Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/iT5K7jrvKPIb3MIbXgkOBNs6J3g.roa
File: iT5K7jrvKPIb3MIbXgkOBNs6J3g.roa (raw, json)
Hash identifier: JD5cuSLx2TQWAN/32n4QOen1lg/FPsM0kaCR7e8lgKc=
Subject key identifier: 89:3E:4A:EE:3A:EF:28:F2:1B:DC:C2:1B:5E:09:0E:04:DB:3A:27:78
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 018CC6B94984B24ABCEFF768F7E32590082E
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/iT5K7jrvKPIb3MIbXgkOBNs6J3g.roa
Signing time: Mon 01 Jan 2024 20:31:20 +0000
ROA not before: Mon 01 Jan 2024 20:31:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39145
IP address blocks: 2a03:f80:9001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:49:84:b2:4a:bc:ef:f7:68:f7:e3:25:90:08:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jan 1 20:31:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=893e4aee3aef28f21bdcc21b5e090e04db3a2778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f1:aa:7d:7e:ec:14:12:36:22:1a:48:55:3c:
54:61:27:33:a5:86:7e:12:cb:d8:ee:d7:c6:da:80:
a3:ff:7c:be:77:6e:35:ce:6f:81:4a:22:4e:fd:b9:
3e:80:cf:28:04:b2:c9:3f:06:8b:cc:8b:3f:c7:2b:
3d:da:eb:5d:41:6e:28:ca:56:a1:2c:a3:ac:0d:ce:
f7:a9:fd:01:3f:55:d3:82:20:d0:8d:32:3f:20:9d:
ad:2d:82:56:53:c4:4e:8b:4f:70:a4:6e:06:81:d6:
6d:b4:f6:a4:80:7e:2f:d6:35:b1:fc:0d:4e:56:54:
e9:8e:b8:72:ec:47:59:87:7a:89:a8:5f:ea:62:0b:
18:c6:ac:b0:78:fb:ad:a0:41:33:33:32:d9:76:49:
9c:b6:34:1c:18:ff:b6:25:88:a4:37:54:47:41:39:
f7:f8:6d:e7:40:46:fd:c6:96:7b:32:ba:ec:43:72:
dc:45:51:1a:d9:bc:7a:f5:9a:85:63:46:48:93:eb:
10:9b:39:18:f7:c8:0a:5d:c4:ec:36:48:f1:39:7c:
ab:c2:0c:43:56:1b:52:c7:fc:5f:5a:8b:54:95:f5:
fb:a9:c9:94:b7:e7:2c:10:e0:1d:f8:c6:ce:cf:02:
68:d4:58:ca:63:ca:b4:fa:19:b2:f7:4e:28:fd:4c:
7e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3E:4A:EE:3A:EF:28:F2:1B:DC:C2:1B:5E:09:0E:04:DB:3A:27:78
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/iT5K7jrvKPIb3MIbXgkOBNs6J3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:f80:9001::/48
Signature Algorithm: sha256WithRSAEncryption
6b:0a:c5:ba:15:80:1a:59:72:61:6d:98:52:b8:05:f9:6d:06:
5c:67:02:c7:c6:a7:8f:d8:a4:3f:d6:e8:82:86:a9:ba:8f:84:
51:96:5a:1b:27:af:03:f0:cb:5d:84:91:97:65:b7:f9:1c:ac:
15:6c:22:cd:a7:7c:49:cb:b8:8c:ba:c6:fd:f0:e1:43:f1:8b:
14:86:bb:93:e7:67:72:ae:c9:aa:a5:29:13:9c:44:ec:e4:70:
44:d0:95:e1:55:0b:ca:a0:7d:84:3c:a6:6f:84:d1:e7:51:6b:
00:17:d0:d8:6e:5b:94:92:25:14:91:1c:9d:86:db:6a:fa:ba:
3e:05:a5:84:29:7c:56:1e:d1:dc:a6:6f:a9:a5:6b:4c:4d:b5:
15:09:4f:93:99:2c:19:5e:77:a0:fa:eb:fb:3a:33:cd:e7:15:
80:5c:fc:5c:bd:94:93:55:c6:5b:85:11:21:54:ae:34:28:bc:
d6:93:ac:90:c3:6e:ad:90:ca:4f:24:0a:c5:76:a8:80:e1:30:
1e:19:28:68:a4:96:5b:07:52:db:28:4b:2c:ba:9d:6a:c0:69:
2a:98:90:cd:e0:f5:25:9d:63:6b:a9:c9:c0:f4:8b:a6:4d:4a:
c6:f0:c1:e3:d8:38:f6:14:f3:27:26:df:80:55:f1:67:ff:a3:
87:59:df:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 13:36:29 2024 by rpki-client on console-fra.rpki-client.org