Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/3FEk59rqAru8QKmYGUz0XQwFr90.roa
File: 3FEk59rqAru8QKmYGUz0XQwFr90.roa (raw, json)
Hash identifier: cxeOg5ljPJVYC49WnydxPr/mQgR0sc0D3XpP5uHAYC8=
Subject key identifier: DC:51:24:E7:DA:EA:02:BB:BC:40:A9:98:19:4C:F4:5D:0C:05:AF:DD
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018E7BE67744DBA75C7AA38292492C80CA5D
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/3FEk59rqAru8QKmYGUz0XQwFr90.roa
Signing time: Tue 26 Mar 2024 17:54:45 +0000
ROA not before: Tue 26 Mar 2024 17:54:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215312
IP address blocks: 2.56.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7b:e6:77:44:db:a7:5c:7a:a3:82:92:49:2c:80:ca:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Mar 26 17:54:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc5124e7daea02bbbc40a998194cf45d0c05afdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f7:7f:63:8a:8f:ca:bb:f2:cf:41:f8:42:c6:
ca:32:02:35:a5:44:da:73:3b:d6:67:2d:11:50:54:
29:f2:db:9e:57:de:17:63:de:56:54:fe:dd:55:02:
38:06:41:9b:49:c5:e3:11:c7:90:8d:80:7b:11:0c:
67:f3:2c:91:1c:e8:c0:1f:cc:5c:f4:2b:17:e3:02:
c3:27:02:ae:40:56:87:33:e0:0d:41:50:e1:a9:49:
2f:c5:18:33:eb:e2:e4:87:63:3e:ad:72:e2:87:ca:
cf:d8:f2:07:cd:37:2b:6d:9b:12:63:79:ff:9c:ab:
f8:06:4e:0d:1b:dd:d0:af:bf:9e:98:de:61:d7:2b:
09:ec:f6:2d:51:40:5b:4c:88:ba:0d:a5:22:dc:bd:
80:c3:d9:7b:78:3d:7d:b3:38:d9:79:cc:88:d1:07:
43:1f:29:88:3e:41:ec:8e:7e:07:14:05:93:c0:34:
84:9b:a0:06:3f:cc:f1:b5:6e:bd:0f:12:6d:d7:24:
93:27:21:6b:74:13:05:bf:b1:2c:8e:f6:5f:b1:33:
7b:d3:7a:44:23:96:38:7b:7d:20:27:68:01:69:3b:
ac:3d:5a:fc:24:72:80:04:aa:3a:4d:27:bb:4b:bc:
a0:2f:a6:f2:1e:c8:66:d2:26:f5:67:92:71:57:b4:
5e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:51:24:E7:DA:EA:02:BB:BC:40:A9:98:19:4C:F4:5D:0C:05:AF:DD
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/3FEk59rqAru8QKmYGUz0XQwFr90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.111.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:20:a9:67:1a:e4:97:b3:cd:df:ad:cf:a4:c9:e7:ee:fa:f6:
8c:44:25:74:b3:66:84:f6:01:50:57:ce:80:47:ca:c0:9f:26:
54:85:21:fd:1f:c4:da:f3:cb:69:9c:a9:7d:f0:9b:87:79:85:
86:1a:90:1d:f1:a4:14:f6:0f:04:24:70:45:7e:9b:f0:33:03:
e1:75:32:57:dc:97:8a:3f:e7:b6:22:d8:df:48:42:da:05:8f:
8a:87:35:0a:b7:6a:20:21:4e:c6:30:bf:b2:83:bf:b8:37:8f:
16:53:1d:df:13:45:27:ad:f9:b0:5f:d8:cd:35:70:4d:a0:f7:
22:d6:dc:06:13:6d:04:0d:fb:26:82:4c:25:dc:19:af:c9:01:
60:0e:c6:b4:99:23:b1:79:3e:89:f6:27:92:60:97:c1:da:9d:
e3:3d:fa:f4:44:5f:57:4f:93:b6:41:24:d2:ba:8f:bb:ac:bc:
10:74:84:20:50:d4:05:62:13:bf:97:61:d4:89:23:66:2e:34:
bf:62:ed:25:40:0d:c8:56:57:67:06:bb:50:96:6f:f6:48:7b:
74:ae:ce:d3:ef:af:5d:d7:0e:1e:2c:93:0d:1d:1c:b7:50:1b:
ac:86:be:b7:97:03:1d:40:14:78:e2:5a:ff:c4:1a:a2:9c:f8:
5b:fc:a4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:50:21 2024 by rpki-client on console-fra.rpki-client.org