Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/iWF3oW-0qa-6pTRJrKXDbcWm5aM.roa
File: iWF3oW-0qa-6pTRJrKXDbcWm5aM.roa (raw, json)
Hash identifier: +4gZpmXvQ/2OpYo0fPwjEci7ki2oH1dnoNLCruJ5UQ8=
Subject key identifier: 89:61:77:A1:6F:B4:A9:AF:BA:A5:34:49:AC:A5:C3:6D:C5:A6:E5:A3
Certificate issuer: /CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Certificate serial: 018CC3B72C6B383435BEE115CC1948896637
Authority key identifier: 10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/iWF3oW-0qa-6pTRJrKXDbcWm5aM.roa
Signing time: Mon 01 Jan 2024 06:30:10 +0000
ROA not before: Mon 01 Jan 2024 06:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212414
IP address blocks: 2a02:d0c2:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:2c:6b:38:34:35:be:e1:15:cc:19:48:89:66:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Validity
Not Before: Jan 1 06:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=896177a16fb4a9afbaa53449aca5c36dc5a6e5a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:58:db:6e:b6:2d:fa:dd:b8:1d:82:93:a9:89:
a5:36:52:a9:88:29:df:ff:be:4c:9a:15:fb:39:af:
61:bc:a4:b8:0c:9e:81:8c:df:19:c0:b8:4d:55:27:
90:c8:42:98:55:77:f1:0a:26:04:52:93:3e:e3:f6:
7b:47:24:ae:6e:5f:1c:f1:23:35:ba:b2:2a:d0:c0:
29:7a:54:f7:2e:03:db:f3:76:22:cf:b2:ab:8a:ea:
6c:42:d7:ef:25:72:93:fb:2d:66:8c:8c:a8:43:21:
78:0a:e1:32:88:de:b0:06:36:47:05:d8:11:d2:e8:
a4:79:d7:15:47:38:be:09:60:71:88:f5:8d:a5:bb:
dd:38:ce:9d:6a:bc:84:c2:15:cb:23:5f:23:f1:e1:
0c:85:a4:96:ff:2f:23:b8:70:d1:34:43:ce:e8:c1:
5a:84:24:80:5f:59:85:df:30:92:b8:c1:dd:66:47:
04:59:3f:ec:e5:20:2c:6f:5a:04:81:05:d6:98:56:
a3:ff:24:c9:fd:ab:3d:67:f1:24:88:f0:3b:09:d7:
a6:38:64:6b:e7:6a:9b:e2:1e:01:f5:96:a2:ca:73:
bd:09:2b:01:9c:21:6d:ff:b4:27:ca:84:78:2a:a3:
92:c4:d1:82:f2:2e:6e:17:31:30:7b:ed:c4:6e:1b:
87:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:61:77:A1:6F:B4:A9:AF:BA:A5:34:49:AC:A5:C3:6D:C5:A6:E5:A3
X509v3 Authority Key Identifier:
keyid:10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/iWF3oW-0qa-6pTRJrKXDbcWm5aM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:d0c2:2::/48
Signature Algorithm: sha256WithRSAEncryption
c3:85:85:02:da:ab:7e:3b:5a:0e:77:d1:9a:df:1f:82:38:cd:
f0:07:4d:13:1a:5b:18:cd:71:56:62:1f:a6:74:00:d6:e8:e7:
32:93:8c:3d:ea:9d:a0:01:76:92:3c:13:6e:a0:b0:bb:cc:4e:
72:8a:dd:f0:31:de:58:bd:b9:fb:cc:ec:c2:21:45:de:b8:ae:
5e:5f:21:d2:1f:03:6c:bf:ce:51:2d:a7:1e:31:b1:66:4a:38:
97:f2:61:e0:ab:1a:f4:4c:88:ee:54:83:86:ec:a7:17:c4:91:
7c:a2:4f:a2:ab:1f:d3:84:06:bc:78:7e:fb:4a:52:c2:d2:73:
c2:b5:77:c3:32:8a:5d:c3:6a:26:e9:d1:a5:93:37:d9:bf:bc:
9e:17:30:57:bc:27:95:cb:b3:e5:51:5e:c9:60:f1:13:de:6c:
68:e4:a5:c9:fb:07:40:6e:a4:44:84:b7:be:6e:d4:54:07:f4:
a7:e2:c0:5b:c4:43:ef:fd:57:40:7e:80:15:ff:7d:e5:86:63:
16:63:0a:5e:fd:5e:90:d2:c1:ad:c9:70:01:47:14:6e:8b:c8:
1f:17:94:a7:5e:22:40:ba:88:96:87:d0:0a:b9:b7:24:ea:7c:
93:79:59:6d:11:75:8c:16:73:15:95:13:1a:af:64:44:ba:aa:
98:87:91:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:48:59 2024 by rpki-client on console-ams.rpki-client.org