Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/08e183-64eb-4999-9f78-7ce7322671eb/1/2T5z0slNHIVt0ux1qFHfMl8fhF0.roa
File: 2T5z0slNHIVt0ux1qFHfMl8fhF0.roa (raw, json)
Hash identifier: TZEhj7tnKm/dq5b9eFF3+ddaM29FE6pYFfIp8Eh3wAo=
Subject key identifier: D9:3E:73:D2:C9:4D:1C:85:6D:D2:EC:75:A8:51:DF:32:5F:1F:84:5D
Certificate issuer: /CN=2f367c7949fa0f6cf05a21027e75b84612dc13b0
Certificate serial: 01918D9D4F0F115078D8B01377F2A57E2CB6
Authority key identifier: 2F:36:7C:79:49:FA:0F:6C:F0:5A:21:02:7E:75:B8:46:12:DC:13:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzZ8eUn6D2zwWiECfnW4RhLcE7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/08e183-64eb-4999-9f78-7ce7322671eb/1/2T5z0slNHIVt0ux1qFHfMl8fhF0.roa
Signing time: Mon 26 Aug 2024 07:36:22 +0000
ROA not before: Mon 26 Aug 2024 07:36:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201565
IP address blocks: 2a03:820:4000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/08e183-64eb-4999-9f78-7ce7322671eb/1/LzZ8eUn6D2zwWiECfnW4RhLcE7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/08e183-64eb-4999-9f78-7ce7322671eb/1/LzZ8eUn6D2zwWiECfnW4RhLcE7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/LzZ8eUn6D2zwWiECfnW4RhLcE7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8d:9d:4f:0f:11:50:78:d8:b0:13:77:f2:a5:7e:2c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f367c7949fa0f6cf05a21027e75b84612dc13b0
Validity
Not Before: Aug 26 07:36:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d93e73d2c94d1c856dd2ec75a851df325f1f845d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2f:97:02:bf:0a:af:00:77:d9:8a:da:37:81:
83:e3:0a:96:b8:83:90:e1:58:59:9c:3e:90:f8:72:
bc:f1:f8:87:94:50:2c:fa:62:34:2a:57:db:be:38:
d6:74:a2:28:71:be:00:7d:7a:02:0f:9b:e0:0c:e5:
8c:16:48:60:a8:b5:e9:08:2e:41:22:89:53:a4:bc:
2a:5c:ce:a0:2b:47:a5:0f:ae:05:c5:9c:40:5c:52:
b0:81:b7:d9:b4:a8:3e:5a:57:71:75:15:10:04:4b:
df:ff:ef:69:69:81:ee:8d:0f:ca:ef:0f:32:19:14:
07:f8:21:81:a6:8c:b9:0a:9d:f7:eb:8f:b0:7b:1d:
6e:29:33:57:cb:5f:1f:38:59:35:b3:18:de:4f:cc:
83:67:8c:40:1c:d9:27:67:fb:25:e0:ae:e4:fc:a8:
a7:96:79:72:95:2d:82:34:ae:cd:8e:5e:cb:6b:05:
46:31:4f:59:d0:12:ca:eb:ca:62:67:31:c0:de:19:
75:e1:45:3a:16:81:fe:b3:89:73:8d:0a:c8:19:5e:
76:7c:df:8f:2d:4e:a6:b9:7e:af:ff:e3:25:43:dc:
03:9e:b6:9f:bd:07:59:b3:b1:f2:f1:53:f7:df:93:
3d:c3:60:59:31:61:be:1e:4d:97:b9:97:c8:38:c3:
fe:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3E:73:D2:C9:4D:1C:85:6D:D2:EC:75:A8:51:DF:32:5F:1F:84:5D
X509v3 Authority Key Identifier:
keyid:2F:36:7C:79:49:FA:0F:6C:F0:5A:21:02:7E:75:B8:46:12:DC:13:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzZ8eUn6D2zwWiECfnW4RhLcE7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/08e183-64eb-4999-9f78-7ce7322671eb/1/2T5z0slNHIVt0ux1qFHfMl8fhF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/08e183-64eb-4999-9f78-7ce7322671eb/1/LzZ8eUn6D2zwWiECfnW4RhLcE7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:820:4000::/36
Signature Algorithm: sha256WithRSAEncryption
60:b6:57:a6:5f:c2:c9:ac:17:04:5a:7c:78:1e:a4:69:ae:fe:
09:fc:87:71:57:4e:4f:b6:26:cc:71:0e:ad:f3:9b:7f:71:85:
3f:de:97:88:47:d7:1a:f7:ab:04:a3:f5:64:04:8e:cb:81:54:
62:ad:d8:dd:d7:9d:58:3f:8c:30:1e:9d:ec:1f:24:ab:23:e3:
b9:8b:de:be:79:3f:d6:7a:cb:92:59:06:54:a0:db:c9:d2:44:
08:1a:b1:d9:c4:2d:09:e5:0e:04:b6:56:fa:7a:9f:53:b3:f3:
b8:d4:a4:11:0b:08:fe:a6:25:89:56:d8:b2:94:12:ed:45:c8:
a9:53:ef:46:a7:11:19:9f:ad:e8:d3:ab:df:d4:c3:9b:b6:d4:
27:d7:24:94:68:5e:0c:5b:e7:99:69:f5:5e:f1:b3:5b:33:51:
28:6a:49:71:a0:2a:80:e3:16:c5:bd:36:3b:3d:c2:5c:1c:57:
58:ec:d8:79:42:49:a1:34:47:42:3f:52:1c:40:89:d9:f8:e8:
29:98:10:c6:8d:49:f6:eb:28:96:3e:59:b0:69:14:c0:4d:4e:
6a:2f:ac:d6:30:14:f8:a3:9e:ab:32:1a:14:b9:fb:38:b8:d0:
c4:ac:23:a2:b9:c2:91:28:b4:17:dc:75:8b:88:01:cc:19:28:
30:df:43:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:53:44 2024 by rpki-client on console-fra.rpki-client.org