Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/3LLnQl2bfcbG1vUFVCLkZIjJtFQ.roa
File: 3LLnQl2bfcbG1vUFVCLkZIjJtFQ.roa (raw, json)
Hash identifier: iX9EM72ChzHbs+yzuuG/R8I/UxI2e0r0UCkC99z5rqU=
Subject key identifier: DC:B2:E7:42:5D:9B:7D:C6:C6:D6:F5:05:54:22:E4:64:88:C9:B4:54
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 018CC26D3FEB63B18CF87EB48936BA82FA38
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/3LLnQl2bfcbG1vUFVCLkZIjJtFQ.roa
Signing time: Mon 01 Jan 2024 00:29:48 +0000
ROA not before: Mon 01 Jan 2024 00:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211158
IP address blocks: 2a0e:aa07:e021::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:3f:eb:63:b1:8c:f8:7e:b4:89:36:ba:82:fa:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 00:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dcb2e7425d9b7dc6c6d6f5055422e46488c9b454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:58:11:e7:82:e1:f9:60:a7:ae:3c:ec:88:a8:
58:02:2a:ea:f9:4a:d7:74:02:e6:e5:54:d7:be:40:
4a:c1:e4:d5:7d:56:88:8c:16:22:cf:56:fd:4f:f2:
3a:79:76:d9:e6:0d:80:51:65:e2:1b:27:34:5d:83:
cc:50:69:02:3e:e6:49:64:dd:3d:21:c5:ad:ba:d8:
99:59:6d:fa:f3:ac:8c:d2:ba:60:af:bb:eb:2d:f5:
3e:02:03:e8:d6:78:1a:fb:6a:71:92:c0:bf:96:13:
45:7c:e5:da:46:d7:1b:a0:b9:a6:5a:61:d1:df:dc:
aa:56:77:c5:76:3c:ed:e2:d9:0a:be:34:bd:3c:60:
d0:7c:b3:16:ae:c4:42:7c:8b:22:b2:5d:69:73:87:
a0:6a:03:d5:3f:e2:9f:ba:f1:72:b3:6f:99:a1:cc:
a0:0c:c7:fe:7f:f4:ae:c0:84:b4:ce:1f:0b:7f:bf:
59:20:d0:e8:5a:ee:db:1e:d3:e9:99:2b:40:32:41:
25:1b:09:ba:b4:dc:49:2b:b9:4e:f5:ea:72:ac:23:
a2:de:2c:1a:82:04:40:ff:0b:a6:c6:d4:61:10:a6:
be:59:0a:eb:68:a4:5e:61:1f:25:70:08:4b:dd:9b:
da:a3:b3:89:91:5f:2a:77:c4:65:be:ed:29:82:a6:
cd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B2:E7:42:5D:9B:7D:C6:C6:D6:F5:05:54:22:E4:64:88:C9:B4:54
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/3LLnQl2bfcbG1vUFVCLkZIjJtFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e021::/48
Signature Algorithm: sha256WithRSAEncryption
43:69:08:40:0d:93:76:01:a6:17:54:1a:b8:32:46:b4:ff:7f:
40:92:c7:26:94:29:5a:b1:4b:52:e8:95:e5:c0:29:58:ce:f5:
59:86:2e:83:84:3c:0b:e8:d4:a3:a7:c3:35:e7:18:e7:46:b4:
83:6e:75:e1:bb:1e:08:0c:c3:d3:ec:ce:6a:c0:52:78:c6:88:
5a:8c:e6:4e:b4:64:ee:c6:2d:9a:39:87:c0:6b:28:0c:a7:58:
c7:30:cb:43:3c:b3:09:d3:1f:b5:f1:21:26:2d:5b:fe:bd:d2:
8e:8c:b7:ee:fb:0e:6d:13:77:b1:e4:43:5c:46:b9:a3:09:6d:
dc:7e:ef:a2:0e:21:d1:cd:c3:95:8e:39:9d:42:16:6b:7c:74:
32:65:b2:f2:e1:03:8f:d1:bc:9d:49:ad:2e:d6:da:de:8e:49:
bf:98:38:37:5c:59:9d:7e:04:f0:ae:46:d1:11:c1:51:11:f9:
f7:71:ea:7f:c2:e4:93:d1:42:0f:1e:fd:de:be:ec:98:72:88:
87:24:20:6e:e0:39:77:0b:74:6d:45:cc:bb:d4:e2:6f:e1:61:
64:d3:98:16:8f:41:a8:17:cf:f8:5c:0d:7e:12:ea:4b:6c:3c:
80:a3:20:a0:13:29:95:d7:ae:5e:f1:85:40:fc:6c:26:bb:75:
53:a2:e2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 18:27:00 2024 by rpki-client on console-ams.rpki-client.org