Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/MSN2byCvEk1gJiD9IO7TJlMJiTQ.roa
File: MSN2byCvEk1gJiD9IO7TJlMJiTQ.roa (raw, json)
Hash identifier: xd2I/eTuZZSqMt5E6+0c5FYEF65aI0PBcz8PNBdaL04=
Subject key identifier: 31:23:76:6F:20:AF:12:4D:60:26:20:FD:20:EE:D3:26:53:09:89:34
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 018CC4246700D522098B86FA35F81B0D975E
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/MSN2byCvEk1gJiD9IO7TJlMJiTQ.roa
Signing time: Mon 01 Jan 2024 08:29:29 +0000
ROA not before: Mon 01 Jan 2024 08:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216038
IP address blocks: 2a0f:7803:feb0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:67:00:d5:22:09:8b:86:fa:35:f8:1b:0d:97:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Jan 1 08:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3123766f20af124d602620fd20eed32653098934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:54:36:30:54:a4:50:fe:2d:a0:ea:1a:7c:55:
ea:6e:a3:f0:1c:e6:ca:db:0a:fe:c0:43:19:75:43:
0e:db:e5:a1:8c:c8:63:21:a9:de:96:59:75:bc:67:
17:31:0e:95:fe:c7:59:2d:29:ae:22:19:86:88:07:
a2:7f:9c:3c:14:0a:01:a2:26:5b:77:3e:fc:0f:a9:
4f:2f:7e:66:c0:4e:86:d9:d7:4f:84:22:01:e3:9a:
c1:7b:7f:07:a2:02:72:4e:92:f8:fa:74:9a:1f:78:
11:e0:3e:04:f0:7d:84:54:38:48:37:b7:75:4d:e7:
dc:02:db:92:d5:65:c8:18:49:6d:33:ba:17:52:2b:
ed:e3:cc:75:70:98:28:dc:ad:66:1a:19:1d:4a:1e:
d0:96:03:16:6e:e1:1f:c0:a8:4d:47:d1:f4:4f:45:
21:4a:e7:36:cb:49:75:56:1d:47:ef:46:09:0b:8a:
b7:c3:fd:3d:ca:f9:03:ca:32:07:c6:3a:e7:76:67:
3d:49:ae:70:72:38:37:63:38:cd:27:e0:8f:47:02:
a5:4e:89:38:bc:d5:1f:35:c1:56:b2:30:79:ed:66:
53:93:ab:5e:08:3b:2e:82:90:16:d5:0c:98:d7:72:
ca:a2:b2:89:4c:15:6e:b9:02:c5:20:a5:d6:5b:06:
14:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:23:76:6F:20:AF:12:4D:60:26:20:FD:20:EE:D3:26:53:09:89:34
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/MSN2byCvEk1gJiD9IO7TJlMJiTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:feb0::/44
Signature Algorithm: sha256WithRSAEncryption
59:6b:99:0e:30:fb:3b:88:29:43:b5:09:a6:90:5a:be:8c:69:
22:31:76:c6:be:51:8a:76:b7:fc:2c:8f:a5:9a:85:be:e3:12:
b8:d8:5c:00:32:d2:42:65:60:f8:4b:87:cb:88:36:57:23:a4:
99:18:8d:98:25:c9:a3:50:d9:0f:99:d4:27:03:47:67:44:04:
8b:31:23:b7:59:4b:59:3c:45:d2:e4:3b:bb:68:b7:41:15:a5:
59:25:16:db:75:72:74:55:d0:65:8a:67:e1:dc:78:28:9f:39:
a2:85:4a:3c:4d:c2:34:f6:d6:3d:3e:31:2c:43:a9:23:e1:ba:
c2:c0:96:d7:ee:19:3a:c1:29:44:0f:0d:aa:c4:01:a9:b8:00:
3f:01:41:7c:78:22:8c:b7:d5:f1:e3:35:dd:90:a5:7b:08:e1:
b9:4f:51:eb:5e:5d:10:d3:b9:0f:03:d8:67:45:28:32:c1:b6:
9b:e0:91:84:5c:04:69:e1:de:83:dc:c6:8a:ac:9e:99:09:69:
fb:5e:3b:c2:8c:33:a0:4b:56:1a:3e:7a:3c:25:ac:51:6c:5e:
fd:ad:11:a9:de:09:a5:7d:11:44:01:1a:fc:5b:da:44:41:f3:
37:e8:67:89:70:af:a6:18:21:5f:09:af:37:0f:f1:4c:79:d0:
59:05:a0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 06:56:11 2024 by rpki-client on console-fra.rpki-client.org