Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/uiAxCjyX3QT0pNQmV_P5lxHZ5RM.roa
File: uiAxCjyX3QT0pNQmV_P5lxHZ5RM.roa (raw, json)
Hash identifier: hqV8FgxsrXINgskWma19v2UbCR88aZpdO7lM4BvJvGU=
Subject key identifier: BA:20:31:0A:3C:97:DD:04:F4:A4:D4:26:57:F3:F9:97:11:D9:E5:13
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 018CC5DCBCE2130D178A6DB4C9B7AD0EEA8A
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/uiAxCjyX3QT0pNQmV_P5lxHZ5RM.roa
Signing time: Mon 01 Jan 2024 16:30:26 +0000
ROA not before: Mon 01 Jan 2024 16:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42093
IP address blocks: 2a06:c3c0:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 14:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:bc:e2:13:0d:17:8a:6d:b4:c9:b7:ad:0e:ea:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 16:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba20310a3c97dd04f4a4d42657f3f99711d9e513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f3:05:ae:ad:f7:0a:6e:54:9d:7d:7a:aa:13:
d6:5b:a3:74:fa:a3:b2:35:f2:8d:3c:8a:d2:04:d3:
e4:d4:e2:89:e0:cd:c1:87:84:0c:6b:34:7c:c3:64:
83:1f:0c:75:e6:8b:83:78:c9:45:e5:36:72:35:8e:
d9:f5:bc:71:b7:10:33:34:2a:de:da:fb:8a:4d:93:
e1:49:9b:21:8e:3b:e8:d9:44:d6:e1:da:dc:fa:a5:
70:7b:bf:eb:a2:45:07:a5:dc:b8:27:a7:fa:c4:a7:
d2:8a:bc:b9:ba:19:3a:7d:32:1d:d8:92:89:b5:ba:
5d:1f:ea:5d:da:d4:79:98:e6:19:35:ac:f0:e7:39:
86:4d:15:1e:cf:ab:03:26:9b:60:44:62:be:d5:26:
84:80:51:84:c0:40:20:7e:64:91:10:8c:18:0f:f3:
06:71:f2:76:ef:d1:94:33:b6:99:02:83:df:46:5f:
e8:3f:69:a3:5d:b9:01:80:85:01:93:34:4e:51:a3:
e8:a7:3d:e3:83:7d:e3:83:16:19:1f:c0:a6:6c:2d:
20:72:51:72:c1:a6:e8:3c:4f:2c:12:ab:6f:78:05:
80:b9:74:e7:8a:78:10:b4:f2:37:45:89:3d:94:51:
3f:ed:15:22:bf:2d:06:f8:a0:b1:ce:52:9b:21:47:
20:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:20:31:0A:3C:97:DD:04:F4:A4:D4:26:57:F3:F9:97:11:D9:E5:13
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/uiAxCjyX3QT0pNQmV_P5lxHZ5RM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:c3c0:3::/48
Signature Algorithm: sha256WithRSAEncryption
03:bd:f9:f9:85:8d:5f:30:63:0d:b7:16:c6:13:2d:c1:1c:cf:
65:ed:c4:bf:5e:96:15:94:74:5d:14:4f:17:3a:97:9e:76:08:
77:26:83:d3:14:e1:5b:25:89:de:86:06:9c:ba:b4:eb:e5:2d:
c9:34:23:5f:67:1d:9b:64:0e:fa:42:a4:e7:ad:29:c6:ee:f3:
35:da:f3:bd:77:91:98:d5:0c:65:19:99:ce:1c:e5:02:5a:4e:
d6:eb:30:bd:28:19:20:7b:22:2f:01:fb:0f:e0:5a:9f:d3:a9:
49:64:55:c8:28:06:67:1f:95:2a:c8:48:ac:12:5e:81:36:1a:
8b:e3:d0:cb:c6:22:14:96:63:ff:10:b9:ba:01:e1:ba:00:75:
f9:fb:d1:de:28:72:ca:5e:c5:98:80:82:24:f9:99:c6:d4:d9:
64:a8:8c:38:37:b7:a9:f5:96:32:73:03:e8:46:2c:e8:c7:86:
5d:53:22:48:e3:35:e5:f5:92:dd:03:48:29:8e:32:14:2d:62:
82:6d:72:44:05:bc:67:65:6a:a0:a5:01:6b:b5:62:c1:06:d6:
4d:ad:64:5c:10:ff:15:5c:a1:59:2a:0c:7b:4d:65:5d:a9:2d:
25:6b:1c:93:4e:60:32:3f:8b:eb:4f:3e:10:8f:90:eb:a3:ee:
af:e0:b9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:11:42 2024 by rpki-client on console-ams.rpki-client.org