Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Oi-zH-FPQDI0KJLwJdrz5wCvV30.roa
File: Oi-zH-FPQDI0KJLwJdrz5wCvV30.roa (raw, json)
Hash identifier: cF+KEGxD+vBbcZSTRCKN/5SJEfiq6hRIRW1g4YlLlVA=
Subject key identifier: 3A:2F:B3:1F:E1:4F:40:32:34:28:92:F0:25:DA:F3:E7:00:AF:57:7D
Certificate issuer: /CN=56afcd8fb40aae1d243c2a8ce2541a69987eed13
Certificate serial: 018CE5B97EC6EB6D8445D9BEF9D6669645D6
Authority key identifier: 56:AF:CD:8F:B4:0A:AE:1D:24:3C:2A:8C:E2:54:1A:69:98:7E:ED:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Oi-zH-FPQDI0KJLwJdrz5wCvV30.roa
Signing time: Sun 07 Jan 2024 20:59:48 +0000
ROA not before: Sun 07 Jan 2024 20:59:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212580
IP address blocks: 2a11:e487:fc01::/48 maxlen: 48
2a11:e487:1::/48 maxlen: 48
2a11:e487:3::/48 maxlen: 48
2a11:e487:2::/48 maxlen: 48
2a11:e487:beef::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e5:b9:7e:c6:eb:6d:84:45:d9:be:f9:d6:66:96:45:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56afcd8fb40aae1d243c2a8ce2541a69987eed13
Validity
Not Before: Jan 7 20:59:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a2fb31fe14f4032342892f025daf3e700af577d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:14:05:f1:66:d0:da:27:12:f6:aa:ba:fa:50:
71:fd:1c:18:1c:74:4f:01:fc:8b:b3:90:68:c1:e0:
ef:23:5d:ab:b6:b4:d2:44:02:d7:52:5b:88:90:72:
19:bf:93:d6:41:68:d8:18:bb:e2:78:a7:d4:81:59:
4c:09:98:af:e3:11:f3:40:69:f2:a7:55:84:22:b3:
99:47:c8:1b:9b:de:a6:41:b1:59:da:42:2f:da:c5:
c5:a5:b8:70:07:10:75:52:70:41:7c:1a:88:08:b8:
39:28:0e:aa:90:65:e8:74:13:1c:e1:7e:63:e0:1b:
df:39:8a:91:a3:ae:8d:e7:f9:e6:dd:7d:b5:82:46:
15:21:b4:0d:84:45:38:6e:2e:ac:c8:4e:86:d6:2b:
01:7e:ad:b3:0f:99:56:39:58:b6:d1:2e:8c:be:a2:
36:36:f9:d0:31:59:68:b1:ae:07:fc:3a:de:7a:a9:
05:7c:ac:6b:7f:34:25:b7:f9:3a:ed:bc:2c:67:3e:
5f:63:3a:cb:a6:29:af:bc:6c:2f:a3:4b:ad:4b:58:
31:e1:d6:c2:03:ae:80:c9:ae:7c:6b:49:16:d5:24:
23:05:6b:db:67:27:1f:17:f8:24:93:27:88:d5:b4:
26:3f:57:10:d0:9d:2b:02:34:9f:ca:eb:8c:5d:e0:
a6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2F:B3:1F:E1:4F:40:32:34:28:92:F0:25:DA:F3:E7:00:AF:57:7D
X509v3 Authority Key Identifier:
keyid:56:AF:CD:8F:B4:0A:AE:1D:24:3C:2A:8C:E2:54:1A:69:98:7E:ED:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Oi-zH-FPQDI0KJLwJdrz5wCvV30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:e487:1::-2a11:e487:3:ffff:ffff:ffff:ffff:ffff
2a11:e487:beef::/48
2a11:e487:fc01::/48
Signature Algorithm: sha256WithRSAEncryption
75:1d:93:64:58:b9:b1:95:09:60:c5:43:f5:65:9c:dd:65:c0:
2b:08:98:51:68:6e:eb:4f:0e:6c:15:20:98:88:b2:c8:ff:b7:
2c:79:63:12:19:53:ed:6b:9a:b4:bc:a3:c1:92:af:cb:4a:cc:
7b:73:b6:7b:3b:a3:ac:4a:33:1f:d0:69:e0:5d:0a:cf:0a:8b:
df:07:7a:6e:f8:9c:96:d7:76:31:c2:83:d3:8e:01:0f:88:38:
77:74:a6:e7:7d:24:7d:16:26:27:d8:30:6a:1d:40:02:74:cb:
d7:a8:e2:28:79:6f:be:66:9f:9e:52:c6:8d:84:ab:a3:52:0f:
f8:37:74:5a:56:04:ed:cf:f6:c0:1c:44:8f:76:f8:92:2d:99:
69:18:ed:42:a7:05:31:e6:76:b9:02:04:e5:22:bf:78:dd:2a:
89:50:e7:84:d1:6b:55:56:60:1b:e3:86:8e:8b:96:f5:48:f7:
dc:eb:f3:03:ab:57:da:95:c9:60:c3:3e:c7:02:97:f2:22:ff:
30:c6:c1:83:1e:f2:6d:f6:98:ee:bc:0c:1a:0b:1d:1c:fb:7c:
28:c6:f2:cc:2d:01:42:d2:9c:9d:1a:0e:af:b5:0c:f9:b0:bb:
30:0f:7c:ad:17:57:3c:03:e6:00:09:fe:c0:fc:ff:27:f9:76:
19:bd:08:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:49:48 2024 by rpki-client on console-fra.rpki-client.org