Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/CAVbu_qs_gXysy4ELaerI6ITc2Q.roa
File: CAVbu_qs_gXysy4ELaerI6ITc2Q.roa (raw, json)
Hash identifier: UP6ypBqheM6gZH+y2KtIxR2vYbfAclkZ7izd8VLpHi8=
Subject key identifier: 08:05:5B:BB:FA:AC:FE:05:F2:B3:2E:04:2D:A7:AB:23:A2:13:73:64
Certificate issuer: /CN=3026806a6b8dac68c2a32b65849229524fc33da7
Certificate serial: 018E3C3980FAC907455921E78D0DAB84E436
Authority key identifier: 30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/CAVbu_qs_gXysy4ELaerI6ITc2Q.roa
Signing time: Thu 14 Mar 2024 09:09:45 +0000
ROA not before: Thu 14 Mar 2024 09:09:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62359
IP address blocks: 2a12:79c4::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.mft
rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3c:39:80:fa:c9:07:45:59:21:e7:8d:0d:ab:84:e4:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3026806a6b8dac68c2a32b65849229524fc33da7
Validity
Not Before: Mar 14 09:09:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08055bbbfaacfe05f2b32e042da7ab23a2137364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:27:cb:c1:2b:c8:34:53:24:5b:0c:fd:fc:b2:
7e:ae:5e:76:dc:bb:a1:00:52:b7:b9:a6:18:49:03:
92:05:6a:28:e3:14:72:59:06:a7:19:f3:a7:62:4c:
5d:19:01:87:cc:9e:55:a1:91:86:6c:36:08:b9:a0:
1b:cf:d6:69:a9:32:fc:67:ab:57:ca:de:57:4b:3c:
27:20:7c:30:57:3b:f6:dc:48:0a:26:ef:33:f3:f6:
cb:e1:38:b3:f7:79:30:61:37:0c:8d:4c:3b:91:96:
e5:28:40:63:f2:1e:13:68:eb:35:35:b4:78:42:08:
a2:82:06:04:50:0c:dd:50:ea:b0:dd:6f:62:0f:2d:
23:54:c4:ef:c4:0d:2b:b5:47:b1:4b:62:f7:39:a8:
a7:2b:a4:79:92:75:48:be:a7:2a:12:a6:cc:25:04:
be:fd:6c:2d:4d:4b:33:0f:62:07:6b:09:c2:60:0b:
00:82:60:c5:d3:30:9e:e0:d6:17:ad:1d:71:4f:99:
d7:e7:13:25:2e:5a:89:1f:ff:ea:b0:bb:91:8d:53:
aa:d1:d1:3f:8d:71:f2:23:36:f7:89:4d:ad:9f:5a:
f9:06:a9:49:dc:45:21:a3:56:97:a2:d9:43:2f:a8:
69:a8:5a:85:00:19:ae:cf:20:30:a7:d7:79:3c:30:
fa:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:05:5B:BB:FA:AC:FE:05:F2:B3:2E:04:2D:A7:AB:23:A2:13:73:64
X509v3 Authority Key Identifier:
keyid:30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/CAVbu_qs_gXysy4ELaerI6ITc2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:79c4::/32
Signature Algorithm: sha256WithRSAEncryption
4a:c4:4c:9d:2f:49:db:24:71:15:da:1c:40:bc:ae:e0:60:6a:
80:78:85:8c:a9:ca:ee:68:9a:00:18:d4:20:c7:34:2b:9a:b7:
72:c6:78:eb:7a:5d:a3:fd:cb:2f:41:45:19:2c:72:ac:60:91:
67:3b:2b:eb:3c:43:22:ff:17:95:61:95:ba:b9:6b:d3:9b:a4:
1d:3e:7b:d9:56:13:f8:b1:16:e1:44:f7:ad:9b:de:02:3b:5f:
9e:fd:9a:c3:d4:5d:e2:cc:b6:cf:06:de:d2:75:0a:0a:d2:45:
8c:da:2b:51:ac:72:57:dc:1a:1e:93:62:c2:d7:03:a7:cc:91:
11:2c:61:87:f9:59:10:5e:6a:d9:25:6b:53:b4:cf:64:7d:80:
e1:a9:78:a8:5c:19:66:ff:14:be:7a:7f:44:ce:a5:6f:0e:50:
e4:18:cf:99:14:1a:96:85:60:1a:0e:cb:df:b7:cd:d4:3e:85:
0f:1c:88:ab:42:4f:5f:af:aa:9d:f7:c5:09:09:6a:52:3a:f5:
0a:cb:b2:31:9e:12:c5:b6:ab:da:e7:d4:2b:8a:81:f0:98:aa:
3b:f4:e8:df:97:0d:2f:0a:b2:4d:ba:9c:3f:ea:2b:a6:20:07:
8d:f4:85:fa:a4:fd:cc:68:85:f2:7d:b4:34:a2:bf:a5:f3:62:
dc:56:5e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:36:24 2024 by rpki-client on console-fra.rpki-client.org