Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/esNlxV4DcrvqHtTcC5n1AzPi-jY.roa
File: esNlxV4DcrvqHtTcC5n1AzPi-jY.roa (raw, json)
Hash identifier: tvCbqkzw29r+8A2Lfpnz1HDK14iwiCa+3fQRVnuIKdM=
Subject key identifier: 7A:C3:65:C5:5E:03:72:BB:EA:1E:D4:DC:0B:99:F5:03:33:E2:FA:36
Certificate issuer: /CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Certificate serial: 018D157A51D562A0B208FD7D5CF7C9C59CAB
Authority key identifier: C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/esNlxV4DcrvqHtTcC5n1AzPi-jY.roa
Signing time: Wed 17 Jan 2024 03:32:34 +0000
ROA not before: Wed 17 Jan 2024 03:32:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216321
IP address blocks: 2a13:d8c0::/32 maxlen: 32
2a13:d8c1::/32 maxlen: 32
2a13:d8c1:ce00::/40 maxlen: 40
2a13:d8c1:fe00::/40 maxlen: 40
2a13:d8c2::/32 maxlen: 32
2a13:d8c3::/32 maxlen: 32
2a13:d8c4::/32 maxlen: 32
2a13:d8c5::/32 maxlen: 32
2a13:d8c6::/32 maxlen: 32
2a13:d8c7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:15:7a:51:d5:62:a0:b2:08:fd:7d:5c:f7:c9:c5:9c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Validity
Not Before: Jan 17 03:32:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ac365c55e0372bbea1ed4dc0b99f50333e2fa36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c5:ed:09:24:4c:2a:be:fd:fc:23:9b:91:38:
1d:1a:a1:3a:69:86:b8:27:01:4e:ca:c5:98:82:09:
68:31:98:c6:6e:03:2e:8d:03:97:c9:89:21:0a:28:
5d:08:66:6d:3e:90:f5:85:3a:c1:9e:96:c9:4d:f2:
1f:eb:82:22:3e:5a:75:92:44:d7:2f:57:1b:78:d9:
be:13:1b:f8:70:b6:78:fa:cb:ed:f4:cc:ca:3a:0f:
44:eb:72:1a:41:13:9b:68:5d:87:da:be:30:15:79:
e9:c2:a5:49:dd:b1:2f:96:05:8b:6b:17:be:78:36:
9a:fc:e5:bb:85:a5:a3:e7:ae:bf:f9:f1:b1:22:0d:
7b:70:ca:1f:fd:d9:2c:d5:29:56:1a:c7:a6:c3:20:
03:98:ea:22:0b:01:c3:1e:12:34:98:ef:e7:93:36:
9d:a9:b2:59:a9:02:f1:eb:36:0f:08:db:3f:f0:be:
40:9d:29:6f:07:93:ac:b7:4a:14:05:1d:87:9f:cb:
79:b3:2c:46:ab:a2:df:5b:83:b0:e5:da:52:e1:65:
10:d8:52:85:1b:c8:a0:96:2e:3d:5c:d9:f9:15:fc:
52:ae:99:94:ca:3a:0a:52:c5:41:fb:a9:8e:5d:7b:
fd:64:a8:ed:20:86:42:76:83:39:50:dc:a3:84:9c:
fb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C3:65:C5:5E:03:72:BB:EA:1E:D4:DC:0B:99:F5:03:33:E2:FA:36
X509v3 Authority Key Identifier:
keyid:C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/esNlxV4DcrvqHtTcC5n1AzPi-jY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:d8c0::/29
Signature Algorithm: sha256WithRSAEncryption
78:82:3e:73:68:78:a4:f5:f9:4d:e1:86:05:38:cb:95:7c:05:
36:60:c8:06:71:17:09:46:1c:ec:9c:29:16:20:f3:a2:0e:6c:
0b:90:cd:ba:62:5c:1f:dd:ba:56:bf:68:e7:7c:48:dd:b9:ed:
87:d0:40:96:20:84:1b:35:c2:ee:e2:97:db:a1:c9:a4:a9:2f:
6c:1b:bf:1f:b4:5d:a3:a3:5e:01:68:ab:83:a9:7e:18:23:6c:
10:c1:d2:f0:39:ce:ca:66:95:20:7a:7e:15:98:ad:d4:96:7a:
0c:a0:a5:fb:39:5b:6e:8a:9e:6a:83:28:fb:7f:67:43:89:85:
7e:bb:f3:6f:ec:45:fa:1f:21:37:cc:44:3c:4b:49:03:7c:41:
2f:60:19:88:54:01:a7:ce:32:78:02:c9:88:9d:7a:1e:38:63:
95:6b:22:23:99:91:58:3b:78:2e:b4:8a:3d:25:0d:cf:72:6e:
4e:d5:d1:b9:76:99:b3:94:20:3d:4f:f3:8e:d4:d9:d7:b3:e7:
db:99:ec:8b:70:ce:e3:ca:d0:49:3e:51:f9:7e:26:67:ae:08:
64:f3:f2:07:b7:f8:63:cf:83:e1:7f:2c:13:3a:b8:8a:e8:76:
0a:a2:df:a2:ce:e0:ce:60:b9:98:5b:2d:9d:2f:54:44:a2:62:
64:16:d4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 11:10:19 2024 by rpki-client on console-fra.rpki-client.org