Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/_XLj7T_1jErmLRHWt8hO_ITk1yg.roa
File: _XLj7T_1jErmLRHWt8hO_ITk1yg.roa (raw, json)
Hash identifier: JQvA1aNvALu+d1r875usOlJ+RU0NnEVXFSHXec5s/sk=
Subject key identifier: FD:72:E3:ED:3F:F5:8C:4A:E6:2D:11:D6:B7:C8:4E:FC:84:E4:D7:28
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 018CC8013A7230557DDE4C7CDFE561B21A06
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/_XLj7T_1jErmLRHWt8hO_ITk1yg.roa
Signing time: Tue 02 Jan 2024 02:29:32 +0000
ROA not before: Tue 02 Jan 2024 02:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397519
IP address blocks: 2a01:488:bb0c::/48 maxlen: 48
2a01:488:bb1e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 19:51:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:3a:72:30:55:7d:de:4c:7c:df:e5:61:b2:1a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Jan 2 02:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd72e3ed3ff58c4ae62d11d6b7c84efc84e4d728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cd:74:aa:df:6b:a1:33:77:43:82:26:3c:b9:
86:e4:30:e1:c9:3e:a0:4a:31:ab:d9:fc:b1:40:4f:
0e:94:3f:78:d0:f3:24:22:b5:03:ec:2b:5a:81:ef:
34:6c:66:ba:81:45:0d:f3:a6:48:33:a5:25:1b:2d:
a6:f9:06:f8:89:34:91:0a:ca:32:a8:bb:0e:f3:5f:
c8:4d:49:9a:e4:1d:44:bb:28:1e:0d:98:8b:be:90:
22:cb:fc:ee:4c:71:20:c0:7f:2b:f1:ce:08:75:1a:
b9:3a:07:cc:19:8a:be:c7:3b:b6:ee:ab:da:1d:fd:
5b:9d:dd:0e:47:79:5d:73:f2:85:71:bf:41:86:bd:
62:27:d7:0c:3e:44:3b:f7:be:0c:7b:e3:bf:f4:f0:
3d:eb:cc:35:98:54:41:23:88:ed:d3:fc:9c:94:2f:
69:e4:7b:21:41:e7:41:78:d4:fa:57:d8:c5:70:a6:
3f:3a:da:04:6b:a8:4e:58:e0:a1:1f:7e:01:74:e2:
6f:a6:f0:0f:29:ab:4e:d5:9f:52:25:2f:c1:ac:f3:
78:23:87:25:a4:a6:19:3d:10:54:bd:8e:f1:cf:eb:
62:52:20:a3:d8:15:f9:fd:ed:c9:0d:30:9e:5f:78:
9d:8e:15:03:04:42:44:b4:c6:11:65:18:a9:9a:0f:
96:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:72:E3:ED:3F:F5:8C:4A:E6:2D:11:D6:B7:C8:4E:FC:84:E4:D7:28
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/_XLj7T_1jErmLRHWt8hO_ITk1yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:488:bb0c::/48
2a01:488:bb1e::/48
Signature Algorithm: sha256WithRSAEncryption
53:9e:4a:a5:f0:06:67:5b:20:90:6b:37:f6:4f:49:1a:97:a9:
f6:5a:62:77:39:33:1f:83:63:8c:fd:e1:6d:7f:99:72:bc:12:
2c:c3:2e:d8:75:fc:6a:29:ee:fa:0b:ce:f1:51:a3:4e:a7:79:
a3:2e:4e:89:63:25:46:3c:d9:83:da:f9:ae:36:e4:25:a8:03:
18:89:b1:6b:16:0c:47:7a:3b:08:72:e1:3f:6a:d9:cd:6b:91:
67:38:f6:63:67:ef:4f:2e:dc:b7:a3:9f:65:8d:5b:30:dd:fc:
81:bc:47:94:de:d4:71:a8:81:52:41:dd:4a:06:a6:63:c5:08:
18:fa:40:73:27:3e:af:de:c0:48:4d:e8:fe:60:85:ec:04:79:
68:a4:67:a0:09:cd:64:2a:2e:5a:6a:51:2d:62:ec:7a:8f:c3:
bb:74:17:bf:7f:74:fc:df:67:8f:f4:9f:22:69:34:e6:d6:69:
42:79:5f:64:38:2b:58:f8:a9:4f:aa:dc:3b:60:62:87:08:cd:
d8:4e:6c:8c:80:03:7b:a3:70:99:65:c2:96:c3:0d:f8:eb:05:
01:2b:17:c6:e8:90:33:5f:48:4f:0a:5e:fe:96:7b:e2:60:b8:
00:b3:e8:2c:68:a1:7f:99:7b:c8:c0:4e:7f:e1:1d:49:24:3e:
40:96:57:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:53:33 2024 by rpki-client on console-fra.rpki-client.org