Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/DlrKaO9b0KFGnJrsIPAIZP1l1DQ.roa
File: DlrKaO9b0KFGnJrsIPAIZP1l1DQ.roa (raw, json)
Hash identifier: e7JvR+IOki1gNG3aFgUh79FZRrYkOX0VX6UAoP+C87U=
Subject key identifier: 0E:5A:CA:68:EF:5B:D0:A1:46:9C:9A:EC:20:F0:08:64:FD:65:D4:34
Certificate issuer: /CN=3a8cfcfeb83e88f36ba2bf2445db9ec1e82f0d54
Certificate serial: 018CCA297DAA9684B3ADA7196A01EECD80C0
Authority key identifier: 3A:8C:FC:FE:B8:3E:88:F3:6B:A2:BF:24:45:DB:9E:C1:E8:2F:0D:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ooz8_rg-iPNror8kRduewegvDVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/DlrKaO9b0KFGnJrsIPAIZP1l1DQ.roa
Signing time: Tue 02 Jan 2024 12:32:45 +0000
ROA not before: Tue 02 Jan 2024 12:32:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200301
IP address blocks: 2001:678:7e4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ooz8_rg-iPNror8kRduewegvDVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:7d:aa:96:84:b3:ad:a7:19:6a:01:ee:cd:80:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a8cfcfeb83e88f36ba2bf2445db9ec1e82f0d54
Validity
Not Before: Jan 2 12:32:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e5aca68ef5bd0a1469c9aec20f00864fd65d434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:50:a6:2d:99:c2:47:d2:59:db:bf:d6:92:57:
05:eb:d0:c6:22:e6:14:fb:61:c7:72:1e:8c:0f:3c:
5f:f2:12:ab:63:c7:02:5f:30:51:f0:7b:eb:8e:e9:
71:c8:0a:05:ea:2a:52:01:a9:2c:1d:b3:75:c9:21:
14:56:36:1b:24:40:3e:b4:99:e8:e3:88:ea:d3:60:
c1:51:b3:2a:17:be:12:b5:d0:d2:25:28:6d:31:e1:
d6:c9:3a:93:8f:ac:85:62:fb:d5:50:bf:a4:a2:a5:
a8:a9:29:e1:40:20:1e:81:7d:77:2f:51:96:95:c4:
22:b0:51:7c:e1:f0:41:78:f1:d1:5a:31:2f:a1:4b:
f1:26:76:e4:01:a3:17:61:fb:c7:20:7a:62:5d:f4:
6a:22:3f:3e:71:5b:46:94:2d:5a:d6:92:47:03:ad:
0f:10:b4:d0:53:8f:a7:65:18:19:c4:41:19:6a:24:
44:1f:fd:4b:54:60:4d:66:89:18:c7:aa:15:45:87:
ee:09:f7:e3:1d:22:e2:d5:f1:9f:ff:02:0a:9b:59:
a6:07:ed:01:e8:ff:69:a8:9e:1b:c1:3c:d8:47:e6:
a4:c1:98:f6:32:93:d3:8b:70:20:19:ae:dd:5c:9c:
9c:6c:b4:e8:e0:83:cc:09:d5:c0:02:94:ae:e6:e7:
af:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5A:CA:68:EF:5B:D0:A1:46:9C:9A:EC:20:F0:08:64:FD:65:D4:34
X509v3 Authority Key Identifier:
keyid:3A:8C:FC:FE:B8:3E:88:F3:6B:A2:BF:24:45:DB:9E:C1:E8:2F:0D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ooz8_rg-iPNror8kRduewegvDVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/DlrKaO9b0KFGnJrsIPAIZP1l1DQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:7e4::/48
Signature Algorithm: sha256WithRSAEncryption
c5:a0:26:bc:f0:9f:67:0e:95:36:27:98:d9:f4:28:72:a5:b1:
30:54:44:dd:45:ec:ea:5d:a3:c1:6a:47:d7:64:fe:f5:44:3a:
b8:c5:b0:6e:fa:57:f1:72:a2:f3:c4:75:a0:d1:23:11:43:ea:
8e:0c:98:9e:d1:50:62:de:00:87:29:34:6a:e6:c9:c8:29:b6:
9d:50:58:8d:af:09:10:f1:86:5a:34:49:b0:07:ce:52:9c:57:
30:71:f3:48:bd:57:ef:63:90:71:f3:04:97:d2:3a:88:a6:0c:
1a:79:e1:2c:17:10:b0:29:39:93:99:fa:bd:51:ca:cf:a2:a0:
69:76:2a:7b:86:44:89:ed:54:24:06:82:91:9e:3a:8c:11:80:
e7:46:0d:94:f2:99:31:81:18:5f:a8:6b:8f:e0:29:f9:ba:b7:
7b:c1:d8:fe:dc:7e:9c:60:58:a7:20:85:f6:b4:a6:4e:eb:46:
d4:03:0d:49:c9:9c:4b:a1:07:d9:6d:87:4f:73:09:f0:80:db:
bf:86:eb:7c:64:ee:4b:e3:5f:0a:ad:b4:54:33:6f:fd:54:82:
88:1e:b7:bb:c2:74:ac:b0:1d:b0:e3:cf:1a:ef:bc:81:2c:75:
7e:11:2f:35:03:a2:e7:b9:03:72:f6:5e:d6:36:8c:e7:18:0e:
1d:e0:45:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:04:39 2024 by rpki-client on console-fra.rpki-client.org