Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DS3A8f598VOd6_-2g-KDEl73Fh4.roa
File: DS3A8f598VOd6_-2g-KDEl73Fh4.roa (raw, json)
Hash identifier: eJzg7+d7/JBTEKtsOdD1OZfc+ifYUlRADs9hIT64vvA=
Subject key identifier: 0D:2D:C0:F1:FE:7D:F1:53:9D:EB:FF:B6:83:E2:83:12:5E:F7:16:1E
Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Certificate serial: 018CC5DCF583286C5A760706AFB1EA28A5F8
Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DS3A8f598VOd6_-2g-KDEl73Fh4.roa
Signing time: Mon 01 Jan 2024 16:30:41 +0000
ROA not before: Mon 01 Jan 2024 16:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57401
IP address blocks: 2a0f:607:1059::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 01:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:f5:83:28:6c:5a:76:07:06:af:b1:ea:28:a5:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Validity
Not Before: Jan 1 16:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d2dc0f1fe7df1539debffb683e283125ef7161e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a2:2d:28:24:0c:b9:b1:1a:0e:40:a6:91:a0:
4a:f0:d7:0e:54:61:7a:91:3a:c5:a0:a7:13:f2:a1:
22:d2:9f:ee:1f:af:a8:f7:46:8f:d1:f5:ad:cc:2f:
f7:34:24:6d:d6:61:56:39:ae:69:b0:9b:26:d2:92:
3b:67:4b:b5:d4:35:af:05:de:5a:ec:46:a6:de:fc:
00:65:0f:67:e2:00:a1:1a:10:12:ff:a1:09:4b:ca:
47:a3:55:20:b1:4d:2d:8a:58:9b:64:83:b7:cc:55:
a3:1f:2e:e3:0a:54:78:f4:7a:75:1c:ab:cf:ee:11:
bf:54:8c:87:71:aa:c2:f0:63:16:4b:83:98:c7:fd:
c0:8d:68:8f:0a:dc:e5:65:f3:8a:c4:22:9d:4d:e3:
19:62:8e:66:a8:bf:4f:88:77:44:92:a3:17:f9:68:
44:93:96:9b:31:bf:59:99:76:20:2a:22:d4:c8:b1:
6a:d2:34:16:c4:3d:64:df:58:b8:d6:e9:a1:23:13:
78:7f:a8:21:0a:de:2e:8e:d0:a7:fe:ec:a7:dd:ee:
fc:f4:8e:9c:7f:43:4e:b9:1d:08:27:5b:6c:c9:e2:
55:c1:6f:c2:6c:49:b7:0e:6a:ba:b1:c1:2f:94:24:
4e:80:fd:f7:7e:6e:f1:60:53:f9:73:10:50:a0:83:
cc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2D:C0:F1:FE:7D:F1:53:9D:EB:FF:B6:83:E2:83:12:5E:F7:16:1E
X509v3 Authority Key Identifier:
keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DS3A8f598VOd6_-2g-KDEl73Fh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:607:1059::/48
Signature Algorithm: sha256WithRSAEncryption
51:7b:0c:a3:a4:91:5e:8f:d8:2e:eb:d6:0a:80:60:cd:b4:77:
f0:eb:b6:e9:65:0a:48:6c:18:95:ef:8e:cf:62:e3:22:c7:97:
9b:b6:9f:97:48:ab:f2:ea:e6:4f:81:ce:c0:7e:5f:e1:24:0a:
0f:f6:af:ef:7a:f3:00:1c:bc:64:1b:9f:39:23:2b:c3:d5:8c:
f0:38:3d:20:94:28:71:5b:74:2b:13:75:81:ef:bb:0c:09:2f:
4a:c3:ca:41:d3:d8:b6:8d:a2:08:bb:c1:85:57:21:25:f5:8c:
c7:11:56:2e:fd:dc:cc:4b:67:6f:6e:8e:dc:fb:44:3d:3d:33:
98:66:3d:be:b1:fe:4a:c8:b4:6a:e2:d8:17:3e:fa:40:33:cf:
12:04:b8:a6:96:a9:01:49:67:76:ed:74:38:f5:ba:d6:1e:61:
f7:be:d0:df:94:d9:04:2f:c8:a7:c5:a4:80:3e:df:7b:72:01:
98:a8:14:d1:fd:97:63:ae:15:8d:e0:cb:4a:c5:15:1f:1b:0e:
a3:08:31:af:9c:dc:33:6f:ee:d3:fb:19:6c:54:2b:cb:a0:7c:
57:40:75:7a:56:35:73:b2:22:bb:96:fd:2b:8c:ec:d3:20:56:
73:36:43:21:5a:09:f1:b4:5d:d7:0e:25:7a:7b:f2:9e:59:79:
bc:16:75:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 07:13:02 2024 by rpki-client on console-ams.rpki-client.org