Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/ldXu6LKJDB1I-ZmpFNOUL8AQSOc.roa
File: ldXu6LKJDB1I-ZmpFNOUL8AQSOc.roa (raw, json)
Hash identifier: 7RJU1BejIWwWtBME6/P6S3dmPtZeW5nA4GmcGUhxuxA=
Subject key identifier: 95:D5:EE:E8:B2:89:0C:1D:48:F9:99:A9:14:D3:94:2F:C0:10:48:E7
Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Certificate serial: 018CC4935727C448B49F2B5BB83366C5DBC1
Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/ldXu6LKJDB1I-ZmpFNOUL8AQSOc.roa
Signing time: Mon 01 Jan 2024 10:30:39 +0000
ROA not before: Mon 01 Jan 2024 10:30:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43474
IP address blocks: 2a00:ece1:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:57:27:c4:48:b4:9f:2b:5b:b8:33:66:c5:db:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Validity
Not Before: Jan 1 10:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=95d5eee8b2890c1d48f999a914d3942fc01048e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b1:0d:2e:dd:44:89:19:b1:68:d2:ff:59:48:
ed:f1:94:e1:f6:d7:b4:5c:60:4c:ca:fe:8f:46:02:
9f:d6:f7:54:41:ac:4e:9d:12:cd:cf:7e:44:3e:be:
4d:fc:60:57:0e:a9:6a:9c:e1:b1:da:70:65:8d:0c:
92:ea:b0:08:3d:da:67:f7:d9:60:e5:8e:52:c7:ff:
31:13:44:f3:4d:b3:62:8b:77:45:44:99:9b:db:7b:
81:4b:5d:70:4a:8d:a3:92:e7:85:f8:30:5d:43:78:
9c:4f:cb:a3:8f:34:08:41:bb:35:52:0b:dd:cd:8a:
b6:9a:c1:79:f1:18:23:ec:f1:53:57:be:93:d2:a0:
eb:10:6c:b3:11:b9:7d:f8:4a:62:b4:63:a4:57:02:
06:78:68:e0:80:e8:b9:46:91:ab:00:27:dc:7f:a8:
bc:69:2b:90:b5:fd:5f:e5:9f:94:c9:df:9c:d4:f2:
ad:17:5e:06:23:32:2d:a0:01:23:ad:16:12:17:d6:
82:89:18:6e:9c:09:f1:c3:a9:c3:0c:7b:95:c1:28:
88:17:c2:e8:14:69:53:6e:77:47:bf:05:3e:a5:fb:
b2:95:1b:b4:b8:ec:19:9a:80:e0:80:ec:3e:fd:b1:
dd:80:6d:f7:c0:fb:17:34:db:ad:e8:a6:7e:3a:89:
4a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D5:EE:E8:B2:89:0C:1D:48:F9:99:A9:14:D3:94:2F:C0:10:48:E7
X509v3 Authority Key Identifier:
keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/ldXu6LKJDB1I-ZmpFNOUL8AQSOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:ece1:2::/48
Signature Algorithm: sha256WithRSAEncryption
1e:96:15:02:72:23:26:e7:a1:fc:c0:28:ed:46:13:a3:78:27:
fe:53:02:d2:22:8b:e1:29:20:90:f9:0e:5e:d7:8c:9f:7f:28:
39:41:76:b3:70:57:4e:3d:8b:93:3b:6e:06:97:8c:ef:00:cd:
6f:b5:22:74:f1:3b:59:1a:01:4d:9f:e4:0c:be:c8:73:2b:f9:
31:1f:f7:84:39:cc:e6:ef:e3:79:77:6c:a1:7e:ae:fa:ec:b6:
de:0b:43:ea:2a:e4:5f:a8:46:53:c4:2f:8f:32:a4:cc:c6:74:
7a:aa:12:a9:92:29:00:d5:88:7f:f2:b1:1e:de:cc:e7:07:3f:
27:9b:1b:5e:0c:43:b6:79:b3:01:e1:3b:34:c5:e9:82:0c:ee:
d4:4e:4e:0f:9c:63:5a:06:a7:73:ea:16:75:c2:c0:34:b3:88:
1e:6c:f0:5d:4f:ed:87:0a:a3:3e:50:ba:1c:cb:06:e3:f7:78:
de:79:2b:e7:01:89:60:19:33:86:1a:15:87:ae:20:2f:2a:cc:
2c:6e:5e:80:b6:8f:dc:c2:94:2e:4f:bf:ee:6a:03:f0:13:80:
a0:a1:87:8f:e8:79:d9:56:28:db:80:98:2a:85:b5:43:c5:2c:
ee:a0:fd:dd:d2:ba:40:2f:c1:ce:bc:15:db:f7:06:da:f5:5c:
31:19:2a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:51:20 2024 by rpki-client on console-ams.rpki-client.org