Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/5BAfn1Ea0bJZUwmLYmnOsts1O5U.roa
File: 5BAfn1Ea0bJZUwmLYmnOsts1O5U.roa (raw, json)
Hash identifier: TVMIrS2Rcc+PtJ8ezEgyUsgKaR7bDA7Y3TbZ7oDGOEk=
Subject key identifier: E4:10:1F:9F:51:1A:D1:B2:59:53:09:8B:62:69:CE:B2:DB:35:3B:95
Certificate issuer: /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial: 018CC2DB5F7FED793B5FE9597501A1F8089A
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/5BAfn1Ea0bJZUwmLYmnOsts1O5U.roa
Signing time: Mon 01 Jan 2024 02:30:05 +0000
ROA not before: Mon 01 Jan 2024 02:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212845
IP address blocks: 2a07:22c1:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:5f:7f:ed:79:3b:5f:e9:59:75:01:a1:f8:08:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
Validity
Not Before: Jan 1 02:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4101f9f511ad1b25953098b6269ceb2db353b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:28:1e:13:db:e1:ee:f7:ae:ec:b5:29:a3:e3:
bf:65:11:65:9e:e1:4f:dd:fb:69:58:ba:95:5c:ef:
38:2d:36:71:9e:d6:34:e6:11:64:65:34:04:d1:9b:
46:51:75:6a:f5:54:ab:d5:5c:e1:75:ad:68:9e:81:
c2:b7:e2:11:c1:50:ef:bd:63:45:9d:b4:af:92:fc:
10:06:c9:14:16:41:a0:8f:e5:9c:34:85:dd:7e:63:
d1:1f:e0:73:40:3e:18:af:43:6e:02:d9:dd:85:6e:
53:cd:93:0e:6f:67:a0:66:ab:87:82:73:ba:e8:f4:
ae:14:5f:1e:fa:4f:39:ce:0c:01:91:13:11:26:22:
00:4d:0e:fc:ec:a4:81:dc:c0:9a:08:0a:15:d5:e7:
87:f3:38:14:10:dd:a1:f8:70:05:67:70:7f:44:6f:
a2:ee:fa:e6:60:65:f0:29:ec:0d:3a:02:67:77:a1:
59:cc:75:a1:57:fa:10:cf:34:c1:d5:90:c3:3b:91:
4f:4f:6f:a8:b7:c6:7e:8c:89:90:1e:23:15:10:02:
b2:a8:20:f5:ab:57:bd:d0:e9:04:da:e5:87:27:0c:
04:21:23:6e:1e:40:04:73:ec:8c:ee:0e:98:63:33:
8d:7d:ab:3b:3d:8f:25:2c:9a:21:fa:43:b2:ca:08:
b5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:10:1F:9F:51:1A:D1:B2:59:53:09:8B:62:69:CE:B2:DB:35:3B:95
X509v3 Authority Key Identifier:
keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/5BAfn1Ea0bJZUwmLYmnOsts1O5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:22c1:4::/48
Signature Algorithm: sha256WithRSAEncryption
28:02:18:50:d3:a6:af:4d:77:f3:42:5c:d6:3b:9f:6e:d6:29:
75:92:2c:ab:99:db:0c:8f:9a:97:cb:9a:7e:5c:91:e4:68:5e:
b2:c1:15:c9:26:cb:e6:2c:08:fd:63:ce:f0:91:18:ab:62:d5:
11:d0:d8:32:f4:94:6d:83:db:0e:6d:a5:fc:22:c2:06:db:93:
6d:1d:9d:28:60:24:26:7b:fe:ce:df:4e:b2:29:f6:de:ee:6d:
d9:2b:75:1b:96:84:79:3e:8b:f4:ab:b8:3a:eb:11:c1:9b:c6:
0d:df:7d:fa:95:99:8f:20:8a:c1:9d:12:cb:df:ac:75:a4:dc:
3a:65:7a:9a:59:13:15:b8:7e:f3:d3:5c:29:15:9e:8d:c2:fb:
31:f1:e6:b7:f8:90:81:ba:61:fc:e6:f5:7a:70:c7:3f:06:f7:
1a:b0:2e:b5:e7:c9:0d:3b:9c:ea:5d:49:6d:de:81:fd:7f:0f:
65:fe:f9:48:11:fc:38:3d:02:25:88:c8:e4:d0:1c:17:a1:e2:
0b:4a:d5:e6:ed:76:ad:bb:35:c3:e1:7d:ab:3a:ef:be:3d:8d:
99:57:56:db:88:23:96:21:33:c0:28:33:61:e1:56:35:8e:9b:
b9:f6:90:93:fd:b1:19:00:db:2a:25:f2:33:47:d5:91:fb:99:
1d:e2:ba:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 23:04:14 2024 by rpki-client on console-ams.rpki-client.org