Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/t5BMQR_Bs0AEYmrbpL7lxFUYnMY.roa
File: t5BMQR_Bs0AEYmrbpL7lxFUYnMY.roa (raw, json)
Hash identifier: Piypz/OE+SCfk2VY2P3nPOEtASav54KuLE68ilZgsFU=
Subject key identifier: B7:90:4C:41:1F:C1:B3:40:04:62:6A:DB:A4:BE:E5:C4:55:18:9C:C6
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 018E3DD4926B30578E9C2B655C4F58B0DCC7
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/t5BMQR_Bs0AEYmrbpL7lxFUYnMY.roa
Signing time: Thu 14 Mar 2024 16:38:45 +0000
ROA not before: Thu 14 Mar 2024 16:38:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211211
IP address blocks: 2a01:48a0:4301::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3d:d4:92:6b:30:57:8e:9c:2b:65:5c:4f:58:b0:dc:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Mar 14 16:38:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7904c411fc1b34004626adba4bee5c455189cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b5:95:b6:f2:fb:35:4f:04:3d:90:a2:ac:b6:
f8:00:21:63:62:2e:1a:08:75:9c:26:2c:ff:1b:05:
fa:b5:40:bf:9b:84:ed:58:f1:18:8a:eb:9e:16:cb:
32:05:32:e7:96:2f:70:e5:07:49:59:28:19:9c:41:
d3:cf:84:84:c2:a1:a7:d8:55:91:e2:00:86:d2:37:
6d:05:4e:3d:b6:3c:05:2a:07:5f:a9:de:7b:70:8f:
c1:06:e3:4a:97:5a:89:29:f6:4c:6b:a7:96:11:18:
4b:b1:d3:53:1f:bb:2f:a5:a5:c7:0d:cf:63:bc:83:
e8:bd:06:df:06:3e:42:1f:d0:01:f2:d2:16:78:4a:
24:37:b5:ff:44:23:ea:8d:89:e5:a0:8a:ea:dc:b2:
49:ed:7d:38:d4:ee:4b:e0:cd:01:88:9d:6a:e0:71:
a7:0f:cf:fa:58:f3:e4:11:04:74:4f:c7:c1:02:e3:
63:3b:90:89:37:b9:88:41:64:7a:d2:68:5e:af:0c:
0c:37:78:a0:7f:e9:02:ce:f8:15:2d:70:01:dd:f0:
1e:11:a0:b3:1c:b8:a0:ae:70:58:30:a0:e9:ba:32:
4f:51:a4:e5:48:41:eb:37:b0:c5:56:d3:b0:02:cd:
93:6d:57:1d:29:24:15:75:87:0f:6d:41:5b:2b:c3:
7e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:90:4C:41:1F:C1:B3:40:04:62:6A:DB:A4:BE:E5:C4:55:18:9C:C6
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/t5BMQR_Bs0AEYmrbpL7lxFUYnMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:48a0:4301::/48
Signature Algorithm: sha256WithRSAEncryption
14:64:1b:e1:81:f0:c8:17:58:f6:99:34:a4:99:8b:0d:93:54:
f3:85:9f:2d:20:57:5d:ed:36:55:b6:c8:ae:ad:93:ef:c1:c0:
e3:ed:08:58:bf:35:31:6b:32:d0:09:ec:4b:0d:54:3e:4f:31:
21:5e:4f:82:2f:ce:16:17:4e:d0:3a:b0:a8:5f:0f:55:53:73:
ed:4e:5b:0d:f8:11:6b:88:c9:4b:2c:ba:78:e8:a5:a1:dd:20:
60:8a:4f:48:b6:38:6a:c4:78:1d:f8:d6:79:4e:ea:a7:cd:6c:
e3:21:c4:0b:3b:88:ca:80:a1:5a:27:77:71:82:0f:10:bc:f1:
ce:f9:81:8b:a4:72:0f:4a:18:0a:54:f5:4a:21:e6:a7:15:11:
f4:51:dc:db:db:09:c8:90:cc:47:ae:56:f5:58:58:18:91:a6:
d1:04:c7:40:24:3c:e0:e9:be:47:e2:68:09:c3:fc:17:d9:2a:
3e:c3:32:26:f9:1c:81:20:07:49:19:db:34:9e:79:64:ae:29:
a4:a9:fc:cc:84:76:88:ac:f2:4c:87:ea:13:a8:b7:88:62:d2:
a0:48:e9:b2:63:46:0b:53:17:cd:92:c2:78:42:6a:25:74:3e:
73:df:0b:06:36:a7:fc:64:eb:a4:d5:55:cf:2e:fa:2f:bd:43:
8c:12:53:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 06:50:47 2024 by rpki-client on console-fra.rpki-client.org