Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/3paVuMyPWE53sDy5b5Gdk6YcWoY.roa
File: 3paVuMyPWE53sDy5b5Gdk6YcWoY.roa (raw, json)
Hash identifier: jit8cJtV0cwAHZqzMQcxev+bSOkQBiR6qgmY87bH89o=
Subject key identifier: DE:96:95:B8:CC:8F:58:4E:77:B0:3C:B9:6F:91:9D:93:A6:1C:5A:86
Certificate issuer: /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Certificate serial: 018FCB47718630BE23FA1D97A945AE7F63EE
Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/3paVuMyPWE53sDy5b5Gdk6YcWoY.roa
Signing time: Thu 30 May 2024 20:53:27 +0000
ROA not before: Thu 30 May 2024 20:53:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6206
IP address blocks: 2a0e:1c80:4::/48 maxlen: 48
2a0e:1c80:c::/48 maxlen: 48
2a0e:1c80:d::/48 maxlen: 48
2a0e:1c80:1b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:cb:47:71:86:30:be:23:fa:1d:97:a9:45:ae:7f:63:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Validity
Not Before: May 30 20:53:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de9695b8cc8f584e77b03cb96f919d93a61c5a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a2:2f:c3:f6:45:08:54:a8:21:21:94:89:84:
73:97:3e:db:3b:6d:1f:62:3f:47:ab:12:67:dc:77:
0f:6b:5c:26:f0:3e:f0:7d:0e:78:e6:4d:9a:3a:44:
db:1b:63:0e:7f:ac:5c:a3:e4:b4:6e:f0:a1:7c:be:
09:b0:0e:34:90:05:18:f7:7b:c4:7f:a0:e2:a5:d8:
90:87:4d:30:8e:1a:b4:d7:79:97:10:b5:3d:8c:8f:
2c:d6:92:a5:90:db:dc:92:df:9f:fb:8b:34:b8:15:
cf:2b:07:4c:91:68:75:6b:34:ed:86:09:22:01:a5:
08:d6:08:73:af:11:d9:86:41:90:9a:65:31:b8:0d:
c2:17:11:6a:7c:97:31:20:a6:11:91:83:df:2b:5f:
d8:4e:2b:2e:2a:0c:cb:9b:6b:28:46:df:63:0b:47:
90:90:5d:eb:53:b0:dd:fd:6d:ea:64:73:ba:4f:04:
91:46:42:b4:57:98:eb:0c:cb:8c:dc:d0:ab:52:e5:
31:07:94:d7:32:98:90:0f:42:bc:a7:7a:75:05:39:
4a:f8:1c:7b:07:8e:7d:15:ac:1a:59:c4:b6:be:cd:
07:58:fa:23:03:dd:86:6e:e9:e7:9a:d6:9d:a7:95:
da:52:4c:a6:fe:91:16:14:7d:07:6a:88:bd:8a:b8:
fc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:96:95:B8:CC:8F:58:4E:77:B0:3C:B9:6F:91:9D:93:A6:1C:5A:86
X509v3 Authority Key Identifier:
keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/3paVuMyPWE53sDy5b5Gdk6YcWoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:1c80:4::/48
2a0e:1c80:c::/47
2a0e:1c80:1b::/48
Signature Algorithm: sha256WithRSAEncryption
31:f5:bb:f9:9e:35:39:86:75:de:c8:eb:c0:dd:0b:e7:a3:46:
c4:58:cc:30:59:e7:f4:6e:60:d3:88:11:f4:70:5a:42:1d:c8:
e4:fd:a0:36:9c:40:7f:61:60:53:9f:fd:ef:f6:ea:0c:84:62:
15:a4:17:6d:de:f9:86:07:29:3e:b2:83:04:09:cd:1d:71:34:
5b:fc:48:5e:09:bb:0e:2c:33:d9:0b:6c:68:9a:e1:4e:18:77:
cb:1a:2d:ac:d7:54:f9:82:29:9a:42:6f:e6:50:b0:fb:ad:b2:
c8:56:58:35:46:26:f9:1f:a3:2a:6e:09:40:65:a3:1a:06:79:
f4:ea:a7:3e:13:88:a1:93:61:d3:73:c9:e3:33:2b:12:e3:50:
cf:38:ce:a0:64:a5:1e:09:1a:d8:37:00:a2:d7:c1:a2:f4:71:
13:6c:5e:27:fa:94:63:cc:2e:ae:55:4b:e6:06:53:85:c9:e9:
b5:f0:ea:fa:ff:8a:4c:df:f2:c7:47:70:9b:58:bc:42:aa:81:
6c:95:b4:44:32:4e:db:53:43:ed:64:23:d1:e2:b6:e9:dd:61:
2b:36:7f:6b:9e:d9:64:ce:89:a9:f1:f4:36:d3:cb:14:0c:53:
be:52:c8:ef:1c:c4:28:c5:4e:ae:2d:45:2d:cb:a8:6e:eb:08:
13:47:d4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:06:17 2024 by rpki-client on console-ams.rpki-client.org