Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/rkp7hy4lJicxKke7XCDrE22CB-8.roa
File: rkp7hy4lJicxKke7XCDrE22CB-8.roa (raw, json)
Hash identifier: c0tRjcHlVMviFB9MhBShjOeAXnQtVj3T4yLoL4NVd8w=
Subject key identifier: AE:4A:7B:87:2E:25:26:27:31:2A:47:BB:5C:20:EB:13:6D:82:07:EF
Certificate issuer: /CN=e390f2ee0a70bcaefe0195a3d8b377d34297a943
Certificate serial: 018CC94AB260C09E0D5492B41271D6DAB28A
Authority key identifier: E3:90:F2:EE:0A:70:BC:AE:FE:01:95:A3:D8:B3:77:D3:42:97:A9:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/rkp7hy4lJicxKke7XCDrE22CB-8.roa
Signing time: Tue 02 Jan 2024 08:29:24 +0000
ROA not before: Tue 02 Jan 2024 08:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206583
IP address blocks: 2a04:71c4::/32 maxlen: 32
2a04:71c3::/32 maxlen: 32
2a04:71c7::/32 maxlen: 32
2a04:71c2::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:b2:60:c0:9e:0d:54:92:b4:12:71:d6:da:b2:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e390f2ee0a70bcaefe0195a3d8b377d34297a943
Validity
Not Before: Jan 2 08:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae4a7b872e252627312a47bb5c20eb136d8207ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3a:4e:b4:df:29:a1:16:54:b5:0c:2d:62:48:
3d:56:f1:dd:6f:4b:65:5d:b0:29:85:6d:7f:29:1d:
2b:f7:d3:48:7f:be:26:cf:2d:06:fe:a3:5d:51:2d:
ce:fb:b7:e7:b9:ce:2c:78:60:1e:54:2b:ab:77:4e:
95:1b:3a:12:d0:c2:18:07:9e:50:b6:88:a1:3d:8f:
b5:37:dd:57:79:b1:a3:ad:8d:6e:75:86:15:98:5b:
ae:9f:e3:ea:74:c1:a0:f9:02:48:02:ff:c0:ad:9f:
9e:5a:34:d2:15:29:2e:48:30:0b:76:83:81:c8:4b:
27:f1:ec:be:c3:5d:82:36:11:99:aa:ec:bb:39:9a:
bf:67:60:5c:00:1a:21:41:3c:94:7c:38:a5:9d:a2:
de:80:d0:3b:53:4e:b4:d3:01:07:2a:6c:8d:d5:9d:
75:6c:4a:65:e7:fe:9f:a0:f0:1b:c8:2c:c8:96:1e:
88:5c:19:6e:dd:a8:1d:57:36:9d:b9:ff:00:42:49:
1c:53:18:de:ae:90:fc:c9:cf:ef:b3:e4:00:2d:a6:
18:b1:34:b2:23:d4:f7:cf:5b:76:e4:a9:0e:3f:8b:
92:15:1f:88:8f:fc:84:b6:3b:15:14:f1:b2:e8:76:
fa:da:6b:8b:2c:85:03:69:31:9f:01:37:25:8d:ad:
3d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:4A:7B:87:2E:25:26:27:31:2A:47:BB:5C:20:EB:13:6D:82:07:EF
X509v3 Authority Key Identifier:
keyid:E3:90:F2:EE:0A:70:BC:AE:FE:01:95:A3:D8:B3:77:D3:42:97:A9:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/rkp7hy4lJicxKke7XCDrE22CB-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:71c2::-2a04:71c4:ffff:ffff:ffff:ffff:ffff:ffff
2a04:71c7::/32
Signature Algorithm: sha256WithRSAEncryption
47:b8:78:39:e3:4a:d6:a1:ef:be:90:4f:4d:f0:28:44:0b:d0:
67:93:d4:aa:e4:3c:c7:10:cd:fe:45:8b:67:6a:f7:57:00:29:
08:57:0f:0a:2e:d2:f8:7d:66:34:0d:ec:55:7d:de:b4:de:73:
c2:c5:39:85:b5:33:1c:7d:17:db:61:19:83:f5:56:63:8c:de:
fe:35:e7:80:5b:26:48:57:fc:ef:ba:97:a3:82:f8:75:1a:4e:
1c:74:92:d5:d9:9d:90:a4:9f:d0:eb:2a:82:4a:b5:95:18:7d:
8a:cb:62:7e:80:0d:a2:74:75:b7:0a:bf:5f:b9:11:74:78:eb:
f0:fc:b5:d6:b9:9c:76:a5:32:ad:50:77:18:a6:79:a3:84:b9:
f4:da:a2:a6:fc:3e:4b:ad:5d:62:75:b1:29:05:db:2d:75:6d:
c2:96:f5:b6:e4:e2:a2:70:41:3c:49:b0:1e:65:8c:59:e7:5a:
c3:b1:b3:8c:e7:8c:76:e9:7a:7a:52:41:5e:24:de:cd:57:d2:
d5:b8:6c:9a:7f:5c:a4:12:9d:54:ec:09:a9:fb:c7:b2:13:98:
fa:f2:48:71:06:df:d2:75:c1:ae:df:42:b8:39:86:82:e0:23:
98:28:02:a1:47:d6:18:15:bb:13:29:11:b7:b6:b8:dd:0a:f0:
21:2e:30:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 09:36:32 2024 by rpki-client on console-ams.rpki-client.org