Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/2OiTSIuhSeTnwlzsjfChQLLe5q0.roa
File: 2OiTSIuhSeTnwlzsjfChQLLe5q0.roa (raw, json)
Hash identifier: MnSEeFPBSvxsUkllu1Ik4O3r2urmqc/A3LgZaEKJCnM=
Subject key identifier: D8:E8:93:48:8B:A1:49:E4:E7:C2:5C:EC:8D:F0:A1:40:B2:DE:E6:AD
Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial: 018CC50157B577CE7C6A4C0416EC8943D553
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/2OiTSIuhSeTnwlzsjfChQLLe5q0.roa
Signing time: Mon 01 Jan 2024 12:30:48 +0000
ROA not before: Mon 01 Jan 2024 12:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60707
IP address blocks: 2a0f:6580:106::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 14:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:57:b5:77:ce:7c:6a:4c:04:16:ec:89:43:d5:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
Validity
Not Before: Jan 1 12:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8e893488ba149e4e7c25cec8df0a140b2dee6ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:22:a6:ab:19:ff:19:0d:ee:18:f1:60:5d:45:
59:90:a3:a0:cc:b7:d5:84:44:2c:72:0d:2f:51:39:
37:cf:02:15:c1:81:7e:01:89:ed:22:bd:05:56:99:
43:f4:81:72:93:ad:0d:4f:6a:cf:c2:00:d3:d0:ff:
9d:eb:1d:73:ce:d2:99:44:0f:90:15:04:f1:23:4b:
28:be:21:27:d9:e3:8f:2e:b9:20:54:13:52:9d:5d:
8d:ba:f8:e4:93:7a:5c:d4:65:43:1c:00:e4:d0:bc:
24:e3:5f:f8:d9:82:eb:e2:e8:7d:ad:c3:6a:78:fa:
50:a1:f9:f4:89:8d:24:85:67:a1:2a:45:b7:9a:30:
19:2c:12:a7:ad:4b:b7:25:05:e5:b9:69:ff:da:38:
af:99:c1:6d:76:a0:05:45:04:b4:69:47:2a:8c:65:
07:90:6a:25:7e:25:4b:6b:64:89:73:c7:bc:a7:7c:
3f:00:df:3d:2a:61:42:7d:77:0a:ad:d8:a4:fd:a3:
30:04:b3:33:04:4f:87:34:84:11:b9:2b:27:39:32:
83:0f:2e:fa:a3:51:1d:f6:13:25:5c:b1:09:29:a2:
94:61:eb:f7:7c:e4:c6:cb:55:57:3a:1d:46:63:85:
53:bf:c3:8c:f8:2d:ca:4a:e3:57:84:5b:7c:f6:5b:
c6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E8:93:48:8B:A1:49:E4:E7:C2:5C:EC:8D:F0:A1:40:B2:DE:E6:AD
X509v3 Authority Key Identifier:
keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/2OiTSIuhSeTnwlzsjfChQLLe5q0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6580:106::/48
Signature Algorithm: sha256WithRSAEncryption
7e:dc:73:5c:6e:b8:43:ac:fa:7a:48:37:d5:30:d2:38:1a:85:
59:d0:b3:64:63:8c:ce:79:98:54:f4:05:17:47:ca:aa:f3:95:
22:4f:54:ec:68:e0:8a:6b:06:c4:18:b9:88:24:87:fe:15:6a:
97:0e:d1:8d:9c:bd:8e:93:c9:11:b4:c5:97:29:6d:da:4d:dc:
18:8a:99:72:28:eb:5b:e9:d9:a8:05:4a:96:64:3e:78:f7:8d:
41:ca:85:1b:91:ad:1d:89:00:10:dd:b7:9f:fa:ab:42:89:43:
d0:1b:54:54:f0:c6:70:13:ad:84:55:46:7a:a4:bf:b2:89:c4:
12:c4:11:28:a5:c3:14:f0:be:23:f2:5c:a1:3a:e1:f5:27:57:
34:e9:32:2f:27:a1:6e:4f:ad:f6:aa:4b:ba:73:78:77:0e:60:
4d:75:82:5f:cb:7c:96:27:b1:8c:4e:f4:ad:6f:3d:e6:c9:ac:
13:cf:fc:d8:39:b4:5c:ae:8f:a5:0d:e9:34:9e:de:13:d9:61:
fc:ab:aa:9f:e6:05:08:74:26:96:fb:2c:3d:93:55:8a:2b:f4:
bd:66:d6:3b:11:8d:e8:50:44:6e:e3:98:54:1e:a1:79:8b:1e:
12:06:f6:63:61:ef:88:3c:ca:49:7a:e7:e2:ef:d7:6a:ef:c6:
71:bb:d6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 23:29:15 2024 by rpki-client on console-ams.rpki-client.org