Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/SVSI0d7G1j-3T8K3pS8691bz8jQ.roa
File: SVSI0d7G1j-3T8K3pS8691bz8jQ.roa (raw, json)
Hash identifier: g1F9pbLmcb19X+eOplLsUtv0Hkrps1Fcaaqnt/ThEZU=
Subject key identifier: 49:54:88:D1:DE:C6:D6:3F:B7:4F:C2:B7:A5:2F:3A:F7:56:F3:F2:34
Certificate issuer: /CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Certificate serial: 018EC89673441EFD33F35E962D7C9A2E7AD3
Authority key identifier: FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/SVSI0d7G1j-3T8K3pS8691bz8jQ.roa
Signing time: Wed 10 Apr 2024 15:18:06 +0000
ROA not before: Wed 10 Apr 2024 15:18:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42861
IP address blocks: 2a00:1e68:100::/47 maxlen: 128
2a00:1e68:100::/48 maxlen: 128
2a00:1e68:101::/48 maxlen: 128
2a00:1e68:112::/48 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c8:96:73:44:1e:fd:33:f3:5e:96:2d:7c:9a:2e:7a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Validity
Not Before: Apr 10 15:18:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=495488d1dec6d63fb74fc2b7a52f3af756f3f234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c1:43:a4:a6:f3:b9:e5:f7:6a:da:05:5e:43:
91:db:a3:e9:dd:2d:ca:73:fc:8a:66:2d:53:b8:6e:
10:c1:82:d9:bd:fb:24:52:dc:04:53:f8:b5:a2:48:
3c:b0:3b:20:f6:e4:af:de:c2:ff:ca:bc:7a:af:04:
1a:b1:62:56:6f:d0:df:71:6f:fd:b3:ad:6a:87:39:
e0:f9:2b:a5:a4:28:43:38:bf:11:d3:d7:8b:53:62:
b2:15:47:6a:4d:38:06:c0:07:29:19:8b:94:45:98:
f2:4a:72:b0:77:ff:9c:be:08:74:91:0c:ce:d4:a5:
14:9e:cf:42:2b:61:78:69:12:d5:67:a4:e4:dc:11:
72:9a:11:06:1a:ce:02:33:2b:25:60:78:7f:81:41:
d5:a5:82:3a:51:40:00:72:39:59:58:48:a6:15:5f:
22:18:a9:01:27:17:6d:cc:16:c6:02:8c:d6:f9:d0:
a4:d2:f6:bf:ae:4b:e5:c8:35:54:68:73:00:46:e9:
75:93:36:f3:9c:f6:80:84:c9:db:5a:f4:f9:42:ff:
a4:57:7f:7f:bd:1b:ed:71:a1:6c:3e:ba:c9:8c:e4:
33:32:7e:d7:31:f4:4f:49:d4:1e:73:67:96:a1:c7:
e7:0b:86:ff:1e:ab:91:c7:e5:3a:77:16:89:7f:1c:
d5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:54:88:D1:DE:C6:D6:3F:B7:4F:C2:B7:A5:2F:3A:F7:56:F3:F2:34
X509v3 Authority Key Identifier:
keyid:FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/SVSI0d7G1j-3T8K3pS8691bz8jQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1e68:100::/47
2a00:1e68:112::/48
Signature Algorithm: sha256WithRSAEncryption
25:77:3c:4c:60:42:f1:8a:ad:20:28:aa:e3:80:6b:72:5a:64:
41:9e:92:f0:a5:93:13:f8:0b:22:83:97:83:b5:d3:cc:86:b0:
c9:3b:ca:9f:00:74:e3:d5:c3:d4:f7:a7:c9:2b:98:be:ae:ce:
ed:3c:7d:f8:cb:08:7c:5f:19:d2:b3:ef:79:7b:eb:5d:85:77:
ea:99:fe:9a:3e:8b:22:89:d5:dd:74:54:f7:84:5d:c8:71:48:
29:10:2c:68:19:66:53:c4:ea:74:07:73:3d:92:67:7d:d6:d2:
9c:c9:db:90:d0:c7:f7:06:a0:aa:9a:29:93:db:a1:41:4d:58:
07:91:ee:61:0b:ed:8f:88:9b:18:49:b2:a4:ad:77:83:2e:7b:
48:5b:d1:80:76:06:70:8a:ea:67:c7:5d:8b:83:9a:de:ef:11:
1c:62:e1:7b:11:9e:5d:0c:8c:29:d2:d2:9a:f6:36:82:27:2b:
66:83:61:52:33:55:0a:4f:08:9d:d9:d8:de:ab:7a:bd:59:97:
6e:be:d8:b6:61:92:fe:72:61:16:f6:2b:2f:27:6b:f3:22:5b:
bf:7f:54:3b:0b:83:e4:6c:cb:39:c8:d5:a1:4e:15:90:0b:41:
38:0a:8e:c7:ad:26:2b:45:c0:92:a7:21:ab:b2:51:9d:9f:59:
8b:03:e7:32
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 19 06:48:22 2024 by rpki-client on console-fra.rpki-client.org