Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/9ldwqpf8iaRwc7gPv6qDLGeXuz4.roa
File: 9ldwqpf8iaRwc7gPv6qDLGeXuz4.roa (raw, json)
Hash identifier: hIM8DOYjlsVe27ZrVisy9AZPPItSet33YQMaScpSIvc=
Subject key identifier: F6:57:70:AA:97:FC:89:A4:70:73:B8:0F:BF:AA:83:2C:67:97:BB:3E
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 018CC726630066485E32FCEC98226F34176C
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/9ldwqpf8iaRwc7gPv6qDLGeXuz4.roa
Signing time: Mon 01 Jan 2024 22:30:30 +0000
ROA not before: Mon 01 Jan 2024 22:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212914
IP address blocks: 2a01:4020:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:63:00:66:48:5e:32:fc:ec:98:22:6f:34:17:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Jan 1 22:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f65770aa97fc89a47073b80fbfaa832c6797bb3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1a:3c:cb:8f:45:99:e4:8c:e7:2d:9e:5c:5a:
80:6c:a3:6e:c5:b2:ac:9f:36:a3:2d:18:c4:a9:52:
11:2f:be:d2:50:64:3b:f1:a2:6b:98:c8:e1:7d:93:
57:52:4d:c8:6e:ac:23:25:45:ff:5d:6d:50:4f:8d:
c6:cb:3f:a6:3f:76:76:b8:72:bf:14:e9:cf:d3:e6:
cd:03:c5:a0:d7:86:0c:cd:02:34:a5:7d:25:cf:d2:
76:84:cd:49:5a:cb:a6:61:ea:16:8c:fe:b6:f9:bf:
d1:f5:2d:0d:a1:71:60:43:4a:ba:ac:33:09:f4:2a:
1d:85:9b:79:3b:a3:ab:d3:78:38:58:aa:45:9e:7e:
a5:af:19:0c:b4:0e:d7:82:28:2f:32:29:64:e1:7a:
d3:66:bd:92:18:89:9d:c7:cd:72:eb:a4:bd:a5:7d:
7e:7c:e1:50:b4:3e:e1:38:14:24:d5:72:cf:62:75:
eb:10:16:74:93:f2:85:da:e5:b1:24:74:97:2e:71:
f9:d6:25:a6:69:2c:e6:c7:26:69:46:a2:33:7d:0b:
d4:66:f1:2c:b9:04:a9:c8:b5:28:09:02:9b:a7:28:
9d:11:9b:f5:f6:06:1d:be:a9:b2:94:48:e7:42:6a:
d3:60:32:15:b5:3d:a1:88:c4:17:ec:64:1f:bc:0e:
0e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:57:70:AA:97:FC:89:A4:70:73:B8:0F:BF:AA:83:2C:67:97:BB:3E
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/9ldwqpf8iaRwc7gPv6qDLGeXuz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:4020:6::/48
Signature Algorithm: sha256WithRSAEncryption
69:a9:63:ef:3e:64:e5:70:f5:51:47:d8:e6:13:1f:7d:8e:0e:
30:27:d4:d9:01:8e:fe:4a:6d:a5:f6:a1:c6:e6:a9:d8:db:1b:
88:e1:fa:bb:4a:da:47:e2:37:df:6c:f5:81:d6:59:f5:2d:48:
6d:8b:5b:8f:d6:f3:87:6b:73:a0:51:d5:9c:35:26:06:4e:f5:
92:a4:91:23:8a:1c:c5:52:21:e5:36:e7:20:11:b0:96:f4:75:
4f:2b:dd:9f:5a:1e:9a:79:25:c6:2b:c9:32:65:f9:56:89:e5:
3a:32:82:5d:ab:22:9f:44:9b:4d:02:92:60:74:f9:d7:c6:62:
04:50:43:e6:20:25:aa:cc:0a:c3:18:e3:b2:97:d6:df:a7:19:
df:56:77:76:5a:d9:a9:79:a1:e5:d8:3b:eb:71:af:c3:27:64:
99:3a:25:0b:22:12:00:a6:e4:87:8c:14:6b:a7:9e:06:c0:86:
4f:5f:0a:93:36:9f:de:68:54:c3:1f:c2:b6:1b:6c:5d:87:f6:
e1:b1:8f:15:9e:c3:73:2d:87:27:2d:d0:b9:d6:a6:72:d3:92:
38:54:fd:e7:93:a0:e5:90:9a:8e:31:2c:5b:dc:c8:f7:a0:25:
19:96:91:e1:5b:6e:00:16:a6:4d:29:aa:00:21:97:70:1f:c3:
f5:d3:bf:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:53:23 2024 by rpki-client on console-fra.rpki-client.org