Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/4l8aF7hFCKKtBn_AFs3cQITdfCY.roa
File: 4l8aF7hFCKKtBn_AFs3cQITdfCY.roa (raw, json)
Hash identifier: iqBYcVQJynF/LgZBvGOpyu0s1rZlYBhNmPWuGquJE4U=
Subject key identifier: E2:5F:1A:17:B8:45:08:A2:AD:06:7F:C0:16:CD:DC:40:84:DD:7C:26
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F0611616115D201D3958026691E326
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/4l8aF7hFCKKtBn_AFs3cQITdfCY.roa
Signing time: Wed 07 Feb 2024 05:00:30 +0000
ROA not before: Wed 07 Feb 2024 05:00:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49975
IP address blocks: 2a0f:b241:119::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:61:16:16:11:5d:20:1d:39:58:02:66:91:e3:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e25f1a17b84508a2ad067fc016cddc4084dd7c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:40:bd:c4:48:5b:0c:62:b8:69:00:7b:96:5b:
76:3a:55:1d:37:e0:bc:42:11:a8:16:f1:bf:e4:36:
ef:35:bd:3c:38:52:a7:1a:2b:b2:74:73:62:0d:d9:
4e:be:60:eb:fb:47:eb:ab:89:19:0b:66:49:7a:d9:
4a:0e:fc:fe:b6:86:f5:4c:05:87:3a:a9:38:96:7f:
19:b7:46:fa:d4:a2:a7:02:e1:49:fd:fb:d7:da:08:
9c:49:9f:ec:a8:ab:ef:64:73:bd:94:91:8a:ca:12:
f9:5b:77:40:55:d5:7b:ab:d9:cd:fc:93:d3:f6:bd:
18:c2:9f:be:64:e0:cd:fb:0c:93:c7:ab:f5:04:60:
a7:f2:90:a5:ba:fb:21:da:9f:b5:fd:a2:71:bc:64:
2c:d4:0e:4e:36:c0:3b:00:c0:35:08:01:5f:22:72:
28:ef:e8:4b:3a:bc:f0:97:ea:62:44:fe:69:81:ff:
ea:6f:51:5b:f3:98:84:a4:25:87:02:5e:5a:9f:68:
99:c9:90:1e:61:31:e2:a7:70:1a:32:e4:9c:1a:69:
d9:a7:e1:16:b4:9e:95:91:0b:a0:fc:39:dc:00:1b:
5d:9d:ff:74:49:37:63:31:f0:5b:d1:79:65:c9:7b:
2a:6e:2b:28:08:84:e6:ab:2f:ec:4f:3b:24:75:a3:
a1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5F:1A:17:B8:45:08:A2:AD:06:7F:C0:16:CD:DC:40:84:DD:7C:26
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/4l8aF7hFCKKtBn_AFs3cQITdfCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:119::/48
Signature Algorithm: sha256WithRSAEncryption
21:2a:40:c8:f7:4e:95:b8:9d:75:5e:a5:95:e8:9d:08:93:80:
5a:d3:be:be:ba:7d:04:a5:3d:b2:63:d9:42:6f:4a:07:14:1e:
e4:cb:47:5c:8f:23:91:ab:c6:61:6e:a0:2c:e6:9c:76:4a:7a:
39:1f:94:1a:ee:1e:16:a1:09:4f:53:e4:50:10:3d:8e:c1:87:
5e:e5:d9:21:21:f8:4e:0b:be:35:ad:09:68:38:6a:7c:f5:83:
3d:06:ab:72:e7:99:f4:1f:32:60:ec:bf:69:b5:b7:19:11:6e:
b4:73:85:8b:ba:ab:4d:be:84:88:51:24:65:c3:6b:85:0e:e7:
28:81:4f:50:c2:86:91:e0:49:48:e0:ff:5b:aa:81:08:06:b3:
c6:28:57:81:a3:92:92:2d:da:6a:f9:48:97:24:65:e1:16:8f:
da:47:86:42:bc:34:9a:18:5e:ad:66:50:4f:ea:fe:9f:d3:a6:
51:27:72:b1:a5:b1:d1:4a:b8:12:75:3f:f4:c2:15:a4:56:ca:
c2:30:3d:b3:4d:3f:4e:c1:77:c9:86:5a:5b:92:ef:88:b5:5f:
33:78:c6:aa:8e:d2:76:5d:78:b8:dd:01:0c:71:7d:da:5f:0b:
ae:b2:5c:38:e1:45:6e:8e:61:e3:e0:6f:e7:38:3d:3e:ee:49:
d5:a8:ac:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:58:10 2024 by rpki-client on console-fra.rpki-client.org