Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/08xbEV5dYJsqrQp7uTPtouFFNXI.roa
File: 08xbEV5dYJsqrQp7uTPtouFFNXI.roa (raw, json)
Hash identifier: YylyTDnhEx/302w0SPeJCoLkLi4wBdv84f78hlN+QVg=
Subject key identifier: D3:CC:5B:11:5E:5D:60:9B:2A:AD:0A:7B:B9:33:ED:A2:E1:45:35:72
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 018CC9BCDCCDCAE374603983DC5B07F26DDD
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/08xbEV5dYJsqrQp7uTPtouFFNXI.roa
Signing time: Tue 02 Jan 2024 10:34:06 +0000
ROA not before: Tue 02 Jan 2024 10:34:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51035
IP address blocks: 2a02:2698:8800::/38 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:dc:cd:ca:e3:74:60:39:83:dc:5b:07:f2:6d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 2 10:34:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3cc5b115e5d609b2aad0a7bb933eda2e1453572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ad:5f:c9:ac:73:42:e7:5b:78:40:5d:8d:fd:
0b:2b:03:74:2a:69:e5:91:fc:84:5c:06:bc:83:66:
58:3a:3c:9b:0f:7b:a3:f9:40:51:87:9b:e3:77:de:
61:c2:a7:16:e9:61:79:3a:25:55:28:5d:00:db:9f:
22:bf:e9:86:e8:9e:81:8d:a3:49:77:01:92:68:30:
9a:0b:53:7b:6d:ad:e2:ef:d2:2e:cc:cc:c4:31:60:
ee:f4:42:3a:eb:a5:d7:95:6a:a2:cb:24:e0:4f:d6:
b2:52:61:53:43:75:0f:49:95:2b:20:46:21:21:e5:
7f:63:66:c6:6c:ad:2c:a0:57:a1:ae:58:f4:e0:7d:
4f:d4:49:4a:cc:00:39:60:e7:ee:e5:14:67:90:26:
5c:23:76:65:9d:71:ce:95:4e:1c:56:a4:44:81:d5:
5f:39:2a:9e:5c:79:0c:d4:ae:52:ac:35:02:81:05:
6c:03:48:d3:e9:42:4d:4a:91:83:88:38:f3:c3:9a:
0b:f5:ee:b2:fc:57:9a:27:d4:cb:e9:a5:3f:e7:75:
e9:3a:12:6e:6b:83:60:34:bb:5a:8c:f2:b9:d7:9f:
b3:61:0d:0a:29:e8:be:c0:78:6f:64:db:33:a6:a1:
32:bd:d7:de:b5:e5:0d:4e:9a:fb:74:67:eb:85:30:
85:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CC:5B:11:5E:5D:60:9B:2A:AD:0A:7B:B9:33:ED:A2:E1:45:35:72
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/08xbEV5dYJsqrQp7uTPtouFFNXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:8800::/38
Signature Algorithm: sha256WithRSAEncryption
42:ed:f0:a4:34:8c:db:d7:49:1d:5b:80:e7:e0:15:39:2a:97:
65:fe:bb:11:33:1c:a2:56:06:51:28:91:29:ce:8a:69:93:fc:
8e:72:2e:11:c4:32:ff:b1:64:8b:30:cb:bb:ab:27:d0:7a:70:
f9:31:15:b2:da:7a:5c:a6:07:f2:3e:1d:fa:6f:aa:6e:a2:61:
e8:b1:8f:ce:f0:90:cf:dc:cf:24:ff:94:57:c6:df:dd:a8:9c:
73:0b:b1:e2:68:68:69:04:03:46:89:07:56:a6:7c:03:2a:49:
af:fe:e9:d9:85:ac:d0:d3:44:e0:0f:3a:2e:bb:1c:29:14:4c:
8e:3b:c6:e1:aa:9d:b4:d6:ae:3f:34:54:ce:07:d0:e9:6b:6c:
15:da:04:11:16:de:3a:00:42:d4:f7:7e:7f:2a:65:9a:f6:73:
42:ae:34:cb:4d:29:4d:b2:5b:44:b4:8a:5a:97:6c:7b:c8:fd:
6b:45:d6:ec:66:8d:99:bf:f4:c0:36:c6:3b:d2:7a:73:de:bd:
4e:18:34:6a:da:4f:02:81:e1:f3:12:56:d2:79:84:02:aa:c4:
16:0e:ac:68:e5:60:65:f4:5c:5a:2b:68:68:5e:80:b6:19:32:
97:23:eb:e7:2e:91:6a:29:c1:72:68:8d:2f:6b:12:e3:1d:09:
b3:0d:1e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:58:31 2024 by rpki-client on console-fra.rpki-client.org