Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/frQcSZ32dZxDcjC-KFPylxpBK1k.roa
File: frQcSZ32dZxDcjC-KFPylxpBK1k.roa (raw, json)
Hash identifier: yOoijA1GiyN+kelT+51Q7K3aHX+weEMz7Jbr8yd5Tn4=
Subject key identifier: 7E:B4:1C:49:9D:F6:75:9C:43:72:30:BE:28:53:F2:97:1A:41:2B:59
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 018CC3B6B61C24D3025FEB3D47CADB090F23
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/frQcSZ32dZxDcjC-KFPylxpBK1k.roa
Signing time: Mon 01 Jan 2024 06:29:40 +0000
ROA not before: Mon 01 Jan 2024 06:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213065
IP address blocks: 2a07:3502:1122::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:b6:1c:24:d3:02:5f:eb:3d:47:ca:db:09:0f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Jan 1 06:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7eb41c499df6759c437230be2853f2971a412b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d4:65:0d:1e:65:7f:57:45:9b:f1:52:c4:46:
6e:f4:77:99:af:91:93:cf:bf:16:e9:ca:d5:09:a9:
58:c8:7d:c9:86:7c:f1:aa:8d:ba:cc:4a:26:c0:38:
14:59:55:e9:89:9b:72:9e:f7:df:9c:11:16:22:e2:
08:c8:cf:be:92:08:ac:0e:1b:7e:09:42:bf:08:43:
8f:a6:53:72:32:87:d7:aa:e7:7b:70:9f:9a:cf:63:
92:62:3c:9a:3e:6f:19:53:5b:29:3f:4c:00:53:31:
2c:c2:0d:43:2a:9c:df:e3:ff:ca:5c:23:47:71:a2:
40:21:fb:49:6c:6e:c2:d7:ce:2d:f7:7d:4f:8f:e3:
64:bc:4c:7a:ae:a1:ce:07:20:35:18:f8:5c:97:a3:
b3:07:b7:65:18:79:d2:9b:d8:15:e1:de:52:2e:b2:
41:4c:d3:42:36:16:d8:b2:5c:f4:10:56:a1:1a:15:
41:2c:6f:8e:f6:5b:a5:56:ca:10:1d:1c:c5:58:b1:
0f:3c:c3:c3:6b:62:dc:83:cf:dc:16:73:4f:31:25:
d4:40:33:b2:28:d2:1d:19:63:6e:14:b0:9f:d5:a8:
68:19:f1:8b:71:12:f6:30:13:50:c7:c7:24:1d:01:
fa:7d:0c:6a:c5:1b:16:51:29:36:8d:ff:78:36:b5:
e0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B4:1C:49:9D:F6:75:9C:43:72:30:BE:28:53:F2:97:1A:41:2B:59
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/frQcSZ32dZxDcjC-KFPylxpBK1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:3502:1122::/47
Signature Algorithm: sha256WithRSAEncryption
39:5d:e3:fb:b6:01:0f:38:4f:ea:02:86:b5:99:48:83:4b:fe:
fc:85:11:8a:2e:db:3f:91:38:72:26:af:91:82:f1:ed:8c:0e:
54:e3:b2:cf:ad:77:ed:65:09:6e:d3:a6:19:27:a9:fa:9b:d8:
df:8a:9e:a6:cb:7f:61:ca:be:1b:02:82:21:80:4c:02:85:5b:
ef:4f:e2:7d:47:1a:5e:cf:92:a6:6d:aa:cc:4e:e6:77:4f:c8:
53:09:7e:3c:b7:2a:09:cd:ef:e9:e8:4e:a2:12:88:1b:17:26:
ca:d2:be:ab:a8:b0:73:6f:5d:2e:f6:d0:56:6c:01:1c:7e:4b:
67:d6:c0:8e:75:4e:7d:14:d5:f4:b7:d0:71:3a:b9:d1:e7:64:
b9:c0:2b:6b:ef:b8:40:42:b1:67:60:88:fb:9a:14:93:8d:97:
9c:d1:ae:8b:a1:a2:68:6d:84:42:75:a1:a4:fd:53:86:53:2b:
b3:c0:b8:8f:0b:08:d3:64:11:87:32:9b:52:8f:7c:e2:6b:57:
1d:c4:d2:c0:46:89:78:f8:d8:9d:3a:83:14:a0:be:1b:e0:0c:
ea:0c:15:a2:d0:2b:f0:c5:54:32:de:ef:8f:9d:8f:4c:0a:93:
83:5e:b9:35:71:f8:82:d1:20:41:0b:8b:d5:b5:86:77:84:ff:
1b:94:cf:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:41:44 2024 by rpki-client on console-fra.rpki-client.org