Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/3FIjgM02bKTYAvkkKIEllhwygRk.roa
File: 3FIjgM02bKTYAvkkKIEllhwygRk.roa (raw, json)
Hash identifier: ZvAnBJooaFsEvDmue8moa1rVSWHZkJDbgBvovklorXw=
Subject key identifier: DC:52:23:80:CD:36:6C:A4:D8:02:F9:24:28:81:25:96:1C:32:81:19
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019033F6DDA6F041757BDA1A1B991D5356E6
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/3FIjgM02bKTYAvkkKIEllhwygRk.roa
Signing time: Thu 20 Jun 2024 04:45:34 +0000
ROA not before: Thu 20 Jun 2024 04:45:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209517
IP address blocks: 2a0d:6f80:1f71::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:33:f6:dd:a6:f0:41:75:7b:da:1a:1b:99:1d:53:56:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jun 20 04:45:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc522380cd366ca4d802f924288125961c328119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a0:c5:e3:4a:39:32:ed:be:3f:7d:4f:92:ff:
47:10:d3:26:f1:6a:b0:fe:86:f5:94:72:67:a5:76:
4d:58:99:bb:60:90:2e:f7:28:5d:ce:d8:33:49:1f:
a6:4f:6b:08:8e:47:51:be:ff:11:cb:ba:97:10:2b:
fb:1d:e5:45:36:b6:1c:20:f5:b8:e8:04:78:dc:fe:
b1:dc:07:8d:8a:8a:40:b8:c4:7d:19:3f:e2:6f:72:
73:65:e6:0a:31:c2:2f:e6:ef:e9:10:b3:99:11:e0:
3d:cd:bb:b9:0f:01:aa:44:d4:e4:e7:c3:ae:82:aa:
74:9c:31:9f:e3:c0:00:70:2f:0b:21:fd:b0:23:86:
37:92:15:3b:59:48:04:2f:d7:36:d3:68:8a:a6:b5:
c6:1a:d8:be:48:f8:95:05:5b:c9:45:82:6a:e1:7d:
a8:38:7e:9c:a9:a1:d6:b8:16:19:ed:c6:08:c3:68:
f7:1f:3c:04:17:a9:2d:3e:c9:32:09:34:80:1d:04:
4d:ab:86:be:51:4f:0b:72:e9:86:06:09:ab:98:85:
d6:86:64:43:32:9d:7f:98:3d:c6:62:f6:77:82:42:
d6:99:8c:cf:d4:63:cb:57:bb:33:b8:f5:49:93:86:
24:1e:9f:eb:8b:69:26:3b:40:de:eb:a8:73:b8:5f:
b8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:52:23:80:CD:36:6C:A4:D8:02:F9:24:28:81:25:96:1C:32:81:19
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/3FIjgM02bKTYAvkkKIEllhwygRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:6f80:1f71::/48
Signature Algorithm: sha256WithRSAEncryption
57:2c:5a:1a:d1:15:3d:dd:d7:ce:f0:b1:78:63:b7:8a:a9:40:
65:e3:eb:aa:d4:f0:c1:5b:99:bd:29:2a:7e:61:9b:36:de:e3:
e9:fe:2c:73:e6:db:0e:06:c6:af:52:c0:dc:22:ca:eb:79:2a:
eb:c7:36:68:b4:9d:c0:d4:fc:c0:49:83:2a:75:8f:df:f8:1c:
1f:ca:1c:1f:ee:d7:f9:71:d1:bf:48:0b:c3:91:b2:05:bb:80:
2b:25:2d:01:38:a3:22:3b:77:6e:1a:04:29:d9:8c:d0:29:e6:
75:fa:84:5c:5b:c5:dd:bb:6f:f1:94:53:6c:03:36:c6:63:59:
de:c3:98:55:32:1c:83:80:59:11:8f:6b:42:2f:0e:77:7d:d7:
13:3c:b6:f4:01:34:3c:28:64:c3:c1:60:f0:9b:d7:af:09:c7:
f0:bf:8b:db:9f:bf:92:e8:9d:49:3c:fc:74:8e:51:58:db:f7:
98:19:61:ca:ce:72:a6:81:3a:27:77:85:ce:d4:d5:43:cf:ca:
ba:71:48:8d:a1:23:00:ee:59:b7:2c:90:59:00:c3:00:93:76:
18:17:ec:49:a6:9a:5a:cc:51:f1:c2:61:27:a9:af:94:78:f9:
97:31:48:34:17:56:28:36:01:79:4b:90:59:de:ac:97:e9:6b:
9b:44:f5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:19:48 2024 by rpki-client on console-ams.rpki-client.org