Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/cdCV5REndvFUwaZqF8m1fD7U3FU.roa
File: cdCV5REndvFUwaZqF8m1fD7U3FU.roa (raw, json)
Hash identifier: e58VyXJPz2VlvM/a21SDawb+Gf+qKDre7w+rMmKHAg4=
Subject key identifier: 71:D0:95:E5:11:27:76:F1:54:C1:A6:6A:17:C9:B5:7C:3E:D4:DC:55
Certificate issuer: /CN=321ec4626ecde25335aff088b04c71395ae6bc24
Certificate serial: 018CC2DAC783DFC377A2F7264CA906ABDA08
Authority key identifier: 32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/cdCV5REndvFUwaZqF8m1fD7U3FU.roa
Signing time: Mon 01 Jan 2024 02:29:26 +0000
ROA not before: Mon 01 Jan 2024 02:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39535
IP address blocks: 2a01:6c60:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:c7:83:df:c3:77:a2:f7:26:4c:a9:06:ab:da:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321ec4626ecde25335aff088b04c71395ae6bc24
Validity
Not Before: Jan 1 02:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71d095e5112776f154c1a66a17c9b57c3ed4dc55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ad:54:f0:37:5d:e6:bd:25:be:f5:82:59:ec:
18:3a:38:d6:16:c5:4b:49:69:6d:81:49:e0:5b:d1:
ed:4c:72:3f:d7:c3:7b:77:20:a9:88:cf:25:da:8a:
88:8a:97:16:39:ab:b7:e1:c1:98:66:d6:40:9c:09:
c5:b8:5c:48:06:25:36:5d:96:83:6d:54:9f:5f:80:
39:eb:c6:10:14:cb:55:e3:4e:66:3d:12:73:33:85:
8c:a8:26:e3:ad:64:f7:ef:92:be:14:f1:10:11:35:
3d:96:70:8a:e9:13:a0:92:71:17:7e:08:7d:39:d0:
d1:66:37:9f:99:3f:24:b9:83:72:5f:45:c6:f9:4e:
0d:dd:2b:a7:1a:4a:19:4f:dd:16:99:79:f9:d7:4e:
41:ea:7c:a3:d4:a7:35:a2:62:78:b0:13:c3:df:13:
ab:e0:98:77:7e:dc:5e:fd:cd:d5:d0:9e:e7:37:2d:
84:7f:27:d4:f7:35:7f:b2:80:5c:22:5c:49:9a:21:
9f:69:15:78:11:ad:96:32:48:61:eb:e3:a4:9d:6f:
8c:ed:b4:eb:33:df:a0:c6:f2:d9:00:d5:8e:ce:03:
aa:f0:e9:74:e0:95:34:31:03:1b:1b:d8:de:73:41:
93:17:97:74:2c:ac:f9:67:4a:e1:0b:51:d5:96:cd:
d9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D0:95:E5:11:27:76:F1:54:C1:A6:6A:17:C9:B5:7C:3E:D4:DC:55
X509v3 Authority Key Identifier:
keyid:32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/cdCV5REndvFUwaZqF8m1fD7U3FU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:6c60:3000::/36
Signature Algorithm: sha256WithRSAEncryption
4a:40:f1:36:3a:71:9d:7b:f1:73:59:9c:f2:3a:9d:aa:90:6c:
59:3c:ec:c7:13:64:60:ec:a1:9c:62:83:ce:9b:2f:9b:f2:de:
0d:9e:d4:99:54:f0:2a:bb:3e:7a:2a:39:7d:56:63:c2:84:1c:
06:33:90:7a:de:3c:40:b7:72:66:ea:5f:a4:dc:31:c3:b1:d9:
64:6d:4c:55:22:45:26:88:e5:4f:a8:30:02:e2:0f:b0:0f:c0:
34:3f:a2:cb:79:87:f7:4f:0a:25:3e:dd:3d:44:7f:96:82:7d:
fe:33:cd:69:39:51:69:74:25:46:a2:d1:97:6e:fa:41:0d:b0:
56:34:4f:cf:8b:79:61:7a:48:84:f7:16:14:0c:94:e3:61:7b:
5d:91:08:d6:1b:8e:f8:9e:c8:7d:0e:55:41:de:6e:27:e8:5b:
57:8f:df:8b:22:3d:ae:3f:bb:2b:b7:5f:5d:43:66:b2:ba:d9:
4e:45:68:cb:dd:e9:de:cd:a7:95:72:a3:b9:28:a6:d7:13:ad:
dc:78:1e:a9:70:96:7b:59:a4:0e:70:61:ff:13:fd:d8:84:c0:
db:e1:c9:23:15:80:d8:71:dc:08:f9:f7:e5:a5:56:75:50:b8:
54:17:4d:d2:07:75:4d:36:56:82:41:c7:81:5c:96:e6:35:d7:
b2:1e:13:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:10:22 2024 by rpki-client on console-ams.rpki-client.org