Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/StG6FRvZaz7WzGO0eqKbZKl30yA.roa
File: StG6FRvZaz7WzGO0eqKbZKl30yA.roa (raw, json)
Hash identifier: bkW+CsNZTbrHhku5xw/yB8H1SkAmP3DYEfhjiWDSeNM=
Subject key identifier: 4A:D1:BA:15:1B:D9:6B:3E:D6:CC:63:B4:7A:A2:9B:64:A9:77:D3:20
Certificate issuer: /CN=cddb6f10030e276f8316276f40b3d4a4184d94dd
Certificate serial: 018CC4923477BF71B5D688ABCFF498A8CDD6
Authority key identifier: CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/StG6FRvZaz7WzGO0eqKbZKl30yA.roa
Signing time: Mon 01 Jan 2024 10:29:25 +0000
ROA not before: Mon 01 Jan 2024 10:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64445
IP address blocks: 2a00:8c60:c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 Nov 2024 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:34:77:bf:71:b5:d6:88:ab:cf:f4:98:a8:cd:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cddb6f10030e276f8316276f40b3d4a4184d94dd
Validity
Not Before: Jan 1 10:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ad1ba151bd96b3ed6cc63b47aa29b64a977d320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1a:0d:bc:f8:bb:00:3b:f4:da:7b:f1:29:88:
a0:e4:08:0b:7b:2c:16:c8:93:e0:26:df:3b:0b:90:
0c:42:7e:bd:83:60:e7:e5:71:7a:b7:b3:ab:3c:94:
72:40:34:4e:22:59:ec:4b:f8:4c:38:1a:ae:20:ee:
a4:87:fe:0a:2c:35:c6:18:6b:ab:fb:a6:02:85:bf:
66:9d:a4:34:e8:c3:5e:ce:10:87:92:0c:75:77:1c:
b4:8c:50:58:49:4b:e4:77:be:ae:fa:17:5f:78:05:
4d:c4:49:95:32:1e:4c:cf:c2:b4:5b:08:64:71:be:
f4:90:67:6b:05:1f:01:7d:6a:c1:40:17:68:48:87:
69:2a:81:d4:5c:30:92:56:78:0a:bb:d1:bd:f2:2c:
28:ef:0d:5f:51:8c:84:72:a0:f9:df:25:96:a3:54:
ec:ee:a7:85:8a:f9:91:20:28:ef:3a:bf:da:98:94:
ee:ba:9a:c8:fc:79:6c:d4:66:8b:ab:36:1a:57:3f:
a6:4c:79:f3:48:cf:24:30:46:ea:37:f0:eb:f8:a0:
06:e3:a3:0e:56:c5:0c:a5:ac:80:b1:a2:e0:78:4d:
16:47:90:21:9f:e0:3b:5d:2e:da:97:3d:83:8c:b8:
77:57:e8:64:e6:84:d5:3c:09:08:69:4f:56:08:4d:
b4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D1:BA:15:1B:D9:6B:3E:D6:CC:63:B4:7A:A2:9B:64:A9:77:D3:20
X509v3 Authority Key Identifier:
keyid:CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/StG6FRvZaz7WzGO0eqKbZKl30yA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:8c60:c::/48
Signature Algorithm: sha256WithRSAEncryption
15:2b:41:f1:f1:76:06:f8:dd:f2:9b:c7:c7:c4:52:00:08:41:
ab:78:c1:47:81:cf:2e:8d:9f:f0:f5:60:04:c8:95:9e:e0:fa:
93:8e:9a:b4:16:b9:21:60:ae:13:87:4d:cb:a6:a2:be:c0:ac:
a5:48:cb:d9:3f:77:c2:5a:ad:e7:40:1c:14:52:ae:8a:e8:64:
f1:67:50:13:5a:a4:3e:a8:21:c6:bf:93:83:ac:ad:c4:fa:50:
f4:91:82:2f:7f:39:f4:64:7a:d0:51:1c:34:37:d1:a2:f6:b9:
b5:1a:6d:59:d8:10:18:07:68:30:bb:7f:2b:6c:d6:16:0c:85:
60:90:0b:5d:a8:ef:9a:aa:23:0d:97:55:a7:38:d7:a1:85:19:
d9:98:03:8e:77:b6:3d:4f:46:6d:da:9c:74:a9:cf:d9:e7:18:
9d:cc:30:a1:19:c6:cd:0d:d1:6e:c1:8e:71:99:87:16:31:b7:
4e:71:73:85:78:9b:42:3d:60:1e:c2:65:2a:74:b0:cf:ed:e0:
51:6b:06:f0:14:25:18:20:bf:22:46:28:c8:5f:48:40:bd:66:
7f:23:7a:e1:07:c7:e6:d5:07:bf:3d:df:79:5f:3d:d5:3c:c5:
fa:62:69:59:92:4f:13:e3:37:0a:da:49:d6:60:5d:1a:f3:63:
94:a4:c3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 19:44:27 2024 by rpki-client on console-fra.rpki-client.org