Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/CBfjWiNTtmQz3KofuqHHaEbXgWE.roa
File: CBfjWiNTtmQz3KofuqHHaEbXgWE.roa (raw, json)
Hash identifier: BiVentC77SL3iKC5m2T47rdZaYAPS0WnLvynn+Kcxhs=
Subject key identifier: 08:17:E3:5A:23:53:B6:64:33:DC:AA:1F:BA:A1:C7:68:46:D7:81:61
Certificate issuer: /CN=0d23064e3c27ec92b7eab667649d204e5673838e
Certificate serial: 018CC2DB2E7A39D54E5BCE8481D96ACF5969
Authority key identifier: 0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/CBfjWiNTtmQz3KofuqHHaEbXgWE.roa
Signing time: Mon 01 Jan 2024 02:29:53 +0000
ROA not before: Mon 01 Jan 2024 02:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50178
IP address blocks: 2a11:f00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:2e:7a:39:d5:4e:5b:ce:84:81:d9:6a:cf:59:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d23064e3c27ec92b7eab667649d204e5673838e
Validity
Not Before: Jan 1 02:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0817e35a2353b66433dcaa1fbaa1c76846d78161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:72:e3:8a:1b:4f:95:70:d8:6f:48:0c:62:3b:
ce:7d:9a:d0:5c:ec:81:c3:55:65:26:69:af:9c:5f:
66:25:da:13:1d:5b:4d:fa:e3:d5:83:9c:4c:10:7e:
65:d0:59:19:ee:1a:6f:d4:46:94:e0:8c:bb:39:00:
f3:08:a8:aa:5e:f8:39:9e:e5:7e:d5:1d:c8:69:54:
9b:d5:60:5b:ea:90:00:29:0c:3d:93:9d:b9:f8:7f:
dc:f3:6f:5b:aa:77:89:88:fb:70:f5:25:a1:0b:eb:
ac:0e:b0:12:e6:e6:f3:8e:da:d1:9e:46:14:3d:44:
2c:b9:f9:78:89:30:42:81:93:32:4a:1e:92:b8:ed:
c4:6e:5d:4f:79:58:89:1e:43:14:07:d4:7a:39:38:
57:40:04:b7:54:2a:ae:cf:03:16:32:ae:55:3c:dc:
97:20:08:37:fd:89:f7:b3:20:87:f7:67:96:e8:4f:
a3:8d:3d:b1:0e:b1:15:7b:ac:48:fe:2d:8a:90:c8:
6a:e4:a8:21:a6:ef:c3:8a:1a:9e:ad:bf:a7:1d:95:
bd:d2:6c:fb:89:48:04:62:c3:f2:83:17:a3:93:78:
13:42:25:2f:a5:d2:d0:25:86:da:b1:78:f7:aa:50:
a5:a5:c1:3c:0d:76:3c:be:0e:9f:55:da:57:d2:fc:
5b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:17:E3:5A:23:53:B6:64:33:DC:AA:1F:BA:A1:C7:68:46:D7:81:61
X509v3 Authority Key Identifier:
keyid:0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/CBfjWiNTtmQz3KofuqHHaEbXgWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f00::/29
Signature Algorithm: sha256WithRSAEncryption
83:dc:7c:26:31:64:2d:ae:b6:4d:bf:d7:75:ae:da:3b:15:5a:
bc:85:67:45:58:1e:c2:9c:b7:02:7e:85:65:d2:75:e0:e1:09:
53:6b:ac:76:63:0f:29:8d:4d:4b:80:cd:03:01:b0:36:82:17:
cc:8b:ac:ee:12:87:f6:95:03:01:a5:f1:c3:53:63:4f:f1:59:
74:2a:19:07:59:6a:c7:35:be:2e:95:84:3c:a0:b8:bf:b3:a2:
e3:09:36:7b:6c:ef:f6:fa:30:ea:cb:91:b0:cd:c3:f6:8b:be:
aa:f1:4a:0a:20:5d:b7:d4:8d:09:67:d5:9c:c6:3e:b8:38:f2:
af:59:6e:bf:62:c5:f8:d0:0f:37:92:a8:c6:17:e4:e3:54:4b:
1a:0a:79:4f:36:9e:fe:14:c6:02:8c:c1:02:0e:c0:23:e2:3e:
ed:4e:cc:3e:32:ea:af:fd:9a:94:25:4d:08:7e:32:d0:02:cf:
ff:eb:7d:1d:94:db:48:30:0a:9b:96:4a:6a:01:a4:59:72:49:
61:34:e4:92:0e:11:1c:07:8c:b7:df:5c:a8:9e:a0:7d:2f:c9:
67:12:15:9d:ef:17:e5:66:5d:d4:16:5e:25:8a:2e:bb:42:66:
44:a4:d9:62:c1:05:b5:73:1e:4f:4c:ef:13:f4:4e:ea:9c:27:
b0:79:80:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:58:27 2024 by rpki-client on console-ams.rpki-client.org