Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/I3XH35UIi75KmGxY5yJfuf8h02E.roa
File: I3XH35UIi75KmGxY5yJfuf8h02E.roa (raw, json)
Hash identifier: xn2PMU6un3K/kl/cNS+tl9QsPEDDj866jLyY6ydPg6E=
Subject key identifier: 23:75:C7:DF:95:08:8B:BE:4A:98:6C:58:E7:22:5F:B9:FF:21:D3:61
Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Certificate serial: 018E0B0C53C230BC39B63845BA965C9BB93F
Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/I3XH35UIi75KmGxY5yJfuf8h02E.roa
Signing time: Mon 04 Mar 2024 19:59:01 +0000
ROA not before: Mon 04 Mar 2024 19:59:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44803
IP address blocks: 2a0f:f01::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0b:0c:53:c2:30:bc:39:b6:38:45:ba:96:5c:9b:b9:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Validity
Not Before: Mar 4 19:59:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2375c7df95088bbe4a986c58e7225fb9ff21d361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:10:d6:03:fc:c8:9f:46:b1:78:6b:84:32:4b:
c2:3c:e4:ed:6b:b1:97:9e:fa:32:84:3e:bd:fa:21:
4e:ca:d1:8d:e6:f4:e5:7b:f0:bc:4f:5f:80:b2:4e:
88:ef:0b:b1:76:1e:00:b6:49:ef:bc:d6:c2:ec:c3:
c2:d2:5e:e7:2e:9a:b8:6e:31:f3:86:c3:70:46:c7:
86:ff:32:9d:61:bf:9b:2f:0d:68:b1:a1:cc:12:37:
08:1b:56:8a:b7:2b:4f:e9:a7:39:4a:b0:2c:36:14:
52:87:7c:58:51:b8:5d:ce:82:59:28:79:1d:8e:91:
c2:3a:94:63:02:f4:93:9c:c8:cb:93:7f:a5:66:21:
5a:96:1e:6b:a9:9b:57:03:8c:37:57:4c:b1:30:a3:
7d:03:4d:73:ed:f8:e0:49:3b:5a:1c:0f:50:55:5a:
d0:f3:50:c9:0a:80:12:bb:bd:12:94:b6:05:04:77:
a4:46:41:4e:64:b1:3c:7c:9a:67:44:30:a6:ed:b0:
8b:6d:8a:a1:92:c9:fc:2e:7b:64:85:d9:f9:46:6c:
7d:38:de:91:78:52:a3:44:6c:bb:c9:9d:07:22:72:
67:fd:b3:22:96:f8:0f:78:34:58:34:44:fe:fd:64:
72:46:c9:fe:ab:2f:65:75:96:49:d3:a8:28:d7:4a:
70:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:75:C7:DF:95:08:8B:BE:4A:98:6C:58:E7:22:5F:B9:FF:21:D3:61
X509v3 Authority Key Identifier:
keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/I3XH35UIi75KmGxY5yJfuf8h02E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:f01::/32
Signature Algorithm: sha256WithRSAEncryption
3c:a0:7e:ea:39:88:d7:f9:48:6d:ec:63:84:9a:fc:89:70:68:
eb:dc:2b:4b:e7:f5:13:cc:e2:c4:53:a9:bb:97:04:25:3d:e0:
17:51:e1:3d:48:30:8c:fa:3e:35:1b:2f:f1:09:f5:45:86:3f:
20:30:08:2d:67:46:79:b1:b3:31:b0:04:94:8d:92:fd:cd:78:
9e:84:9d:71:46:a6:b8:3b:98:8e:a1:f5:26:75:26:06:57:c9:
75:4f:48:90:2f:fb:a4:be:07:30:df:52:16:f5:06:c3:c3:39:
32:2f:c6:c4:aa:50:7e:d8:ba:51:a8:93:12:01:e4:4a:24:c8:
2c:aa:35:42:c2:de:dd:ef:dc:f2:2f:b8:df:aa:57:f3:cc:70:
81:fc:d0:1b:ef:ca:a9:49:3a:45:6f:63:4c:ea:fa:72:72:35:
be:dc:ce:e2:a1:b3:1f:8a:f8:38:08:4c:52:05:e3:db:b8:61:
70:e7:73:bd:7c:69:23:03:2b:c4:a5:9a:ab:6b:cd:01:fd:3d:
1d:f5:b4:83:c2:42:67:58:ba:65:41:d8:48:4e:c4:55:03:26:
33:2b:b5:b2:0d:8a:07:3c:6c:d9:cc:83:27:6d:f9:85:88:84:
6e:d7:81:54:b3:22:5c:1d:22:3c:f6:9a:23:89:0f:ea:15:3d:
ed:99:e9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 20:20:51 2024 by rpki-client on console-fra.rpki-client.org