Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/XsDf8iSlvK2hHkgOEZv2P1sai0o.roa
File: XsDf8iSlvK2hHkgOEZv2P1sai0o.roa (raw, json)
Hash identifier: rsBIa7gCXZSVrq93KvVqCLEb9DirsSPlLxq0MOUQqig=
Subject key identifier: 5E:C0:DF:F2:24:A5:BC:AD:A1:1E:48:0E:11:9B:F6:3F:5B:1A:8B:4A
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 018CC26D442ABAE0E4F815CC4A3B82A0A3F8
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/XsDf8iSlvK2hHkgOEZv2P1sai0o.roa
Signing time: Mon 01 Jan 2024 00:29:49 +0000
ROA not before: Mon 01 Jan 2024 00:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212371
IP address blocks: 2a0e:aa07:e047::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:44:2a:ba:e0:e4:f8:15:cc:4a:3b:82:a0:a3:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 00:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ec0dff224a5bcada11e480e119bf63f5b1a8b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:21:37:2e:28:63:9a:1e:a4:8d:b6:63:a7:65:
75:01:4e:d0:eb:15:1a:3c:0f:61:fc:1e:bb:88:af:
f3:7b:ec:71:89:14:0c:00:74:a7:14:af:77:78:92:
1f:89:cf:15:28:3a:47:d1:82:a6:18:98:c9:95:3f:
e7:60:aa:b5:61:4d:1c:eb:e7:0f:55:a4:61:d6:85:
fa:22:0f:78:40:16:db:d5:18:1f:a8:1f:75:3a:8b:
57:b9:1c:2b:f3:1c:24:e2:16:46:20:55:02:c5:80:
0c:af:bd:03:50:df:21:2c:75:62:a4:13:86:7b:e4:
98:0e:f3:f4:b7:eb:75:b2:ed:93:9f:d3:9c:7d:7e:
48:92:c5:c6:a1:00:5c:f7:a6:c4:6e:60:6e:5d:4f:
66:35:03:3e:b9:7b:d5:c0:29:d6:07:a0:2f:be:11:
c5:39:40:6e:c9:31:11:a7:a9:f7:a4:a7:dd:50:bf:
5c:7a:43:02:7d:f5:37:ac:2a:dc:79:3c:9c:e8:2f:
76:24:15:c3:a5:b4:60:aa:d6:3f:0b:f6:33:b2:cd:
ae:ad:c9:dc:9b:82:1c:8d:ce:d8:62:c5:18:de:22:
40:5c:58:8d:83:aa:4c:07:ee:45:b3:7b:31:61:80:
33:91:6f:08:0c:c2:22:88:95:6d:63:5c:18:38:b8:
f4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C0:DF:F2:24:A5:BC:AD:A1:1E:48:0E:11:9B:F6:3F:5B:1A:8B:4A
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/XsDf8iSlvK2hHkgOEZv2P1sai0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e047::/48
Signature Algorithm: sha256WithRSAEncryption
45:0a:c0:12:45:07:3c:9b:f1:e4:a0:2c:f1:61:50:f4:30:41:
d4:50:22:cf:1a:a2:be:1b:d6:5b:05:9e:d9:52:fb:25:87:c7:
70:f3:7f:a3:52:87:c8:1c:de:2c:fc:bd:ae:e6:5f:fe:cf:94:
fa:89:57:f7:cc:f2:45:1b:63:0e:93:3e:73:c5:0d:fb:51:4d:
66:e7:d0:54:2e:a5:58:02:c9:56:66:eb:95:9e:53:c7:e1:9e:
96:b5:66:34:05:94:c4:4f:bd:e9:ac:76:dc:a8:ca:b6:ff:b3:
76:a2:cc:84:49:32:a6:bb:18:fa:c5:f7:04:f1:79:62:ef:48:
91:33:94:81:aa:fc:62:80:77:bb:6a:3e:72:48:79:3a:7f:56:
74:a1:0e:27:e6:46:29:51:39:e4:ae:bc:7c:f5:76:5c:72:e9:
d2:9e:b7:4e:f6:e1:03:28:52:16:a4:3e:4f:e5:44:3c:ea:d4:
9d:a8:10:5c:7d:51:ba:f8:44:0c:b7:2e:3a:84:d3:c8:3c:3e:
3d:46:29:71:7c:4f:5e:37:1b:cf:7a:a3:51:c3:72:1d:ec:af:
96:f9:44:70:ee:0e:e3:26:a5:e4:1c:b7:1e:6f:c3:72:6e:3b:
81:e5:44:32:c9:e1:17:2f:d2:29:c5:fc:3d:e8:7c:8f:fd:8b:
1e:2d:ed:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:49:11 2024 by rpki-client on console-ams.rpki-client.org