Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/rSEs2lNV926JupNDsT522KTytxw.roa
File: rSEs2lNV926JupNDsT522KTytxw.roa (raw, json)
Hash identifier: sUaERjm7RaurSohc2QNL01+HHtlWxuCW8jJUrUov6i8=
Subject key identifier: AD:21:2C:DA:53:55:F7:6E:89:BA:93:43:B1:3E:76:D8:A4:F2:B7:1C
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 018CC9BCDBBB9E5253F96699C7F0585028E6
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/rSEs2lNV926JupNDsT522KTytxw.roa
Signing time: Tue 02 Jan 2024 10:34:06 +0000
ROA not before: Tue 02 Jan 2024 10:34:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50543
IP address blocks: 2a02:2698:7000::/38 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:db:bb:9e:52:53:f9:66:99:c7:f0:58:50:28:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 2 10:34:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad212cda5355f76e89ba9343b13e76d8a4f2b71c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:66:cc:69:2d:5a:a0:58:36:54:70:77:1c:88:
71:47:d7:5a:73:c9:00:95:15:14:0e:63:4b:7b:93:
1b:ba:57:a2:fe:71:7b:7a:c8:23:b2:64:04:6f:82:
50:96:51:d4:ba:a3:4b:fd:ef:90:bf:1d:f9:ea:98:
0a:e2:cf:37:d0:ec:14:42:d1:9d:db:f2:f0:92:9f:
4d:e8:71:14:e5:3d:4d:6c:65:03:56:0e:2d:9a:09:
a8:0f:72:7d:41:b7:56:58:95:94:ab:14:97:43:7c:
b7:d9:3f:d0:17:36:d5:02:7f:44:cf:bd:b4:fe:12:
1a:4d:15:2d:ce:b3:82:72:60:68:2f:6f:3a:a1:8c:
5c:17:5c:3b:23:99:be:9b:99:0d:e0:b9:92:10:a0:
f9:dc:64:59:53:34:6d:2f:68:36:cc:d3:23:ec:37:
2b:f7:06:4b:84:9c:f0:95:1a:d6:eb:03:86:0f:04:
7b:c0:b2:e9:b4:81:68:d0:e2:e3:f7:69:91:13:2b:
3c:8d:8c:4b:3a:54:2e:52:44:ef:59:6b:ec:84:0c:
7e:a9:de:f0:60:e8:74:7b:2c:a5:e1:88:fc:20:a7:
de:b8:fc:45:a1:2a:27:de:52:ed:6f:ab:11:93:57:
96:ad:db:f2:83:45:64:90:8d:8a:7b:1b:3e:73:a3:
b7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:21:2C:DA:53:55:F7:6E:89:BA:93:43:B1:3E:76:D8:A4:F2:B7:1C
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/rSEs2lNV926JupNDsT522KTytxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:7000::/38
Signature Algorithm: sha256WithRSAEncryption
37:41:39:5e:21:37:2c:82:5c:b5:50:3c:99:5e:c5:2e:27:5a:
55:34:26:4f:95:ea:64:9b:b4:d1:10:f0:08:7c:6b:ad:49:d1:
b6:c3:10:be:d2:11:0f:eb:bc:09:51:2d:cf:d4:94:22:e1:49:
e6:bf:b1:09:4b:54:0d:e7:cf:45:4b:09:4b:6c:de:e4:b7:fd:
7a:08:98:74:fd:3d:72:45:67:06:26:c5:65:19:09:24:2c:3c:
73:ac:5a:8e:ba:8c:d8:de:64:0c:7c:60:22:44:bd:e9:68:74:
e2:8b:59:ff:73:f6:65:a8:30:61:c9:1d:e9:87:16:11:79:93:
40:aa:ef:ce:9b:94:10:0d:7e:78:a6:1f:b6:97:39:71:be:33:
4c:31:d8:b9:21:60:39:e5:6f:93:99:0b:c7:7b:70:d8:49:18:
e5:24:1b:74:cd:93:a0:48:9d:bc:cf:64:9c:25:05:05:fe:52:
58:ca:fe:8c:f2:55:d4:f7:3a:35:3c:1c:05:f5:a1:e0:00:e7:
36:d3:57:55:3c:f2:a5:6c:b3:61:ae:34:69:ec:77:f1:b1:fe:
34:83:c0:86:42:e0:e2:b7:70:98:8f:8e:02:6f:1c:9c:26:c5:
7a:cb:a5:04:1f:ce:f7:13:a6:7e:04:6b:96:52:27:40:7c:59:
50:52:b6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:35:11 2024 by rpki-client on console-ams.rpki-client.org