Route Origin Authorization
$ rpki-client -vvf rpki.services.vm.a-x1.w420.net/repo/warpnet/0/326130343a356138303a61633a3a2f34382d3438203d3e20313939393138.roa
File: 326130343a356138303a61633a3a2f34382d3438203d3e20313939393138.roa (raw, json)
Hash identifier: Yoa9UJjpXCALOm1TkgYAQSzZEqlxNJDzgc2Dnx+Ak0M=
Subject key identifier: 8A:96:71:55:93:87:7D:05:53:8E:F7:03:95:E7:6F:84:AF:1F:F1:D1
Certificate issuer: /CN=0a0c8a94d3bc04c23ceea78a10cf218f1bf0ec79
Certificate serial: 44D295795B3F28C67A304386D8BF86FFB0DE524C
Authority key identifier: 0A:0C:8A:94:D3:BC:04:C2:3C:EE:A7:8A:10:CF:21:8F:1B:F0:EC:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CgyKlNO8BMI87qeKEM8hjxvw7Hk.cer
Subject info access: rsync://rpki.services.vm.a-x1.w420.net/repo/warpnet/0/326130343a356138303a61633a3a2f34382d3438203d3e20313939393138.roa
Signing time: Sat 09 Mar 2024 10:53:03 +0000
ROA not before: Sat 09 Mar 2024 10:48:03 +0000
ROA not after: Sat 08 Mar 2025 10:53:03 +0000
asID: 199918
IP address blocks: 2a04:5a80:ac::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.services.vm.a-x1.w420.net/repo/warpnet/0/0A0C8A94D3BC04C23CEEA78A10CF218F1BF0EC79.crl
rsync://rpki.services.vm.a-x1.w420.net/repo/warpnet/0/0A0C8A94D3BC04C23CEEA78A10CF218F1BF0EC79.mft
rsync://rpki.ripe.net/repository/DEFAULT/CgyKlNO8BMI87qeKEM8hjxvw7Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:d2:95:79:5b:3f:28:c6:7a:30:43:86:d8:bf:86:ff:b0:de:52:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a0c8a94d3bc04c23ceea78a10cf218f1bf0ec79
Validity
Not Before: Mar 9 10:48:03 2024 GMT
Not After : Mar 8 10:53:03 2025 GMT
Subject: CN=8A96715593877D05538EF70395E76F84AF1FF1D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:41:a8:97:ca:71:98:19:dd:15:55:0a:40:3f:
7f:4d:5f:98:c6:79:06:7a:1b:48:62:2d:47:25:8a:
d7:a4:9c:f3:68:1d:d9:25:7b:ff:54:33:e6:73:f5:
23:2f:6f:0b:df:3e:ce:77:c7:c5:f7:a1:c8:f1:26:
02:2b:2a:95:30:f6:d7:e5:0f:90:88:86:c6:2c:02:
67:65:ad:31:a7:28:c0:5e:95:2c:dd:67:b2:ab:e2:
0b:37:38:39:ae:07:62:bd:bc:69:7b:8e:f1:91:13:
a0:22:20:7e:f0:0b:85:e0:42:b1:1b:e5:4c:e1:97:
d5:d3:e2:c1:2b:31:56:e0:f9:98:36:5f:ec:57:5e:
89:d1:f2:0a:cf:96:7d:aa:01:9d:e1:ba:9a:06:b8:
f0:3f:96:2f:e0:35:50:9b:db:dc:a7:6f:49:63:d3:
03:11:94:29:42:84:3f:10:c1:ab:22:e2:6c:d9:45:
67:14:a5:c5:b5:de:36:82:41:3c:5c:59:14:80:51:
54:86:8a:73:93:e5:2d:7b:ef:55:62:6a:80:b7:9e:
1e:b1:fe:9f:5d:e5:3d:d5:d8:76:74:1d:ef:c2:62:
2c:07:06:17:28:98:1c:a8:2a:69:90:13:3b:4b:d8:
19:d3:7f:db:19:7a:c7:d9:f5:7e:66:9d:09:84:35:
7f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:96:71:55:93:87:7D:05:53:8E:F7:03:95:E7:6F:84:AF:1F:F1:D1
X509v3 Authority Key Identifier:
keyid:0A:0C:8A:94:D3:BC:04:C2:3C:EE:A7:8A:10:CF:21:8F:1B:F0:EC:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.services.vm.a-x1.w420.net/repo/warpnet/0/0A0C8A94D3BC04C23CEEA78A10CF218F1BF0EC79.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgyKlNO8BMI87qeKEM8hjxvw7Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.services.vm.a-x1.w420.net/repo/warpnet/0/326130343a356138303a61633a3a2f34382d3438203d3e20313939393138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:5a80:ac::/48
Signature Algorithm: sha256WithRSAEncryption
04:d0:08:09:c8:08:ca:df:fb:2e:7b:c5:2b:e8:36:9a:4b:9c:
b0:1e:da:a5:0c:81:ba:8e:f8:57:32:e1:87:10:58:2a:57:1d:
58:42:43:12:d5:6c:b5:44:8c:b4:11:8d:f7:aa:e0:ad:d6:4b:
00:cb:26:88:d4:24:f4:08:d2:fe:b5:6e:52:88:f2:43:5e:ab:
66:44:29:4d:e6:40:18:b3:4f:a8:04:2a:3d:45:53:7a:b9:05:
26:3d:6c:40:20:97:74:52:13:5a:0f:71:a8:8d:ad:68:42:c5:
96:98:2b:5e:9c:02:03:82:68:a7:34:ae:d2:90:ee:f4:85:14:
3a:04:08:02:53:19:1e:55:5b:fd:6f:64:3b:64:88:00:f3:95:
6b:6e:87:10:eb:2a:5b:fa:28:c3:3d:9c:09:53:6c:27:87:9f:
77:f2:d4:98:2a:49:2f:60:32:bd:0d:53:4a:b7:fb:cc:a0:8e:
00:7a:74:2a:c4:99:1a:07:96:9d:26:75:55:b0:fb:9e:c5:38:
81:66:75:0c:39:b1:49:82:b8:8c:bd:5e:0e:d5:f4:bd:f4:0d:
95:82:f0:41:66:06:62:a4:b7:cb:e2:4e:90:e1:54:a1:fd:7e:
9f:d1:bd:79:a7:e9:8d:73:96:cd:e7:d0:6e:ff:09:53:9e:51:
4e:74:5c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:53:31 2024 by rpki-client on console-fra.rpki-client.org