Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/V2WDoJrybND7YYaECxFZWDEVUeM.roa
File: V2WDoJrybND7YYaECxFZWDEVUeM.roa (raw, json)
Hash identifier: nCs9N0q2Y1C5KQ1y/Yrni6QZ9aXf5Ic7+h/NE8hDkkI=
Subject key identifier: 57:65:83:A0:9A:F2:6C:D0:FB:61:86:84:0B:11:59:58:31:15:51:E3
Certificate issuer: /CN=17526ccac4f9064e058549b30172c84439787fbc
Certificate serial: 018CC424EB57514465554D3CD833D8F7102D
Authority key identifier: 17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/V2WDoJrybND7YYaECxFZWDEVUeM.roa
Signing time: Mon 01 Jan 2024 08:30:02 +0000
ROA not before: Mon 01 Jan 2024 08:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208661
IP address blocks: 2a0c:b6c3::/32 maxlen: 32
2a0c:b6c5::/32 maxlen: 32
2a0c:b6c4::/32 maxlen: 32
2a0c:b6c6::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:eb:57:51:44:65:55:4d:3c:d8:33:d8:f7:10:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17526ccac4f9064e058549b30172c84439787fbc
Validity
Not Before: Jan 1 08:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=576583a09af26cd0fb6186840b115958311551e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:10:da:3e:17:4a:7b:73:e2:df:52:35:54:9e:
5b:99:76:85:3d:4d:e2:fe:5e:bb:33:ca:c9:4e:3e:
9b:83:b9:98:a2:00:eb:56:58:d4:1e:2b:d7:de:5f:
cd:0d:04:58:7b:a9:30:57:9a:13:cb:24:ce:0c:5d:
6b:23:ab:b8:af:9c:0f:e6:4c:22:1b:80:cc:f8:67:
8f:1a:45:42:11:36:d7:2b:93:36:28:c9:09:c5:14:
05:d6:9e:35:28:df:32:b4:96:f3:1b:3e:05:67:31:
2c:38:27:51:41:0e:af:f6:3b:85:5a:c6:20:ed:d9:
af:60:36:4c:4c:6e:7d:cb:7c:1e:1c:60:61:85:aa:
5b:0c:21:6d:c7:f6:92:54:a6:bf:27:59:4e:9a:5f:
8c:16:c1:a8:65:f3:7c:fd:e9:25:71:1a:f5:ac:12:
01:97:52:c6:ad:0c:48:f5:f6:2f:f4:05:a1:64:11:
5a:7b:de:ea:5c:0a:e4:4b:79:88:88:85:70:0b:47:
72:12:95:f7:d2:0a:5c:31:c1:77:db:c7:db:39:33:
d1:95:a0:1a:d4:3e:fc:fb:ed:d4:ca:a2:11:f9:06:
e9:19:c0:e4:81:0f:f8:6b:df:06:f0:bf:c8:ce:0d:
7b:a1:59:8e:fa:95:b3:82:dd:cb:e6:96:eb:be:fb:
1f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:65:83:A0:9A:F2:6C:D0:FB:61:86:84:0B:11:59:58:31:15:51:E3
X509v3 Authority Key Identifier:
keyid:17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/V2WDoJrybND7YYaECxFZWDEVUeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b6c3::-2a0c:b6c6:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
bf:89:5b:c5:78:54:df:ed:aa:a2:58:fc:58:b2:8b:d5:33:95:
37:82:5c:09:c0:a5:f1:e4:e5:d9:7b:76:ef:7e:1a:9f:78:90:
93:c8:3d:7f:6c:2d:cd:9f:be:51:15:31:f0:0c:a1:0c:5c:f3:
bb:a0:37:bb:45:66:a6:77:53:6a:6d:28:8c:b4:a8:93:7b:7f:
07:cd:a7:5b:ec:05:9d:3b:90:e1:ff:1a:ab:3a:02:55:a8:84:
ce:26:cf:02:0c:70:2d:5a:bc:c3:f4:92:d9:40:0b:43:e1:d4:
2e:57:3c:35:01:ef:f7:8a:19:dc:2c:d5:44:b5:cc:93:3e:19:
aa:02:f8:a8:68:46:c4:5d:39:14:64:11:de:55:15:4e:5d:c1:
ff:2c:68:3a:3d:f6:c3:f5:84:b7:04:fa:07:a2:26:70:ed:6d:
a9:db:94:b5:ea:23:58:6d:60:8d:3b:8a:3f:eb:59:cf:39:1e:
3e:fe:a6:9a:4f:00:25:89:69:99:10:b6:19:f7:88:50:2d:1f:
88:72:da:a0:27:29:0d:41:69:a6:f9:2e:23:01:60:38:54:23:
cd:70:9e:5a:c5:88:1c:00:18:43:91:23:0e:e4:30:94:fd:47:
ce:0a:23:3d:6a:63:5b:b2:78:45:f1:2b:ac:27:be:1c:5c:7f:
c5:82:8a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 05:59:34 2024 by rpki-client on console-fra.rpki-client.org