Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/046DxgQVcSXxSU9KuaiSwUt3kEw.roa
File: 046DxgQVcSXxSU9KuaiSwUt3kEw.roa (raw, json)
Hash identifier: 7tDVDORZpxS6BqWl5M5ATJsphJV4xrwoRnExmMA5oMc=
Subject key identifier: D3:8E:83:C6:04:15:71:25:F1:49:4F:4A:B9:A8:92:C1:4B:77:90:4C
Certificate issuer: /CN=08175e0a36c789d31420b33303fbc7324c7c574b
Certificate serial: 018CC5DD0AB78B87E9AF80F73BDFF4576203
Authority key identifier: 08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/046DxgQVcSXxSU9KuaiSwUt3kEw.roa
Signing time: Mon 01 Jan 2024 16:30:46 +0000
ROA not before: Mon 01 Jan 2024 16:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50304
IP address blocks: 2a01:6560:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dd:0a:b7:8b:87:e9:af:80:f7:3b:df:f4:57:62:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08175e0a36c789d31420b33303fbc7324c7c574b
Validity
Not Before: Jan 1 16:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d38e83c604157125f1494f4ab9a892c14b77904c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bc:d4:05:22:9f:49:17:2d:1c:df:7d:c4:11:
30:ab:c4:13:50:5c:8c:3b:87:ff:9b:fb:8a:7a:75:
61:6b:e7:a8:81:16:60:6d:99:90:72:13:78:2d:35:
24:9e:bb:04:bb:d2:88:df:a2:3d:cc:83:11:36:72:
bc:fd:5e:4c:61:63:b7:8d:cb:7f:2c:1f:6e:6f:8a:
49:6b:8b:4e:e1:94:ad:f0:04:ec:a0:5c:0c:de:e4:
ee:a9:31:dc:ec:3f:98:37:20:fc:d4:95:3a:e0:35:
b4:55:65:d3:39:aa:6b:c5:f7:a9:a8:81:4f:a5:4c:
49:fd:1e:17:25:16:a3:1e:8d:63:c3:c5:d6:90:5d:
1b:f2:c2:93:b5:53:00:8f:9b:cc:15:bd:66:a0:63:
30:00:03:25:e8:5e:3a:39:f2:9f:79:e7:7a:ef:4c:
c2:e8:d3:ae:a2:f7:5e:19:e1:a2:e4:af:8c:4b:7e:
d4:00:27:66:ad:ef:0e:2b:ef:f7:7f:88:39:72:bd:
f5:6c:2a:3b:a4:1a:a7:63:1f:3a:14:5f:2a:18:a6:
a3:60:3e:ad:b7:c2:52:8e:6a:57:30:82:ed:8e:1a:
82:d8:78:b2:f2:27:fd:30:51:66:c5:31:8a:9b:1b:
0a:06:98:54:09:82:8b:47:ae:b2:29:a6:f7:6a:2a:
4b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8E:83:C6:04:15:71:25:F1:49:4F:4A:B9:A8:92:C1:4B:77:90:4C
X509v3 Authority Key Identifier:
keyid:08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/046DxgQVcSXxSU9KuaiSwUt3kEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:6560:100::/48
Signature Algorithm: sha256WithRSAEncryption
b7:ff:05:0d:26:ce:b6:0c:ea:ee:e2:37:8b:d6:be:34:25:28:
c4:7c:a0:59:46:da:64:5d:fd:d2:0e:ae:35:89:af:44:e6:b9:
86:6f:be:47:88:b7:26:b4:be:dd:ba:6a:04:5a:3b:e5:8f:65:
b5:2c:7a:1f:2c:46:13:80:23:a2:2d:a5:69:9d:fa:0b:fd:d8:
25:14:e0:c8:b4:0c:a4:db:69:d3:4a:a5:b7:fa:a5:ca:c3:77:
72:36:75:e5:0e:ba:66:34:df:60:55:c7:6c:22:a5:74:00:5a:
82:6f:41:88:45:39:a8:ad:f6:37:29:d8:10:e9:66:85:c6:ad:
e3:3d:d8:d4:cd:be:77:26:8a:1e:c0:4b:be:88:31:10:cf:13:
fe:c1:b3:f9:c1:b7:50:da:02:1d:53:57:29:5e:1d:6e:06:58:
c9:43:6c:50:d4:7f:bd:18:38:09:95:32:9b:5c:f8:a2:6b:81:
69:3b:83:1a:a5:63:2f:95:30:31:ca:34:c5:11:40:3a:2c:73:
ee:38:a7:29:17:c5:86:9d:c0:2b:d3:f0:31:34:8e:ab:d6:df:
bc:fc:51:93:6c:50:c0:e6:ef:c9:9c:5e:70:ad:fc:35:2a:e0:
03:1a:4f:e3:d6:3c:f4:2e:4a:e8:11:63:9d:fb:a1:68:e1:04:
b4:d6:43:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 20:33:06 2024 by rpki-client on console-ams.rpki-client.org