Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/CHxUr5bzDPnludnyZXt9LDKix84.roa
File: CHxUr5bzDPnludnyZXt9LDKix84.roa (raw, json)
Hash identifier: R7zXfoAIdU0bB+/s7HefYCw1+s5OAmxGD3nObS5LaIo=
Subject key identifier: 08:7C:54:AF:96:F3:0C:F9:E5:B9:D9:F2:65:7B:7D:2C:32:A2:C7:CE
Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Certificate serial: 018CC79588E30890780DAAECC116FBE3FA1D
Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/CHxUr5bzDPnludnyZXt9LDKix84.roa
Signing time: Tue 02 Jan 2024 00:31:54 +0000
ROA not before: Tue 02 Jan 2024 00:31:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3180
IP address blocks: 2a04:ac00:b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:88:e3:08:90:78:0d:aa:ec:c1:16:fb:e3:fa:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Validity
Not Before: Jan 2 00:31:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=087c54af96f30cf9e5b9d9f2657b7d2c32a2c7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d9:00:e0:3e:14:71:9b:71:3d:05:fb:3e:45:
5e:dd:f3:2c:af:c4:42:28:9b:80:8e:ac:cc:28:eb:
4d:57:5f:8c:d2:f3:30:c9:92:fe:be:5a:55:bf:e1:
38:16:db:ff:71:d9:d9:df:61:80:d7:5c:15:32:2e:
03:d8:e3:90:46:6a:9f:0d:5c:65:4b:bf:4a:7e:9c:
1d:36:3e:a7:c2:05:1c:b4:06:82:97:0d:5a:70:d5:
8e:e1:ea:5c:b2:3d:dc:62:8c:ee:ce:cb:6e:90:9f:
65:66:eb:4d:f0:1d:29:f1:7e:4f:7d:7f:48:dc:8b:
65:5a:f1:55:46:26:37:3d:20:b1:07:5c:43:60:0b:
9a:b7:fc:85:24:59:b9:02:b1:8c:a9:1d:98:c3:5a:
7c:9e:d3:93:29:a3:5b:98:3e:a0:b1:4d:05:9a:bf:
8d:27:11:d9:59:5f:6a:c8:a1:f0:5f:ac:23:05:a5:
01:bc:3e:40:66:b3:d6:cf:3f:94:ab:7a:55:49:12:
d8:30:0e:c1:0e:d2:ac:90:cb:25:31:f3:30:a0:57:
14:6d:1d:17:4c:d6:13:b3:4a:c2:af:4c:79:a7:a1:
76:28:d7:3d:28:23:be:26:47:51:7a:70:b3:7e:3d:
d2:6f:fe:ca:38:b2:ec:68:6d:67:df:a1:2b:d7:5b:
1f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:7C:54:AF:96:F3:0C:F9:E5:B9:D9:F2:65:7B:7D:2C:32:A2:C7:CE
X509v3 Authority Key Identifier:
keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/CHxUr5bzDPnludnyZXt9LDKix84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:ac00:b::/48
Signature Algorithm: sha256WithRSAEncryption
5c:af:cd:e9:7a:4e:48:33:52:f9:17:0c:e0:d0:58:bb:d8:9b:
bb:04:08:bb:d7:64:4a:e2:cf:96:b6:2b:88:31:7f:67:25:64:
f9:ba:63:eb:2e:d9:bb:76:7c:fa:e2:8b:47:eb:15:d9:77:42:
b5:59:9e:5e:39:31:ae:06:83:a4:b8:f3:ce:7c:d0:d3:73:c4:
91:a7:f7:8a:19:a7:87:f7:eb:23:aa:00:db:b8:07:36:11:64:
ca:84:d1:ca:69:1c:ff:54:44:07:d2:37:c7:b0:8b:3b:51:22:
6c:e3:f7:68:48:dc:72:24:6b:64:3e:bd:3e:76:96:59:69:f7:
cc:0a:7a:c8:95:59:ef:a1:5f:46:32:06:3e:75:64:e8:71:13:
fb:5a:0b:55:b3:98:2c:94:c8:23:67:1b:bb:9d:ac:ea:5f:3e:
ae:cd:8a:39:98:7d:3c:91:9f:e8:31:6c:e4:33:5d:d5:3a:cf:
32:be:31:63:8b:72:e1:25:d1:4a:48:01:9a:ef:87:f7:c7:dc:
5c:44:f8:3b:9e:b2:2f:d4:da:4d:d2:7b:55:f1:0f:3d:44:48:
f0:5d:6f:c3:9c:05:70:75:f0:58:ef:4d:0f:1c:5c:1d:e1:c5:
b5:2f:1a:45:fa:dc:3f:0d:ac:f1:53:46:13:c3:c1:c1:65:a8:
22:01:ea:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:58:27 2024 by rpki-client on console-ams.rpki-client.org