Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/T2qfLLU9KQyUAlmJSK7KQS-pddo.roa
File: T2qfLLU9KQyUAlmJSK7KQS-pddo.roa (raw, json)
Hash identifier: Cz1dMQNLlsBc0Xb75loL8VmjgxXubhSEr7yDuQswKjY=
Subject key identifier: 4F:6A:9F:2C:B5:3D:29:0C:94:02:59:89:48:AE:CA:41:2F:A9:75:DA
Certificate issuer: /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
Certificate serial: 018CC94CEE50711E86D860507B1BFAA33909
Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/T2qfLLU9KQyUAlmJSK7KQS-pddo.roa
Signing time: Tue 02 Jan 2024 08:31:51 +0000
ROA not before: Tue 02 Jan 2024 08:31:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30780
IP address blocks: 2a06:1e00:48::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:ee:50:71:1e:86:d8:60:50:7b:1b:fa:a3:39:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
Validity
Not Before: Jan 2 08:31:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f6a9f2cb53d290c9402598948aeca412fa975da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:8f:60:c4:8a:63:90:5a:08:45:68:0e:42:49:
df:89:18:59:fb:ae:62:14:38:2b:dc:cc:5b:a7:63:
dd:bb:54:49:8d:6e:15:c9:b2:7d:92:55:bd:40:0f:
de:6b:d5:0d:d2:6f:da:df:5d:74:15:ba:42:07:22:
7f:16:0a:3b:d7:11:2f:c0:c0:d3:24:7c:1d:68:af:
db:7c:71:7d:71:34:ec:fb:f1:92:23:ef:c4:dd:51:
79:48:82:fc:f4:1a:04:4f:cf:90:d1:9c:3d:93:33:
6c:18:6e:8e:ef:b2:81:53:9a:e3:1b:e3:22:49:c2:
32:eb:14:d3:6b:1a:33:4d:12:af:2c:73:91:7a:4d:
9e:31:95:a3:bf:e6:70:a6:a8:21:08:72:70:4a:0f:
22:8e:0f:8a:f3:ea:28:51:00:69:f4:f6:b8:c8:aa:
be:ae:84:a0:03:e2:71:fe:ed:c5:4b:8d:e8:61:be:
c2:37:80:17:f4:69:5b:91:ed:d1:ba:78:e7:10:bb:
84:93:fd:6a:f4:e6:bc:a3:a2:69:a2:4d:19:d5:54:
ea:0e:da:c1:01:96:22:43:1d:32:4d:66:4b:7c:fd:
94:7a:04:5b:07:10:3f:b0:96:51:d1:48:79:29:eb:
04:89:7f:58:ce:02:f8:83:50:1a:ae:af:b9:5d:96:
92:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6A:9F:2C:B5:3D:29:0C:94:02:59:89:48:AE:CA:41:2F:A9:75:DA
X509v3 Authority Key Identifier:
keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/T2qfLLU9KQyUAlmJSK7KQS-pddo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1e00:48::/48
Signature Algorithm: sha256WithRSAEncryption
a5:00:0a:4f:da:5e:7d:7c:f3:1f:7c:9b:e7:79:c2:74:d7:84:
94:23:bf:46:05:9c:b5:f7:c8:02:54:17:b1:bc:11:f6:10:2b:
17:ab:c8:ab:03:fa:44:0b:a5:7e:6c:19:c7:45:5d:48:9c:5f:
60:05:d2:cf:90:28:e5:0d:34:93:2e:9d:89:8e:f0:b7:53:48:
55:ff:20:32:7f:30:fd:8a:da:46:64:95:59:dc:fe:48:7e:57:
b5:a7:b1:ae:03:00:d0:78:71:07:99:2c:2b:79:82:97:81:6c:
10:d8:1b:43:70:e2:4f:2d:82:04:10:e1:f3:fa:05:99:95:b3:
18:ea:bb:ea:ec:85:59:97:f5:99:82:70:a3:b9:2a:3a:64:c2:
f0:f6:d7:2e:2f:ce:e1:80:78:97:23:7a:90:70:ad:18:ef:45:
25:14:8a:9c:06:11:60:49:45:13:d9:e3:d8:ce:63:5e:f7:e1:
1e:3d:f7:c7:53:dc:5c:f0:89:cb:a2:1a:0c:d0:17:2c:be:95:
fd:30:16:b3:d9:cb:75:fc:70:f1:83:88:f9:33:1a:1f:d1:e2:
a3:75:c0:53:60:52:70:45:bb:c3:9f:c3:88:f9:ad:45:80:ca:
17:1d:b0:bb:46:aa:6b:ee:0d:39:f2:7a:9f:4a:53:c4:fb:9d:
c7:5c:d5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 05:50:34 2024 by rpki-client on console-ams.rpki-client.org