Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/lQ4QGTDKxDhFilCcpVqZ8t0M3h0.roa
File: lQ4QGTDKxDhFilCcpVqZ8t0M3h0.roa (raw, json)
Hash identifier: k2vVC0i9xdkqlqs6Q/7Jwpayd3NGZzmiXw1tQ7GYqb4=
Subject key identifier: 95:0E:10:19:30:CA:C4:38:45:8A:50:9C:A5:5A:99:F2:DD:0C:DE:1D
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 018CC424672ECC46E1A1938B67EAE215B851
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/lQ4QGTDKxDhFilCcpVqZ8t0M3h0.roa
Signing time: Mon 01 Jan 2024 08:29:29 +0000
ROA not before: Mon 01 Jan 2024 08:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216044
IP address blocks: 2a0f:7803:fea0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:67:2e:cc:46:e1:a1:93:8b:67:ea:e2:15:b8:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Jan 1 08:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=950e101930cac438458a509ca55a99f2dd0cde1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c6:45:82:31:24:ef:48:44:fa:39:ce:c0:6b:
48:c0:6d:a3:3d:15:d7:c4:17:fc:45:2b:e6:a5:b2:
8a:07:71:d2:1e:40:90:df:c1:15:af:95:2d:09:2f:
28:4c:e1:c8:c0:0e:fd:83:bb:04:3d:ae:0d:32:46:
67:be:45:97:8f:72:16:af:52:fa:3e:09:5d:be:eb:
89:4c:3c:35:13:e5:76:52:4b:21:8b:e0:aa:75:bf:
8a:97:70:41:83:ab:d6:f2:a3:7d:72:cd:bd:5f:91:
1d:8e:29:20:2d:3d:cb:59:dc:8e:24:31:ec:44:5a:
87:b2:86:71:52:f6:a4:04:2e:b8:ba:72:0f:cf:3a:
c0:38:d6:5d:16:b3:b8:37:77:91:16:7d:6b:d5:3e:
5d:9d:82:67:c3:30:6b:95:dc:5b:db:83:2f:df:42:
85:87:54:bd:f5:c1:34:b3:b8:ab:9e:dd:8a:77:90:
ad:cc:f5:79:f1:b5:7a:a4:ae:59:b5:1c:46:30:cd:
7a:fc:40:f0:88:3c:45:85:72:b0:f2:3e:d3:b7:90:
0e:6e:84:63:85:60:5b:c6:ae:71:e2:cd:a5:8d:45:
a3:01:fa:92:b2:5b:b7:60:d8:5c:63:e0:4c:88:f2:
12:07:52:00:72:81:dc:30:e9:fa:10:c2:e3:db:c7:
d9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0E:10:19:30:CA:C4:38:45:8A:50:9C:A5:5A:99:F2:DD:0C:DE:1D
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/lQ4QGTDKxDhFilCcpVqZ8t0M3h0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:fea0::/44
Signature Algorithm: sha256WithRSAEncryption
26:7a:51:2d:1b:14:17:ec:15:85:0d:97:4e:9c:f9:cc:d1:e9:
97:e9:a9:e1:5a:c6:bf:5d:f4:2a:61:2c:b0:32:76:3e:b0:35:
c9:84:ac:65:eb:af:be:e0:fe:9a:50:59:72:81:d3:6f:95:0c:
a0:cd:d1:ca:b3:16:21:41:7d:69:53:70:37:dd:e3:56:db:23:
56:73:95:bf:f2:e6:d9:1f:57:03:81:4a:7c:83:1b:f4:a6:e6:
5c:02:58:a2:98:ef:60:a4:01:1a:e0:0b:88:04:c5:28:73:7d:
ce:6e:c9:e6:3a:73:cb:99:78:cc:38:03:22:ce:9b:7d:f3:23:
5c:c5:dd:b3:2d:d9:5b:97:c4:5e:8c:df:45:ae:43:62:e3:7d:
dc:87:12:a1:46:29:e3:a0:e0:59:0a:2c:5f:4e:e5:3f:d2:58:
f7:97:a1:d6:fa:07:fd:9b:ab:e3:7d:5f:a5:92:58:14:73:a4:
b3:85:4a:ad:d9:fa:10:93:16:43:6a:9a:59:c8:63:87:05:43:
9d:47:7d:62:fb:3f:c1:64:58:3c:5d:74:df:f7:80:15:98:96:
3e:89:f6:71:ce:a6:43:a0:3f:f0:3a:4e:fa:17:e0:2f:ef:6e:
69:3b:2d:71:37:18:a3:0f:d5:02:1d:2d:ee:50:31:82:62:65:
55:7a:3f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:45:20 2024 by rpki-client on console-fra.rpki-client.org