Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/0K7t8CbwYak7Z2UtEsGx6_UMGq0.roa
File: 0K7t8CbwYak7Z2UtEsGx6_UMGq0.roa (raw, json)
Hash identifier: dvmGozlzlON+xqQYRLMnm2KVv/5yRIsbP3yaTodMOmM=
Subject key identifier: D0:AE:ED:F0:26:F0:61:A9:3B:67:65:2D:12:C1:B1:EB:F5:0C:1A:AD
Certificate issuer: /CN=e5f4f24b40fda9b9528e4a8edcad61b841df6c18
Certificate serial: 018CC5DC646491E5C0C58F2CD938834078EE
Authority key identifier: E5:F4:F2:4B:40:FD:A9:B9:52:8E:4A:8E:DC:AD:61:B8:41:DF:6C:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/0K7t8CbwYak7Z2UtEsGx6_UMGq0.roa
Signing time: Mon 01 Jan 2024 16:30:04 +0000
ROA not before: Mon 01 Jan 2024 16:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2200
IP address blocks: 2a0c:1100::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:64:64:91:e5:c0:c5:8f:2c:d9:38:83:40:78:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f4f24b40fda9b9528e4a8edcad61b841df6c18
Validity
Not Before: Jan 1 16:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0aeedf026f061a93b67652d12c1b1ebf50c1aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8b:f3:f9:71:b0:02:35:32:47:4a:ed:1e:8c:
32:0e:12:df:c1:7e:09:fa:56:ad:6d:e8:7c:76:ff:
83:c0:e0:70:96:14:60:9d:bb:c7:d5:b8:e0:c5:a7:
b5:44:9a:78:47:80:74:8c:62:99:9f:3d:58:8f:7e:
95:ab:e5:e2:44:52:77:10:a5:72:49:a0:04:55:e0:
f4:5a:20:b8:8a:07:45:11:2b:ec:4e:35:5b:aa:28:
38:c9:50:d2:ed:bc:16:ef:81:af:12:ac:03:e9:74:
7d:0b:6e:a2:74:c3:8c:2a:1f:49:8d:52:30:4a:c5:
f8:89:9c:65:c3:3d:c6:e1:4e:5e:62:f5:80:75:72:
08:38:5d:c1:c6:cc:48:34:b8:51:48:f6:7d:3d:3e:
f3:aa:42:54:5a:38:a6:34:62:69:9e:3c:97:65:ac:
31:b9:a8:6c:16:37:fd:37:b0:cf:0d:b3:22:5c:18:
d1:c3:99:6a:da:92:cf:f5:25:82:62:75:59:6a:d6:
a0:e5:27:05:20:bb:c1:e6:05:a8:9b:24:b6:9a:ac:
e4:0f:5b:5f:a2:70:34:a1:5c:77:09:c8:00:b6:1c:
09:b1:47:70:d1:06:86:12:c8:24:30:af:ec:ac:15:
d9:c6:1f:f6:db:68:11:58:f9:6f:4f:98:70:1b:5e:
b9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AE:ED:F0:26:F0:61:A9:3B:67:65:2D:12:C1:B1:EB:F5:0C:1A:AD
X509v3 Authority Key Identifier:
keyid:E5:F4:F2:4B:40:FD:A9:B9:52:8E:4A:8E:DC:AD:61:B8:41:DF:6C:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/0K7t8CbwYak7Z2UtEsGx6_UMGq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:1100::/32
Signature Algorithm: sha256WithRSAEncryption
3d:0c:a4:2d:0d:c8:c6:7e:3a:2b:3e:9f:50:fb:1c:db:77:11:
24:35:c0:2a:77:f9:e4:bb:08:f8:dd:02:3e:49:d2:a2:71:ee:
b0:2b:ba:be:89:0a:21:89:7d:c5:87:5f:50:f1:df:36:40:47:
03:de:78:52:76:ff:91:ac:80:c8:f2:83:a3:86:ca:b8:41:e4:
82:0d:4f:cc:a8:48:3e:b0:d6:e6:d8:d3:a9:b9:c5:10:04:c5:
9c:0f:0e:4d:50:2d:02:0b:da:d5:ee:23:47:e8:7d:43:3f:d7:
8f:29:aa:75:51:fd:c8:40:3e:f7:f2:4e:4e:b5:d2:d4:bc:0d:
17:3f:8b:bf:6b:40:0e:2a:90:ff:5d:ae:6a:76:05:e4:d6:74:
97:36:8c:a8:27:6c:db:d0:28:7f:7a:dc:35:6a:9c:e8:b3:9b:
28:d2:3c:0c:d5:89:2a:9a:74:e8:b6:65:aa:75:d5:cc:a7:02:
26:c1:34:ed:3d:f4:06:b2:ad:31:de:a6:9b:03:71:39:13:b0:
03:d8:d2:6a:99:1c:3e:a8:1e:a4:85:ca:d6:1c:eb:00:11:88:
e2:90:1d:61:84:f6:6c:de:36:64:32:f5:02:ae:d6:8a:25:cc:
15:52:1c:c1:be:e5:1b:80:cb:d2:ec:e6:22:de:24:73:bb:b3:
4f:36:89:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 10:37:17 2024 by rpki-client on console-ams.rpki-client.org