Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/_D3Dxy5-d-NCAUNoPGsX0DUU3Tk.roa
File: _D3Dxy5-d-NCAUNoPGsX0DUU3Tk.roa (raw, json)
Hash identifier: iHKZaJKHFuH+yY8RfqknXwh9H2Fiz7IEMkV87YWxxCY=
Subject key identifier: FC:3D:C3:C7:2E:7E:77:E3:42:01:43:68:3C:6B:17:D0:35:14:DD:39
Certificate issuer: /CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42
Certificate serial: 018CC795467CB8AD142911D02B8064C0C822
Authority key identifier: 32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/_D3Dxy5-d-NCAUNoPGsX0DUU3Tk.roa
Signing time: Tue 02 Jan 2024 00:31:37 +0000
ROA not before: Tue 02 Jan 2024 00:31:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36268
IP address blocks: 2a09:b280:ff90::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:46:7c:b8:ad:14:29:11:d0:2b:80:64:c0:c8:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42
Validity
Not Before: Jan 2 00:31:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc3dc3c72e7e77e3420143683c6b17d03514dd39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:31:ab:26:90:97:b3:c5:7e:39:7d:fd:b6:1f:
43:e0:21:10:94:0a:4f:3c:a6:39:40:f7:4d:c3:8b:
27:88:9b:ae:2b:e3:89:8e:4c:89:60:93:56:dd:9b:
d8:62:bb:cc:1c:3f:f8:df:e5:6f:80:4c:92:d3:49:
b3:8a:61:1f:81:18:db:14:54:c8:b8:08:59:75:d6:
88:e2:46:de:d2:da:c2:49:91:80:05:d4:ca:02:4f:
00:9c:6f:ec:60:60:2e:5b:b7:42:73:58:ac:92:40:
62:8d:2b:0f:02:b1:3f:da:da:cf:d8:42:6a:ca:b4:
1f:d5:d3:26:92:25:a4:77:a2:9f:4b:ec:51:37:0a:
96:01:3b:28:67:5a:c4:14:25:10:5f:85:71:c2:61:
d2:39:c6:01:0d:a1:5f:c9:12:00:2c:f7:1c:ed:01:
66:85:8a:33:16:a4:7f:d5:84:94:12:6d:a4:10:f9:
10:37:d5:2b:be:df:50:fa:eb:4d:b6:ae:2f:8c:c4:
42:33:13:53:ab:51:cd:f4:5c:de:73:38:21:00:03:
56:f9:03:6e:d0:d4:57:6a:88:89:8e:9c:39:ce:a2:
e9:fd:12:70:e6:19:96:2a:c3:65:ef:a6:e8:37:8f:
a9:c3:40:4c:90:6b:54:9a:44:ad:2e:cc:40:09:9e:
cb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3D:C3:C7:2E:7E:77:E3:42:01:43:68:3C:6B:17:D0:35:14:DD:39
X509v3 Authority Key Identifier:
keyid:32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/_D3Dxy5-d-NCAUNoPGsX0DUU3Tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:b280:ff90::/44
Signature Algorithm: sha256WithRSAEncryption
91:77:24:1f:97:73:83:8d:5e:f4:e6:0f:19:ad:fe:31:c7:da:
cb:4a:84:09:dc:5d:b1:86:ad:93:09:6e:06:75:02:e1:d0:c4:
5a:4f:6a:ba:a9:df:d6:3b:e7:9e:3d:de:30:44:ef:a0:a4:33:
a7:64:53:f9:37:fa:33:a9:76:4d:ee:77:ea:80:83:62:ed:d0:
20:21:c8:b2:7c:59:50:07:35:47:5a:a9:1e:b5:0a:a2:4d:76:
a8:97:af:c8:d8:cb:60:02:35:12:64:42:56:21:1b:20:38:47:
30:d3:b2:d4:55:ba:11:a7:eb:94:43:48:7f:66:ce:a0:0c:d4:
0d:bb:83:2a:81:87:28:01:1e:eb:91:cb:31:05:02:3e:87:47:
9f:a5:fb:4b:d1:2f:c5:f0:db:9a:43:68:14:a9:e0:08:25:13:
80:09:ca:b2:66:58:52:14:4a:12:4a:74:4b:f1:c0:91:dc:30:
ef:5d:71:e8:be:6f:96:03:2e:ab:cc:c3:01:a6:77:41:65:26:
db:43:c7:65:3c:ca:08:e1:63:bd:7c:8c:89:c8:51:ed:9e:8d:
ba:3e:34:39:19:87:85:bb:27:94:7f:7f:37:8a:d5:ce:4a:de:
25:63:09:71:f2:e2:a7:29:17:2d:4f:bc:eb:82:7d:87:7c:38:
37:1f:66:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:16:14 2024 by rpki-client on console-ams.rpki-client.org