Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/De0hYQtIuEjtqes16-Pl-LobmBg.roa
File: De0hYQtIuEjtqes16-Pl-LobmBg.roa (raw, json)
Hash identifier: mmtdvUmrOaFvrZOurwOmI5fwI+Y41b4dJSE8bJdus38=
Subject key identifier: 0D:ED:21:61:0B:48:B8:48:ED:A9:EB:35:EB:E3:E5:F8:BA:1B:98:18
Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f
Certificate serial: 018CC4932217A06DEC55CD40F6ADDAEA7174
Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/De0hYQtIuEjtqes16-Pl-LobmBg.roa
Signing time: Mon 01 Jan 2024 10:30:25 +0000
ROA not before: Mon 01 Jan 2024 10:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58321
IP address blocks: 2a06:1980::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:22:17:a0:6d:ec:55:cd:40:f6:ad:da:ea:71:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f
Validity
Not Before: Jan 1 10:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ded21610b48b848eda9eb35ebe3e5f8ba1b9818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e4:d1:c6:a5:fc:8a:2f:1d:7a:ea:a3:c7:28:
3b:53:b1:06:83:9e:40:82:07:ae:db:93:dd:ef:3f:
b5:7b:c8:ff:23:96:e9:aa:05:3b:70:3b:7a:a6:09:
d2:57:f8:4f:f2:8c:07:2e:30:82:95:76:51:b9:78:
c6:f4:20:f3:19:e1:b0:15:b3:e1:92:8e:07:1e:ec:
9b:1a:d9:c8:4c:15:13:b6:54:1e:9f:81:6a:14:59:
fc:bc:15:bd:ff:92:ab:9b:9f:de:a0:f9:f1:ff:42:
f6:22:2f:9d:24:92:64:0c:18:23:b3:84:c1:8e:7c:
c6:0a:ae:2c:da:bd:3c:c2:02:31:02:a2:ed:6b:7a:
e5:40:0d:eb:f9:87:96:2a:ad:c1:39:e9:58:59:6d:
36:f4:f8:0b:39:db:84:4a:ec:fb:7b:59:82:8f:52:
35:67:aa:a0:60:71:98:2e:b8:43:d2:0c:b9:c1:0e:
f7:4d:9b:8f:72:22:81:a3:c7:eb:9e:4c:e1:3f:a2:
df:c9:75:c2:45:ca:0e:3d:c0:13:b8:f5:76:73:68:
34:d2:bc:81:99:79:c5:a8:c6:3c:57:1e:75:5c:57:
9d:f0:09:d0:ed:08:d3:5f:fd:32:44:71:fd:fa:2e:
54:f9:e8:46:88:a2:84:35:af:b2:d5:48:56:93:32:
29:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:ED:21:61:0B:48:B8:48:ED:A9:EB:35:EB:E3:E5:F8:BA:1B:98:18
X509v3 Authority Key Identifier:
keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/De0hYQtIuEjtqes16-Pl-LobmBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1980::/48
Signature Algorithm: sha256WithRSAEncryption
9d:84:63:10:f0:7e:43:bb:3d:4d:e6:5e:ef:6a:49:ae:13:e1:
4c:aa:77:86:61:82:5b:1e:7e:f4:10:86:21:b3:56:f1:f6:94:
57:a2:84:04:89:31:37:85:6f:17:0d:fa:86:18:69:63:56:10:
c1:8c:4e:cb:5e:67:2d:44:c3:b8:0d:c0:a3:e0:27:86:85:42:
64:91:e9:97:01:ec:0e:ba:2c:0c:a4:80:f8:92:33:18:7a:da:
26:49:1e:0e:eb:97:e3:d4:61:75:11:cb:00:36:3b:45:a1:1b:
c9:f5:86:a3:7d:ab:e1:98:83:2b:bc:4a:4d:cf:3b:49:94:4e:
32:0a:05:bd:84:d8:52:33:29:a5:9b:b0:b9:8d:71:71:0d:49:
77:b2:31:2f:7e:2f:61:19:da:3e:b3:dc:72:a1:eb:32:7a:02:
d0:59:47:e5:a4:44:b9:61:40:35:68:43:10:08:63:0a:5e:02:
ae:93:31:51:60:34:fd:3a:5e:09:8b:eb:29:2c:e4:a2:b9:60:
93:b8:21:bc:cc:f0:c4:07:48:2e:f2:35:4c:f3:5c:f1:7a:3f:
b1:7b:85:65:4d:4d:ec:ec:5c:50:6c:00:b8:17:82:27:61:35:
b2:a9:6b:e5:6d:7d:73:7b:0a:d6:3d:85:9b:63:00:36:5b:55:
ec:6f:76:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:07:14 2024 by rpki-client on console-fra.rpki-client.org