Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/KeNp0x5bXjZbAP7qVQM_ScG34Xo.roa
File: KeNp0x5bXjZbAP7qVQM_ScG34Xo.roa (raw, json)
Hash identifier: WK3P4S1K/jCTzo8aqbx15dQahXpuIuzg5ZUxUlTLMMA=
Subject key identifier: 29:E3:69:D3:1E:5B:5E:36:5B:00:FE:EA:55:03:3F:49:C1:B7:E1:7A
Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Certificate serial: 018CC6B7B2293FD64249A1E17A240D7DA779
Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/KeNp0x5bXjZbAP7qVQM_ScG34Xo.roa
Signing time: Mon 01 Jan 2024 20:29:36 +0000
ROA not before: Mon 01 Jan 2024 20:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213044
IP address blocks: 2a0a:d6c0:217::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jul 2024 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:b2:29:3f:d6:42:49:a1:e1:7a:24:0d:7d:a7:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Validity
Not Before: Jan 1 20:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=29e369d31e5b5e365b00feea55033f49c1b7e17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5e:e9:9c:39:d3:f7:ab:44:91:65:02:22:de:
24:21:df:ac:85:2a:ba:5b:b5:40:ba:9e:2b:36:c3:
47:86:2b:10:85:20:e8:cf:95:10:cc:11:11:b0:94:
84:40:3c:3e:40:b6:7e:9c:ee:89:08:17:2f:08:df:
63:3f:f9:c2:e4:48:73:d2:7f:89:4e:fa:74:cc:a9:
1d:65:36:e4:f8:51:ef:53:50:3e:d8:4c:ec:a2:8e:
90:ba:b8:37:7a:01:28:78:d7:e7:0e:9a:01:53:cf:
0c:ce:9d:a6:ed:c2:75:1b:21:33:89:2e:71:54:8c:
c5:02:0b:0d:88:06:9a:af:b5:31:8f:89:ea:ea:8d:
fd:6e:21:8a:02:e5:4a:e6:3b:23:68:e4:30:c5:b7:
a1:8c:75:7e:f4:d4:bf:3e:43:4a:44:4a:fc:c2:d2:
ec:d4:3c:a6:48:c7:0a:b9:56:3f:e9:cd:97:c3:0a:
07:14:77:60:9f:92:bf:ca:e8:d9:4d:67:c3:da:b5:
02:a3:33:76:23:28:74:66:08:38:8b:73:08:1c:50:
61:d1:45:d1:d0:1d:3c:41:1d:77:70:34:4f:4d:dc:
01:6b:b0:22:14:4f:b8:f9:a1:4c:c5:18:45:dd:4b:
dc:8f:45:ce:07:d9:b5:cd:ea:19:30:6c:37:6c:28:
8a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E3:69:D3:1E:5B:5E:36:5B:00:FE:EA:55:03:3F:49:C1:B7:E1:7A
X509v3 Authority Key Identifier:
keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/KeNp0x5bXjZbAP7qVQM_ScG34Xo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:d6c0:217::/48
Signature Algorithm: sha256WithRSAEncryption
59:1d:08:c8:16:2d:25:56:aa:12:06:28:1a:f9:ed:d0:67:e7:
48:3e:6f:9b:ae:76:f4:73:31:98:8d:43:bc:26:f6:0c:62:f0:
20:67:ae:4b:11:93:6f:6a:1d:51:b3:f4:31:6c:23:a6:e2:36:
65:61:75:ce:75:fd:6b:2b:08:6d:34:7d:2b:13:48:bb:4a:79:
7f:0c:2f:1d:4b:58:3b:66:69:da:c0:b2:b6:08:c0:91:12:c7:
63:9d:32:97:24:8a:45:b6:23:04:35:fd:c8:53:d9:b0:f6:84:
2d:99:fb:bc:71:43:89:37:e6:e8:1c:05:ec:14:c9:4a:34:ed:
ee:6c:4a:77:5b:b7:ee:2a:d0:eb:8e:4e:2d:1d:3a:30:4e:fa:
69:ef:40:8a:56:73:98:9d:fb:5f:14:d5:e1:d9:2d:c1:b5:11:
b8:00:ec:57:41:16:25:be:bf:bb:23:a3:dc:a2:21:88:23:e0:
ea:70:a6:08:77:b9:39:82:1e:09:bd:92:e9:74:46:33:d9:c2:
00:78:2c:73:35:f2:77:82:ea:ab:80:6c:95:d9:a5:55:7c:2c:
69:47:25:60:15:b1:87:fa:9a:57:ca:4c:e9:33:0e:d7:ac:34:
25:78:9a:b5:21:ee:28:90:56:d3:8f:e6:46:3c:cd:86:aa:d9:
e4:0f:bc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 13:41:17 2024 by rpki-client on console-fra.rpki-client.org