Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/jZOHOD59xHX0U3VEnHn8aI3jTCY.roa
File: jZOHOD59xHX0U3VEnHn8aI3jTCY.roa (raw, json)
Hash identifier: 5ou4lKmFHhEh+OfK2dS2/u8ruhQD5i5b2JCIYTv9G50=
Subject key identifier: 8D:93:87:38:3E:7D:C4:75:F4:53:75:44:9C:79:FC:68:8D:E3:4C:26
Certificate issuer: /CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Certificate serial: 018CC56ED11A0F14E480B4B0B855C26CE09F
Authority key identifier: 35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/jZOHOD59xHX0U3VEnHn8aI3jTCY.roa
Signing time: Mon 01 Jan 2024 14:30:23 +0000
ROA not before: Mon 01 Jan 2024 14:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203600
IP address blocks: 2a06:e540::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:d1:1a:0f:14:e4:80:b4:b0:b8:55:c2:6c:e0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Validity
Not Before: Jan 1 14:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d9387383e7dc475f45375449c79fc688de34c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fd:e4:da:36:fa:ec:d6:dd:28:77:57:20:c5:
c3:fe:bd:88:eb:e7:8a:fd:d5:77:92:a2:40:e2:c5:
4a:da:f0:08:21:95:95:c8:13:db:b7:33:30:30:43:
04:a2:64:6d:6c:37:8b:81:58:73:1d:87:59:97:50:
73:8f:b1:74:74:c9:37:03:a9:a2:0a:98:33:7e:bc:
f7:97:47:90:f5:45:f8:bf:79:09:26:4a:b3:4f:55:
c2:d0:9c:e8:ba:2a:71:09:62:be:ad:e8:be:48:cd:
63:ac:57:0b:5d:af:2b:d1:1e:96:bb:ec:ce:7b:a7:
02:a3:74:a0:c9:ea:55:a4:c2:4a:3c:16:3a:07:6a:
d6:ad:a3:f0:89:d0:27:88:4f:c6:f3:56:4d:37:bb:
74:d8:91:08:0b:ed:c8:a9:41:a3:69:4d:fe:ad:85:
09:ac:1a:22:b3:bc:d7:c0:59:2f:da:1a:18:42:00:
e0:c4:53:7c:2f:bc:c5:c9:7c:56:61:8d:a1:ad:46:
94:78:9f:f3:4a:da:d1:50:59:41:34:1c:72:48:09:
7c:37:2e:a2:b1:5b:d6:a7:34:0e:0f:f2:bb:d4:5d:
cb:72:0e:7f:80:bb:1e:dc:49:bd:e5:d2:68:51:98:
96:a9:ed:1f:b6:e2:e1:f4:44:08:8e:b9:d0:74:97:
9c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:93:87:38:3E:7D:C4:75:F4:53:75:44:9C:79:FC:68:8D:E3:4C:26
X509v3 Authority Key Identifier:
keyid:35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/jZOHOD59xHX0U3VEnHn8aI3jTCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e540::/29
Signature Algorithm: sha256WithRSAEncryption
1d:44:53:9b:d2:c7:e6:7e:5a:f3:81:d4:ee:e4:4b:3b:9d:96:
85:88:d8:51:c7:97:ac:ea:83:9a:c0:c6:3a:f3:d8:2e:d3:8e:
26:92:eb:2b:19:77:c2:a6:84:8d:ab:ab:a2:ee:9f:5d:28:65:
cc:6a:db:1a:61:d6:0c:7f:52:10:cd:52:dd:a2:0a:38:e3:d4:
85:07:90:25:25:fd:b1:7a:80:58:10:58:e7:a3:6d:69:dd:02:
29:bd:2b:fc:68:28:48:0d:d0:ac:3d:11:91:47:1a:5d:cf:3b:
1a:8d:5d:d8:3c:43:49:e6:40:5f:9d:20:42:c4:d4:e4:7a:23:
6e:0a:40:40:0b:95:22:73:01:7d:9a:e2:34:6f:8c:9a:02:3e:
ba:40:b7:4a:be:e0:e0:4b:f5:f8:32:7c:a1:93:6f:ee:d3:2e:
52:8a:77:03:fa:25:27:4f:6f:91:0b:e3:13:e0:d7:7c:09:46:
e1:31:af:2c:6d:d4:67:95:43:89:d7:05:06:1c:ce:b4:b6:e0:
19:ae:95:c6:a8:bb:0f:d2:2e:81:f7:14:f2:1a:a7:b5:63:c9:
d0:52:ae:b3:5b:61:43:a8:86:73:d3:db:0d:e2:2e:61:e7:c0:
eb:de:ca:91:50:8e:a8:1a:f1:55:ad:ec:d4:aa:38:39:a8:85:
a2:1c:69:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:12:53 2024 by rpki-client on console-ams.rpki-client.org