Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/ao45pnomhvoUWN-ZIkGZU_Txwr4.roa
File: ao45pnomhvoUWN-ZIkGZU_Txwr4.roa (raw, json)
Hash identifier: e65/rhjh/drm3mtDAz3S+/FPm1NTSoV6J/nAiVO7pgA=
Subject key identifier: 6A:8E:39:A6:7A:26:86:FA:14:58:DF:99:22:41:99:53:F4:F1:C2:BE
Certificate issuer: /CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
Certificate serial: 018CC801B9A5A62620A4D70C495311E51A7B
Authority key identifier: 09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/ao45pnomhvoUWN-ZIkGZU_Txwr4.roa
Signing time: Tue 02 Jan 2024 02:30:05 +0000
ROA not before: Tue 02 Jan 2024 02:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57795
IP address blocks: 2a04:1c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:b9:a5:a6:26:20:a4:d7:0c:49:53:11:e5:1a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
Validity
Not Before: Jan 2 02:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a8e39a67a2686fa1458df9922419953f4f1c2be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:07:c7:2f:87:c5:31:c6:3f:8d:34:80:af:57:
53:03:f2:c9:18:6c:a5:09:bd:ff:21:84:2d:72:50:
93:c5:c1:70:e0:d6:31:cb:1f:74:0e:64:76:e3:5d:
7b:e6:88:a7:65:7b:31:9f:d6:f7:39:6c:63:2f:3b:
46:92:73:07:ae:7d:ac:c6:64:4a:f8:fa:bd:30:01:
d6:3a:be:cd:97:9e:2a:91:d7:c3:81:8d:e6:a7:14:
b0:89:ac:8d:7c:2e:a7:16:12:c6:c7:4e:da:e1:f9:
97:e6:ce:36:0e:78:2b:81:b7:85:9e:0e:49:a2:45:
08:9c:ff:e2:ee:16:c4:36:e8:ce:95:bf:6a:cd:68:
26:1a:01:94:24:98:a0:cb:22:70:41:30:3f:0a:74:
2f:0c:9f:21:0e:1c:fc:27:34:0e:50:98:70:9a:1d:
17:1a:10:f5:1a:61:9c:83:74:c1:d5:dc:fc:c4:d1:
54:f5:57:39:22:73:9b:e6:96:12:70:82:35:cf:c7:
04:46:12:8e:5e:58:28:73:bf:e4:5e:cf:1e:89:94:
1e:65:13:e5:bc:8d:91:30:df:af:03:6f:e7:91:b3:
b6:be:c7:47:ab:bc:e2:d2:1b:73:5d:fb:c6:db:14:
92:f5:97:af:de:ae:0f:e8:70:0c:95:db:45:a8:be:
02:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8E:39:A6:7A:26:86:FA:14:58:DF:99:22:41:99:53:F4:F1:C2:BE
X509v3 Authority Key Identifier:
keyid:09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/ao45pnomhvoUWN-ZIkGZU_Txwr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:1c0::/29
Signature Algorithm: sha256WithRSAEncryption
55:b4:91:ab:48:57:a4:8a:b3:6c:8e:9a:22:bd:7f:06:45:cf:
e7:eb:de:5c:9d:74:d5:0f:70:0f:7b:75:db:02:cd:77:a3:0f:
6b:53:09:0a:50:82:c4:cc:e6:82:d9:68:12:ac:76:43:f7:71:
4e:85:b8:0f:fb:65:2b:4b:e0:a5:d8:e3:7a:0c:b7:3d:17:2c:
55:67:a4:cc:47:8a:4c:42:7b:b2:05:61:cb:d3:d6:f0:1d:d7:
ac:ec:0b:87:ed:cf:20:ca:4b:a6:6b:91:d1:28:03:3e:90:88:
c1:ad:6b:c3:7b:d3:d6:c7:d1:42:a2:e1:96:7e:bb:ab:6a:76:
06:80:a5:b8:a2:86:b7:ef:34:57:fa:1e:40:cf:14:12:19:f8:
3e:ea:8d:a2:09:16:4e:23:93:5b:6c:90:97:07:68:6d:23:2b:
41:4a:d6:c3:12:35:47:97:fd:e9:e5:38:48:36:fc:c3:ca:76:
0d:c0:5a:4b:5b:71:0b:52:3a:38:4d:69:17:d9:48:91:00:e5:
fc:91:f0:7c:b3:8d:88:80:3a:c8:4e:aa:94:5b:60:a2:eb:61:
ff:8c:55:0f:05:eb:7e:c5:18:f6:d3:67:70:5c:61:b8:55:38:
3b:ff:a9:0b:bc:10:b2:fb:35:b8:e4:c7:5e:47:b7:14:70:e8:
56:e2:a8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 18:00:10 2024 by rpki-client on console-ams.rpki-client.org