Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/pS_3BUOTHnNq05Iba5SHtLggfIU.roa
File: pS_3BUOTHnNq05Iba5SHtLggfIU.roa (raw, json)
Hash identifier: R3EzVAdovHBOmd50YLuaH+y9wnYZaOMYtpkiwo21HBg=
Subject key identifier: A5:2F:F7:05:43:93:1E:73:6A:D3:92:1B:6B:94:87:B4:B8:20:7C:85
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 018CC424634F308C464A37115AA8AEDDFE51
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/pS_3BUOTHnNq05Iba5SHtLggfIU.roa
Signing time: Mon 01 Jan 2024 08:29:28 +0000
ROA not before: Mon 01 Jan 2024 08:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198015
IP address blocks: 2a0f:7803:ff80::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 08:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:63:4f:30:8c:46:4a:37:11:5a:a8:ae:dd:fe:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Jan 1 08:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a52ff70543931e736ad3921b6b9487b4b8207c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3b:79:8e:57:73:1b:bc:f9:14:0c:7f:5e:4a:
2d:e5:41:a8:a2:da:a3:ea:30:89:1a:80:d9:b6:ff:
a1:a5:46:4e:47:fb:ca:79:de:88:36:eb:db:7d:2b:
2b:ba:84:96:ab:83:8a:cc:c8:87:ba:0b:04:84:13:
a2:6d:dd:1d:f2:07:d1:92:4b:9d:af:55:de:2c:cf:
7c:d1:01:3e:45:d7:8f:48:1e:33:5c:8d:37:de:ec:
07:d9:a1:6b:47:2e:a8:12:5e:c1:82:25:10:d3:96:
15:73:f1:64:51:3f:92:e1:7c:8b:71:6e:f0:45:9e:
33:0f:3e:b0:c3:19:2b:c4:46:64:7b:37:a6:08:97:
01:e8:e1:cb:6d:51:3d:5f:66:13:7b:2f:2d:9a:ea:
b8:0c:7a:72:54:5d:0c:7d:66:78:de:d7:ef:c9:38:
50:3c:8e:30:2d:f1:94:af:87:b5:2b:76:b4:4c:71:
9c:e1:0c:3c:ab:e3:0d:84:c5:be:3b:5f:96:91:80:
4c:bf:f0:52:48:1f:52:47:74:41:e3:8f:97:ca:ac:
38:43:06:02:24:0c:15:48:9e:74:0b:e3:3b:e9:16:
a4:ba:7f:96:0c:fb:a7:c0:a9:5b:d0:95:a8:6d:14:
74:b8:2a:c2:d7:e7:54:ee:93:82:6f:e7:0c:2e:22:
39:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:2F:F7:05:43:93:1E:73:6A:D3:92:1B:6B:94:87:B4:B8:20:7C:85
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/pS_3BUOTHnNq05Iba5SHtLggfIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:ff80::/44
Signature Algorithm: sha256WithRSAEncryption
8b:f8:a2:5d:19:13:8b:85:ac:e1:12:18:93:0c:06:81:3d:5f:
af:bf:b5:a8:e1:6d:86:62:f3:ed:fb:2c:a1:53:8f:7e:a1:39:
8f:e4:f3:1e:35:f5:4c:0c:bf:26:93:6b:8a:47:fa:4f:0e:cb:
7e:ff:67:6d:f7:0f:af:e3:28:1c:1c:a2:05:f3:af:62:76:c5:
b4:88:30:84:d6:1e:24:8c:c6:8d:07:99:72:33:fc:68:f1:31:
3c:23:3e:61:36:65:1a:44:b3:65:c4:ae:5b:d2:a3:7e:14:b2:
bf:f5:9f:73:7f:a3:50:c6:87:eb:b4:9e:0d:a1:db:1e:52:45:
b3:e9:2a:be:00:74:65:b5:21:9e:89:7c:de:3b:26:ba:b3:24:
08:50:93:7d:eb:1c:13:c3:e3:fe:1f:5a:5f:f6:fd:25:9f:e4:
9a:52:f8:29:5d:5f:a2:6f:f1:78:5a:6a:6f:9b:8e:57:72:85:
3f:0a:b2:77:49:ad:9a:5b:c9:62:9f:4e:5e:aa:62:6d:d0:65:
2b:6a:b9:11:fd:aa:8f:87:5f:b1:90:e3:b2:10:3f:0c:bf:67:
8c:ff:9d:8b:43:28:88:6a:00:e9:be:c1:57:8d:9e:20:60:4f:
55:39:5c:71:f3:a2:43:71:f7:64:0c:3d:ae:03:3e:35:4b:1d:
9b:0e:6d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:34:49 2024 by rpki-client on console-fra.rpki-client.org