Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/DsiUlWz9rONw7-NFHRQkRIKh3Pc.roa
File: DsiUlWz9rONw7-NFHRQkRIKh3Pc.roa (raw, json)
Hash identifier: 5sYsCkb0Nat9XTBsTrike99hAO2Vt0ZF8CJlc0ScBBs=
Subject key identifier: 0E:C8:94:95:6C:FD:AC:E3:70:EF:E3:45:1D:14:24:44:82:A1:DC:F7
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018CC94E3370C2C5DE201821A5C5731C45CF
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/DsiUlWz9rONw7-NFHRQkRIKh3Pc.roa
Signing time: Tue 02 Jan 2024 08:33:14 +0000
ROA not before: Tue 02 Jan 2024 08:33:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40970
IP address blocks: 2a0d:98c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 16:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:33:70:c2:c5:de:20:18:21:a5:c5:73:1c:45:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 08:33:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ec894956cfdace370efe3451d14244482a1dcf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:41:54:f3:77:17:3f:5f:5b:86:c3:68:4e:95:
83:ab:5e:9c:3b:33:9e:7c:58:a2:6a:c7:f4:70:ea:
72:59:9f:50:cb:3b:b2:74:8a:f1:a8:10:0c:75:b0:
60:20:c5:c0:b1:c0:61:06:2b:7d:fd:73:42:29:53:
03:ff:50:91:82:3c:4d:1e:f8:c0:90:2b:85:1e:c3:
98:85:e6:e9:53:52:a8:7f:35:a4:82:6c:35:00:83:
50:95:f5:a0:07:36:1e:c4:ab:b8:b7:d0:60:ee:94:
ab:6e:1e:0c:6d:c3:6d:5f:64:a3:43:f0:b2:45:59:
fc:cf:6f:9c:e7:58:3f:d4:66:4c:81:c4:69:e7:be:
3b:64:48:dd:c4:3a:22:fd:5a:58:26:a2:01:cd:f8:
51:2f:97:80:03:91:60:75:55:bb:37:86:17:5f:36:
62:ec:50:8f:7e:15:e4:54:22:d3:29:a8:c5:3d:0c:
6a:1f:b4:dd:26:5a:1b:28:c4:17:b5:38:2c:53:f0:
8b:c3:7d:e2:1a:9b:11:fe:a7:c1:9c:66:1a:e6:39:
a6:0b:8e:c6:d1:db:86:92:dc:5a:fe:20:2b:a9:45:
a7:1d:2e:b3:34:f1:36:70:ff:55:6b:25:12:a5:53:
fc:c3:f1:b3:c4:d6:30:cc:d4:4b:bf:cc:3a:e5:5f:
52:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C8:94:95:6C:FD:AC:E3:70:EF:E3:45:1D:14:24:44:82:A1:DC:F7
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/DsiUlWz9rONw7-NFHRQkRIKh3Pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:98c0::/29
Signature Algorithm: sha256WithRSAEncryption
6d:31:da:9f:b9:1e:67:ea:f7:fd:94:fc:16:da:67:60:9f:17:
39:df:2a:62:74:97:fd:08:fb:6e:bf:b7:f1:be:fc:8f:59:d6:
0c:e9:c4:28:01:53:72:2a:c8:f6:a7:8f:d3:12:cf:3a:e0:bc:
31:f6:66:f3:4d:3a:72:d4:f5:13:50:39:8d:61:ec:4a:c4:db:
68:e9:99:5d:84:94:a0:99:41:cf:41:2e:81:70:02:c3:ce:93:
56:18:90:8e:63:4a:55:e6:e5:83:55:67:78:68:51:93:d1:68:
00:9f:bf:e9:42:7e:17:b5:e7:e7:47:1b:e5:1c:7d:32:69:21:
ef:48:7f:c7:23:12:31:b4:ef:f4:62:55:68:76:a5:77:2f:70:
a1:f9:cc:2a:d0:c7:6b:f2:c0:5b:07:b8:8d:9d:b4:ee:81:34:
3f:88:21:07:aa:ee:97:58:f4:95:56:5a:0a:09:79:27:61:f3:
e9:93:68:55:f8:d7:e4:a5:37:8a:c7:1a:fd:eb:de:05:6d:8d:
57:32:05:32:a6:21:83:d6:30:b6:72:77:2f:a6:77:bf:de:d6:
d8:64:53:24:8d:4b:80:2e:8c:64:aa:73:f6:38:87:9d:11:8a:
57:22:3e:d7:5e:d0:6e:56:ec:fe:47:8f:b5:79:3b:ee:8e:34:
8d:9a:8c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:19:21 2024 by rpki-client on console-fra.rpki-client.org