Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/HTz5MOXaqymgmpqqeTqQcbF5xj0.roa
File: HTz5MOXaqymgmpqqeTqQcbF5xj0.roa (raw, json)
Hash identifier: Bp0kp01lbjy420UH0Oxy+m9+Wc3dYjKjHIW7RKUAjk4=
Subject key identifier: 1D:3C:F9:30:E5:DA:AB:29:A0:9A:9A:AA:79:3A:90:71:B1:79:C6:3D
Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial: 018CC94E719B8AF45EB927B5881E1B8680C7
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/HTz5MOXaqymgmpqqeTqQcbF5xj0.roa
Signing time: Tue 02 Jan 2024 08:33:30 +0000
ROA not before: Tue 02 Jan 2024 08:33:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57050
IP address blocks: 2a03:9c00:c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:71:9b:8a:f4:5e:b9:27:b5:88:1e:1b:86:80:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Validity
Not Before: Jan 2 08:33:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d3cf930e5daab29a09a9aaa793a9071b179c63d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:86:e4:48:7d:a9:d8:46:29:af:5d:ae:b1:18:
1a:85:80:d6:a7:23:bb:31:5e:9e:8a:9a:2e:bb:ee:
72:67:4a:9a:a4:e0:4f:d6:21:12:f1:e6:a1:ba:18:
e1:b1:fe:72:e6:41:bb:a0:e7:63:61:ff:1c:a5:c5:
52:e1:0d:25:8b:e2:23:29:11:08:17:c5:34:f7:b9:
18:fe:2c:3d:cf:72:4e:2e:34:a7:cc:84:2d:b1:85:
ed:55:3a:b1:91:f9:46:38:36:d6:e9:fe:eb:99:d6:
aa:02:67:26:ba:1d:72:72:13:a6:f8:6c:94:56:74:
5e:32:db:c7:2e:8f:3c:04:62:cc:b4:41:0c:61:6a:
b8:db:3a:2a:a0:e0:a9:ae:50:dd:3a:b8:50:68:ae:
c6:63:dd:53:81:d1:93:c1:d9:cc:e4:97:52:b9:0c:
a6:b9:79:96:d4:5e:8c:d5:79:09:39:30:89:4b:8c:
92:71:9b:89:0c:91:3a:bb:a5:8b:73:7e:28:b7:f0:
f7:76:04:29:d0:23:df:c5:b1:a5:6f:f9:95:6f:5a:
27:95:36:72:72:90:bd:5a:61:de:79:4d:f0:43:59:
5c:67:6f:f2:35:52:ec:9a:6f:0e:34:01:2a:eb:ff:
ae:a0:f7:ad:9f:90:54:83:78:ed:9c:33:5f:73:c3:
88:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3C:F9:30:E5:DA:AB:29:A0:9A:9A:AA:79:3A:90:71:B1:79:C6:3D
X509v3 Authority Key Identifier:
keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/HTz5MOXaqymgmpqqeTqQcbF5xj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:9c00:c::/48
Signature Algorithm: sha256WithRSAEncryption
6b:00:56:b1:5d:77:95:a0:0f:95:91:ac:10:99:55:57:6a:e9:
bf:f8:5a:51:a9:3a:f6:a2:6e:cb:07:b7:51:96:3a:97:0b:0b:
38:91:b8:fa:5a:42:f2:da:72:51:7e:a8:8c:36:bc:ea:ca:5c:
a8:46:0e:9e:17:29:66:e1:97:4b:50:5a:b1:af:75:b8:e0:50:
59:89:83:9e:4e:94:d7:14:d7:ba:11:b8:35:98:23:7d:fa:17:
b6:0d:e2:19:ee:94:40:7f:69:2d:92:6c:b9:ab:e2:a0:3b:84:
ec:7c:b9:72:c3:0f:b0:58:9d:21:6f:71:3c:ea:1c:fc:b6:a8:
ea:ee:50:72:60:40:72:2a:47:18:6f:e5:d0:0a:49:7c:3f:eb:
3a:4c:37:b0:80:b6:aa:e6:16:16:16:15:2c:2a:59:98:c2:c7:
61:95:e2:f2:38:25:2f:c8:59:e9:02:79:ae:03:26:ab:92:82:
31:dd:53:db:24:ca:4c:c0:65:b8:ac:32:51:b4:1f:27:e3:a5:
db:92:24:e9:38:a5:e1:2a:33:0f:93:d7:ad:49:76:bc:2b:01:
2c:ac:a1:e4:b3:3c:9d:3c:51:33:9f:5b:5c:21:cd:2c:bb:5c:
51:81:16:5b:d3:18:3b:dd:32:32:2b:69:00:78:68:6e:ee:5e:
1d:91:c6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 16:03:46 2024 by rpki-client on console-fra.rpki-client.org