Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/C5A68b104oQADoMHstaBL4G_1Z8.roa
File: C5A68b104oQADoMHstaBL4G_1Z8.roa (raw, json)
Hash identifier: oWpJQ1dahXM4YqyXeQsdd5mZYaZkyGVswD9x+u+PyrE=
Subject key identifier: 0B:90:3A:F1:BD:74:E2:84:00:0E:83:07:B2:D6:81:2F:81:BF:D5:9F
Certificate issuer: /CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42
Certificate serial: 018CC795488D321B44CB7C4134A80691E5C8
Authority key identifier: 32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/C5A68b104oQADoMHstaBL4G_1Z8.roa
Signing time: Tue 02 Jan 2024 00:31:38 +0000
ROA not before: Tue 02 Jan 2024 00:31:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208886
IP address blocks: 2a09:b280:beef::/48 maxlen: 48
2a09:b280:cccf::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:48:8d:32:1b:44:cb:7c:41:34:a8:06:91:e5:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42
Validity
Not Before: Jan 2 00:31:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b903af1bd74e284000e8307b2d6812f81bfd59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9e:6e:b2:2f:32:1a:0b:f6:30:b7:b0:9e:1c:
3a:f9:68:cf:1a:1e:66:9c:e1:12:c6:6b:8d:55:0d:
eb:ed:aa:60:f1:72:9e:70:59:b7:5c:54:fe:1c:ba:
34:ae:0c:c6:35:ec:93:fa:c9:c7:91:eb:eb:a9:2b:
6d:e5:30:df:1e:5c:15:82:b0:8a:5d:58:37:39:7d:
29:29:1d:92:81:d3:2e:98:d1:2f:3f:25:51:43:48:
f7:61:f0:ad:65:97:45:c4:e6:38:d0:e4:d8:6c:5f:
36:8b:79:37:0c:5f:d3:94:79:15:0f:2f:d2:be:3c:
9f:3f:c4:c9:96:2a:41:5b:6a:af:7a:d9:9e:53:6c:
54:6e:9a:70:ee:b0:6e:45:90:f2:c3:65:11:37:a6:
ec:eb:86:8e:a1:23:8f:af:51:99:18:c7:1a:da:4a:
bd:03:4c:b7:18:13:35:cd:7f:c2:ef:81:ec:6e:74:
8d:84:9b:99:59:8c:17:28:54:87:2c:78:53:82:08:
29:ef:a3:09:95:81:45:9f:8f:e1:c5:9d:79:1b:5a:
50:07:cf:1a:92:73:ce:cd:37:49:de:b4:e3:bb:08:
3c:c6:a8:f3:54:46:3c:47:46:03:e5:81:c3:be:00:
ae:1f:b8:21:e8:2b:84:e9:0d:43:6d:12:74:20:d5:
0a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:90:3A:F1:BD:74:E2:84:00:0E:83:07:B2:D6:81:2F:81:BF:D5:9F
X509v3 Authority Key Identifier:
keyid:32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/C5A68b104oQADoMHstaBL4G_1Z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:b280:beef::/48
2a09:b280:cccf::/48
Signature Algorithm: sha256WithRSAEncryption
62:d1:f1:44:bc:19:23:a6:bb:80:e1:00:0e:c8:29:dd:5b:ca:
40:75:da:b2:74:ec:7a:22:ec:34:a6:86:46:1b:62:b6:00:85:
d5:0e:0c:84:5b:35:0f:e1:d9:00:f7:2f:ac:6a:e9:cd:09:fe:
e8:b7:53:32:8a:86:d6:92:b6:3f:24:b3:97:75:9c:db:ee:3a:
33:c9:ef:4b:57:3f:e2:2f:49:ae:89:f6:f1:22:df:22:67:0f:
5f:5d:f5:f8:c8:b4:e4:77:56:8c:74:6a:19:71:1a:d8:ab:64:
06:c9:0f:6c:67:7d:50:fc:d7:1e:53:c8:89:11:bb:be:0a:6c:
f7:75:6b:53:97:8c:c5:20:62:a3:f0:2b:aa:66:a2:2d:22:51:
7b:f5:60:80:80:cb:07:5d:9b:46:0c:b9:24:e8:07:a8:5b:13:
22:ca:d1:19:85:5b:41:e0:c5:08:be:da:2f:14:15:a3:91:a8:
dd:6b:51:4e:c5:c7:49:bd:97:93:83:31:12:0a:99:19:79:b1:
57:92:78:98:46:bf:29:8b:79:9b:51:85:98:f5:3d:94:ce:0e:
db:3e:55:0b:ca:34:90:15:c5:76:32:c8:ce:4b:32:3d:16:45:
65:a1:64:89:8b:c6:f1:6a:d2:6c:60:2c:35:cc:8a:d6:bc:40:
42:fa:72:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:22:44 2024 by rpki-client on console-fra.rpki-client.org