a0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3
Validity
Not Before: Jan 1 02:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3a65901b601c6c0326c6673358f6fe623b20417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:dd:b5:e4:07:66:55:59:42:02:28:33:98:6a:
3b:bb:d9:61:1d:16:cb:73:3d:72:b1:91:22:88:93:
3c:c9:61:1b:7c:ce:52:be:35:97:44:e6:58:c6:9d:
df:22:31:c8:b3:0c:93:a6:14:59:55:9c:ba:8a:a0:
aa:71:9a:ea:b9:b7:a2:d4:23:9d:ec:87:c0:21:7d:
d6:2f:f2:61:08:56:7c:92:07:f9:02:09:df:5b:ab:
84:08:87:a0:31:2d:1b:58:64:b3:5c:a5:9a:2c:45:
91:5d:24:78:9b:50:56:bf:0d:7c:63:8a:79:c6:f8:
fe:ed:88:ee:07:5e:3e:2a:84:b6:46:6c:3e:a6:48:
f9:dd:f4:41:5a:2f:18:10:b2:66:ad:39:4d:b6:5c:
dc:46:a3:99:09:ff:78:15:88:87:f9:ef:47:6f:ea:
12:73:2f:23:10:c7:d0:de:8c:07:ff:83:bc:44:5e:
52:ab:81:50:f4:b7:8e:4e:90:63:d8:4c:d0:01:3d:
ea:8a:d3:da:3f:48:a6:42:34:46:9e:25:96:1d:33:
8f:40:96:11:32:f5:ff:12:a8:b8:57:1b:3f:99:62:
3b:ec:57:b8:40:0f:76:c4:98:1a:f4:b2:00:50:2d:
26:36:6d:ab:64:13:c0:da:11:aa:6a:f8:fa:1f:84:
86:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A6:59:01:B6:01:C6:C0:32:6C:66:73:35:8F:6F:E6:23:B2:04:17
X509v3 Authority Key Identifier:
keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/06ZZAbYBxsAybGZzNY9v5iOyBBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4741:20::/48
Signature Algorithm: sha256WithRSAEncryption
1e:38:0d:e7:47:6a:c0:d2:94:82:87:b8:e0:bc:08:6d:19:7c:
4a:04:16:71:3c:3f:0d:f3:c9:12:b9:8d:6d:2c:d0:27:c0:be:
0e:40:d1:e1:73:15:5d:71:5f:02:e1:f9:2e:f1:64:f5:78:38:
60:41:15:d0:a4:8a:30:a5:60:f7:81:b1:9b:b4:ed:dd:4a:21:
31:62:8a:6c:cc:00:b9:a2:2c:2f:22:aa:1f:6f:c2:cd:53:4a:
c1:02:87:ca:03:0b:f1:39:68:3a:92:59:40:d8:74:fd:9c:d7:
43:7b:ab:b2:6e:80:4d:c4:83:1c:bb:91:66:72:87:4d:98:88:
d0:a2:18:09:0e:00:ed:d8:2c:f6:8c:70:17:22:51:56:6d:84:
a2:17:a5:c2:79:ff:2c:38:0b:63:a5:58:29:cc:c6:e2:f7:ad:
cb:3b:50:f2:3a:e9:85:12:b1:09:08:20:c4:a9:51:0e:66:78:
8a:18:5e:72:3e:38:b2:a0:8a:bd:91:10:88:2a:46:16:3b:2c:
6c:07:bd:59:0c:e8:5b:84:6a:dd:c6:df:0e:55:84:ce:94:36:
90:49:f4:5f:db:9a:7e:98:f7:59:99:42:b0:5c:ba:5a:12:75:
a0:ab:0d:81:9e:6d:7b:98:1a:82:04:62:2a:b2:94:51:51:75:
bf:4b:c2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 05:42:39 2024 by rpki-client on console-ams.rpki-client.org