Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/V6cR19X84nxLG7BpHxSvQUosV98.roa
File: V6cR19X84nxLG7BpHxSvQUosV98.roa (raw, json)
Hash identifier: 9EcE69J6jodQ2yyXbKBeUrLPhsNHz/c19W39iLokXJI=
Subject key identifier: 57:A7:11:D7:D5:FC:E2:7C:4B:1B:B0:69:1F:14:AF:41:4A:2C:57:DF
Certificate issuer: /CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Certificate serial: 018CCA99F83F7649BD059667DD8293CD8AF4
Authority key identifier: B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/V6cR19X84nxLG7BpHxSvQUosV98.roa
Signing time: Tue 02 Jan 2024 14:35:37 +0000
ROA not before: Tue 02 Jan 2024 14:35:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33874
IP address blocks: 2a01:838::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:f8:3f:76:49:bd:05:96:67:dd:82:93:cd:8a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Validity
Not Before: Jan 2 14:35:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57a711d7d5fce27c4b1bb0691f14af414a2c57df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b5:55:d5:5c:19:22:c0:85:7b:24:4c:62:52:
70:67:c1:f3:00:a1:21:e3:a5:1c:2f:2d:ee:5e:be:
bc:6a:4f:88:39:c6:b2:ac:73:de:a8:9b:d0:41:17:
32:8b:41:5d:01:5c:2b:c1:5d:04:c5:79:e9:8e:ea:
55:be:1b:c8:e7:4c:7d:d9:78:5d:c6:29:e5:0d:9d:
69:20:9d:7b:14:76:ed:46:49:af:bf:bf:c7:30:5c:
97:9e:68:af:ee:47:ee:9a:bb:e2:43:ee:ed:9a:af:
57:90:82:6d:13:72:6b:27:4d:89:53:73:78:29:ce:
c0:6c:7e:d5:a8:ba:19:a9:06:1b:d5:63:b3:c6:f9:
c5:7e:8d:71:f8:27:34:a4:3b:b9:4a:68:77:ef:4b:
17:5a:45:91:70:b6:2d:5b:19:73:34:09:a0:f4:f9:
a9:88:b2:96:ec:c5:48:33:14:77:8c:eb:d5:14:ad:
03:3e:b2:a2:ed:c6:84:32:f5:f4:92:e4:93:5b:c0:
c8:d6:df:6c:6f:26:48:f5:ff:bd:21:87:3c:6e:f8:
59:14:48:b1:cf:26:9d:85:10:42:74:62:2a:91:18:
dc:b4:43:59:23:85:ca:ec:2c:2c:44:c4:08:c7:95:
d6:bd:2c:53:5f:1c:a9:8f:01:db:33:55:f1:ed:e2:
44:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A7:11:D7:D5:FC:E2:7C:4B:1B:B0:69:1F:14:AF:41:4A:2C:57:DF
X509v3 Authority Key Identifier:
keyid:B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/V6cR19X84nxLG7BpHxSvQUosV98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:838::/32
Signature Algorithm: sha256WithRSAEncryption
8c:d5:29:bf:66:a4:d3:11:5b:3f:2f:59:82:15:0b:4e:c5:bf:
4a:63:77:a1:c3:69:ba:1e:12:eb:ff:e5:f4:ed:1f:aa:9e:0d:
fc:37:02:48:3b:64:82:a4:09:8b:9e:3e:33:62:d5:f9:ad:bb:
5e:7c:1b:e3:f0:3d:70:e2:4e:1f:48:8c:aa:e0:3b:62:5c:bd:
45:64:67:38:3a:fa:1b:fa:45:0b:0c:5b:24:c2:b3:01:b6:8c:
4f:d7:a7:90:a1:24:cb:50:93:c3:22:1f:b9:54:aa:b6:03:ff:
8a:4f:9b:a9:d2:95:36:05:1b:d1:41:39:f4:c4:3e:b8:c7:77:
07:d9:0c:68:c9:98:ce:45:03:86:dc:5b:fa:2e:87:92:3d:3c:
ee:6f:53:c1:47:4a:b2:4d:3c:59:f9:1f:3c:86:ed:b0:c6:d0:
c4:98:1b:b1:c4:b4:35:cb:db:08:b1:f6:cb:4f:41:39:9e:f3:
28:c7:79:19:4c:e4:2a:97:7e:9b:78:19:88:6d:9c:11:29:46:
74:a8:c0:ae:87:0e:82:df:2c:b5:7f:63:80:5b:23:0a:ed:6e:
0c:48:b8:8d:eb:80:5c:1d:b6:76:80:73:8e:a6:b2:25:04:86:
45:7d:b9:16:43:23:ce:a0:6d:8f:74:8b:bf:1a:94:31:17:83:
b2:82:eb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 10:18:39 2024 by rpki-client on console-ams.rpki-client.org