Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/5F3-WAxzFpT2v7WW3nnigqCiewc.roa
File: 5F3-WAxzFpT2v7WW3nnigqCiewc.roa (raw, json)
Hash identifier: 2A8Xja0XdjaOdFJb1adzlNHu2PPOC9fUaW1Z2r872eM=
Subject key identifier: E4:5D:FE:58:0C:73:16:94:F6:BF:B5:96:DE:79:E2:82:A0:A2:7B:07
Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Certificate serial: 018CC794E2F1E0C161DEA074EED94A372C95
Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/5F3-WAxzFpT2v7WW3nnigqCiewc.roa
Signing time: Tue 02 Jan 2024 00:31:12 +0000
ROA not before: Tue 02 Jan 2024 00:31:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203125
IP address blocks: 2a05:4741:9::/48 maxlen: 48
2a05:4741:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:e2:f1:e0:c1:61:de:a0:74:ee:d9:4a:37:2c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Validity
Not Before: Jan 2 00:31:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e45dfe580c731694f6bfb596de79e282a0a27b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:13:c3:3b:8b:0a:e1:cb:ad:4d:83:d0:79:cd:
16:93:1e:14:28:b0:72:7e:1a:44:3e:e0:e8:ec:69:
ca:4e:e1:df:ac:08:97:6e:54:ce:5e:85:67:6c:7c:
d9:16:90:57:ad:17:7f:52:cc:4f:fe:fd:d6:16:4a:
54:1c:30:98:a2:d0:16:e4:51:a7:36:4b:5b:44:b0:
6f:cb:7b:c5:a3:60:b4:92:28:11:92:d6:42:69:b4:
a5:b9:a2:ce:8b:d4:fe:5e:01:25:b0:d0:67:89:8f:
3e:7d:10:1b:13:23:ae:76:72:9f:af:08:4b:20:47:
09:c1:f7:23:70:59:b2:48:63:06:39:8f:fa:54:c8:
fb:f8:4d:20:68:d4:5a:8d:9f:fe:be:25:d8:5a:8f:
f2:5a:31:1e:1f:6f:82:bb:71:23:19:1a:99:f1:23:
90:9b:39:78:58:2c:5a:59:09:96:9b:a7:b1:e5:d6:
c9:bb:3b:70:de:26:cd:b9:f4:af:28:86:29:a2:f9:
a5:54:0c:78:13:7f:a4:9f:5a:c5:ff:f6:a4:ac:84:
5c:3b:68:64:97:e8:14:d3:03:22:95:f8:2e:a5:60:
af:7b:2c:e8:e7:63:b0:07:a7:67:7f:e0:13:92:14:
6d:64:6e:f0:d1:b3:9c:21:3b:55:72:bf:26:61:8b:
6d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5D:FE:58:0C:73:16:94:F6:BF:B5:96:DE:79:E2:82:A0:A2:7B:07
X509v3 Authority Key Identifier:
keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/5F3-WAxzFpT2v7WW3nnigqCiewc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4741:1::/48
2a05:4741:9::/48
Signature Algorithm: sha256WithRSAEncryption
c7:88:de:14:ba:58:87:53:1f:b7:24:c8:9b:b8:d1:6e:cf:bc:
37:47:97:60:46:23:48:b7:c2:fc:f8:1e:17:fc:93:06:0d:04:
fc:76:7d:8e:1e:72:a2:f5:ba:e9:c8:90:3b:52:ed:95:1c:5f:
40:b5:a4:8e:60:fb:b7:00:7f:9e:fc:e3:1f:a5:71:d4:46:73:
9f:37:6a:27:ce:0b:fa:c1:be:f1:3c:31:40:83:eb:1a:6a:02:
7c:53:e2:97:bd:d9:5e:a2:97:d9:a4:82:95:ea:7a:be:6d:84:
35:7e:34:52:19:c0:11:c3:86:00:2d:7f:61:06:90:16:fb:85:
15:24:18:98:eb:f1:2b:20:2f:f5:25:7c:73:14:c8:19:58:25:
e3:72:b6:fc:0a:47:bd:de:78:98:e3:6b:1f:14:ed:2b:4d:3f:
ab:7e:64:89:36:00:40:b7:9e:fb:a6:c5:ba:de:5b:ec:7b:e5:
5c:de:7a:f1:fd:fe:96:3e:bb:62:fb:9a:32:41:37:a5:41:3d:
cd:08:c5:93:76:d4:e4:73:c4:b0:d8:ff:1e:21:59:91:bf:04:
0c:b5:bc:76:d1:72:2f:79:6a:b8:f6:38:13:1f:30:74:7a:06:
51:5e:fd:d4:f2:25:10:24:cc:de:ca:65:f9:04:b8:16:0a:d6:
d2:1d:ab:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 22:15:26 2024 by rpki-client on console-fra.rpki-client.org