Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/OuY-3CY9mNO_KacyqHODcJ_ebG0.roa
File: OuY-3CY9mNO_KacyqHODcJ_ebG0.roa (raw, json)
Hash identifier: 5ZqlYVgDzLzY2HK479SwsmwhxEA7PsJ1PeeEEVB3Nzg=
Subject key identifier: 3A:E6:3E:DC:26:3D:98:D3:BF:29:A7:32:A8:73:83:70:9F:DE:6C:6D
Certificate issuer: /CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Certificate serial: 018CC26D84C217B51841DF77D2C5B842AE69
Authority key identifier: B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/OuY-3CY9mNO_KacyqHODcJ_ebG0.roa
Signing time: Mon 01 Jan 2024 00:30:06 +0000
ROA not before: Mon 01 Jan 2024 00:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205365
IP address blocks: 2a00:1908:fffe::/48 maxlen: 48
2a00:1908:fffc::/48 maxlen: 48
2a00:1908:ffff::/48 maxlen: 48
2a00:1908:fffa::/48 maxlen: 48
2a00:1908:fffd::/48 maxlen: 48
2a00:1908:fffb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 07:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:84:c2:17:b5:18:41:df:77:d2:c5:b8:42:ae:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Validity
Not Before: Jan 1 00:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ae63edc263d98d3bf29a732a87383709fde6c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:62:5f:79:5d:94:c4:96:64:e6:a3:be:0e:fd:
ad:1f:2f:4c:0c:04:b4:d9:bb:e4:31:14:0f:52:f5:
2f:3d:5f:0c:40:70:c3:71:96:6a:c6:cd:a4:08:93:
57:43:ea:7d:85:2c:b1:d7:44:c7:6a:1f:08:07:84:
75:ec:2a:a2:b0:2a:22:a3:6c:fe:37:94:2a:81:15:
58:2b:14:9e:16:c8:ff:8d:53:25:fc:8b:2d:9b:6c:
37:5e:9c:75:a2:28:f3:c0:5c:31:ef:47:a0:43:90:
b8:38:03:b3:35:26:1f:18:df:c1:72:45:a3:78:ac:
8d:b2:99:77:9d:a2:36:61:fa:2d:69:11:48:d5:1c:
2f:fd:c6:b8:0c:ea:4e:dd:58:ac:79:47:2b:59:c3:
55:58:82:4c:2c:03:af:82:a3:cb:fe:cf:f0:ba:92:
ab:7c:24:dd:d3:b9:18:67:a7:27:1d:e1:47:ea:4b:
27:ca:28:fc:ea:fe:d3:c3:67:34:4d:0f:21:21:89:
dd:1c:a3:41:cb:63:ed:33:78:85:3a:2c:95:16:92:
ee:86:a8:0b:f8:f1:94:e8:e9:82:4b:94:09:99:e9:
00:82:cd:1b:d9:46:24:b8:b1:81:67:90:97:0f:b8:
75:d9:86:87:c0:9a:64:1f:96:65:2c:5c:92:73:26:
f5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E6:3E:DC:26:3D:98:D3:BF:29:A7:32:A8:73:83:70:9F:DE:6C:6D
X509v3 Authority Key Identifier:
keyid:B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/OuY-3CY9mNO_KacyqHODcJ_ebG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1908:fffa::-2a00:1908:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4c:91:27:f5:b1:ab:d3:08:11:a4:0d:99:92:51:eb:ac:d6:2e:
2f:92:c0:c0:b1:b8:fb:2f:13:60:bb:c6:3b:0e:44:87:02:83:
4a:68:cb:28:72:25:9a:f4:13:d1:8f:6c:b4:1e:91:08:38:2f:
09:af:eb:2f:50:f6:29:6c:46:2d:ec:7e:f3:22:4a:f1:4b:f6:
41:2f:b7:34:34:ce:a9:55:57:4d:79:d9:bc:bb:7f:ed:ad:af:
30:9a:ef:4b:d4:18:a0:db:41:4f:e1:99:50:0f:f9:f6:7e:04:
1a:ac:f8:f5:f4:4c:22:a0:d5:54:f3:dd:09:7b:1d:56:45:cb:
62:a6:a5:f2:6f:e2:84:28:33:5a:db:09:a9:35:96:9f:88:ef:
93:01:35:d7:44:6c:3a:ad:e5:9f:8a:69:68:f5:b4:fa:c4:c8:
1a:8f:73:96:f0:94:cd:a5:84:64:a1:40:73:b2:39:6e:1e:35:
fa:cc:6d:28:51:5a:96:2c:23:00:83:d3:b5:9c:07:71:94:31:
cd:bf:f6:ff:f8:84:a1:f0:f6:b7:a6:34:ec:a7:1b:c8:07:c1:
fa:1a:f0:34:42:67:46:22:3e:51:b5:33:be:77:58:08:76:8d:
09:bc:24:e4:8b:3e:82:b3:41:6f:91:3b:fc:a4:99:9b:1c:d4:
96:a1:c9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 09:00:46 2024 by rpki-client on console-fra.rpki-client.org