Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/C-x-mFplfMYsG8UHTEQ1W0yWMDU.roa
File: C-x-mFplfMYsG8UHTEQ1W0yWMDU.roa (raw, json)
Hash identifier: +rG/NTtMEMzcFW9dHX0Dw1uq6d0iTIJZ+yHQlfpQ0YM=
Subject key identifier: 0B:EC:7E:98:5A:65:7C:C6:2C:1B:C5:07:4C:44:35:5B:4C:96:30:35
Certificate issuer: /CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Certificate serial: 018CC6B7A6440B1D31ACEB8C44D4A42E12BA
Authority key identifier: BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/C-x-mFplfMYsG8UHTEQ1W0yWMDU.roa
Signing time: Mon 01 Jan 2024 20:29:33 +0000
ROA not before: Mon 01 Jan 2024 20:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203496
IP address blocks: 2a13:a207:fff0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:a6:44:0b:1d:31:ac:eb:8c:44:d4:a4:2e:12:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Validity
Not Before: Jan 1 20:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0bec7e985a657cc62c1bc5074c44355b4c963035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:56:32:17:1d:98:eb:a5:33:a8:cb:b2:e2:60:
b4:79:b7:64:62:d7:4c:6c:00:11:80:43:3d:f4:c3:
49:60:46:f8:06:50:5c:f8:26:76:3f:74:63:59:52:
cc:6e:e8:b4:12:c0:c3:6b:c8:df:86:55:4e:05:9d:
81:68:b4:72:1f:fe:56:ca:cc:9f:3d:f5:c5:3b:7c:
e3:eb:72:d7:58:d9:92:90:a7:9d:02:1a:d9:55:3e:
b0:23:28:43:2f:80:80:de:7f:7b:d7:64:4b:b5:13:
fc:30:c8:79:00:d6:28:a8:08:f2:b7:fe:da:4a:71:
ae:c3:82:69:75:aa:f5:53:f7:33:bc:4d:67:7f:d5:
1c:17:15:6b:3f:33:0c:64:50:b8:2f:78:d7:16:8d:
60:ff:60:8b:be:2d:82:a5:2d:af:ff:d5:aa:5e:e0:
83:55:8a:14:67:8c:f0:f5:26:a9:99:10:34:3e:27:
8d:88:e9:d0:bc:7e:14:72:7e:75:8c:3b:7e:8d:08:
30:6e:87:b5:d1:f5:ef:d1:7a:50:1d:6a:ee:02:a5:
88:62:8f:0f:60:59:97:79:64:5d:c3:04:8a:af:ff:
29:b3:41:bb:84:1a:c9:2e:fb:73:ae:03:02:80:15:
83:90:0d:d6:56:7c:2c:a8:98:e5:1d:09:64:cf:bc:
bd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EC:7E:98:5A:65:7C:C6:2C:1B:C5:07:4C:44:35:5B:4C:96:30:35
X509v3 Authority Key Identifier:
keyid:BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/C-x-mFplfMYsG8UHTEQ1W0yWMDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a207:fff0::/44
Signature Algorithm: sha256WithRSAEncryption
37:5e:b1:32:84:10:bf:c6:44:f4:17:11:e0:7b:3a:15:1f:cc:
f8:31:cf:8d:be:47:51:cb:4a:84:6c:99:3e:1e:fe:9e:88:f9:
12:22:18:50:a1:11:9f:e6:2c:58:ac:89:e5:bc:dd:22:9a:04:
12:ea:7c:f5:05:ae:9f:48:66:53:cb:48:50:a3:e3:17:25:e2:
0d:6c:28:7e:cb:30:50:c8:73:3d:42:3c:e4:8d:73:3f:7d:a5:
8c:59:7b:8d:57:f4:52:0d:f2:98:41:37:d9:b8:59:e2:c3:3b:
f5:d5:76:dc:2a:ae:ec:7a:5d:90:8a:8c:5b:12:b0:09:87:01:
ff:d3:f8:f1:49:ee:89:3c:43:a5:db:42:36:d2:92:79:69:83:
bf:fa:a0:ea:1b:55:69:75:0b:7b:d2:8c:50:5e:ad:e2:86:d7:
0b:43:3f:a9:45:bb:14:29:04:c8:5e:9b:4f:ac:a6:5a:f6:54:
09:e1:0f:b5:fe:e4:c1:98:c6:cc:a3:33:46:b1:de:44:fc:14:
da:5e:54:64:fc:ec:38:7c:ae:30:f8:12:24:fe:62:12:32:d9:
02:d7:cc:41:82:09:0d:21:a5:98:85:5e:19:2d:6e:66:ae:b1:
d0:99:16:56:95:d6:e6:e7:d8:56:e9:57:54:46:d5:ef:03:0d:
1e:72:c4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:41:10 2024 by rpki-client on console-ams.rpki-client.org