Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/usXd_oSAX0PM-sst0J_qLa0j9-0.roa
File: usXd_oSAX0PM-sst0J_qLa0j9-0.roa (raw, json)
Hash identifier: PNkZXvOoRyxuhmU8tVGIQQNJE4V8eMblQ35Aswa6dyg=
Subject key identifier: BA:C5:DD:FE:84:80:5F:43:CC:FA:CB:2D:D0:9F:EA:2D:AD:23:F7:ED
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 018F2036173016499815088F8320C1FC32F8
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/usXd_oSAX0PM-sst0J_qLa0j9-0.roa
Signing time: Sat 27 Apr 2024 15:39:26 +0000
ROA not before: Sat 27 Apr 2024 15:39:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23470
IP address blocks: 2a0f:7803:fb4e::/48 maxlen: 48
2a0f:7803:fe50::/44 maxlen: 48
2a0f:7803:fec0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 14:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:20:36:17:30:16:49:98:15:08:8f:83:20:c1:fc:32:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Apr 27 15:39:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bac5ddfe84805f43ccfacb2dd09fea2dad23f7ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:53:96:ca:ce:0a:41:f1:72:21:6b:0e:bb:c5:
e2:d6:49:48:a8:26:3d:b6:7c:5f:81:93:9d:5f:65:
de:ec:0a:64:22:23:27:e9:a5:fb:b7:05:10:1b:90:
a0:1f:b7:48:97:26:9a:51:49:09:3c:d2:08:b4:5f:
19:f9:ed:cd:c0:34:fa:32:89:38:45:b1:e2:68:ca:
95:ce:5b:6a:dc:46:1d:ae:ba:77:bc:00:51:79:8c:
d1:62:cb:8d:bd:3c:14:15:dc:da:a1:c6:77:8e:fe:
be:3d:4d:ab:09:22:fa:8c:d5:1c:0f:74:4b:95:32:
49:9e:4f:8c:a5:57:64:fc:2e:88:ed:63:68:3b:04:
ed:6c:5e:ca:81:3e:48:57:fd:36:25:78:29:5a:08:
aa:36:d3:36:6d:34:70:3d:52:c6:f5:a9:ce:6c:66:
82:da:72:c5:6d:79:a8:e1:9b:12:14:8a:cc:25:b4:
88:0d:51:77:af:01:36:5e:5f:64:66:e0:78:49:80:
93:17:78:55:a2:30:fb:6f:d1:b1:28:7e:ad:a1:c7:
73:c4:13:3b:77:d5:a3:a7:31:5e:9d:85:b3:1d:72:
db:b3:0a:76:33:2a:17:0a:ab:c6:7e:ea:30:41:7f:
90:64:72:44:e6:48:ad:13:3b:c1:1f:85:03:8d:05:
d4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C5:DD:FE:84:80:5F:43:CC:FA:CB:2D:D0:9F:EA:2D:AD:23:F7:ED
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/usXd_oSAX0PM-sst0J_qLa0j9-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:fb4e::/48
2a0f:7803:fe50::/44
2a0f:7803:fec0::/44
Signature Algorithm: sha256WithRSAEncryption
40:09:d8:cd:47:ee:d9:19:92:54:06:f5:3d:ea:73:35:92:0b:
f1:0f:b6:48:e5:10:c7:af:b8:d8:2d:21:2e:94:85:91:1d:ce:
26:62:8a:d1:6e:8a:26:fe:41:c5:a9:4f:7f:bd:cf:fe:19:d1:
b5:a8:67:91:bd:6c:16:56:5c:5f:96:41:66:0f:9d:dd:b2:4a:
9f:46:c7:5b:82:a8:e5:d5:a6:ad:a5:b7:b7:ea:fd:aa:a8:de:
f5:50:b1:97:0a:6d:01:65:4b:cd:d8:01:9a:7e:c3:3f:7e:41:
0a:72:c8:3d:60:46:37:02:0e:56:e4:af:92:72:2a:c2:02:3f:
fc:4d:ed:c0:03:4c:95:e5:07:2e:1c:52:f9:5e:f9:d3:23:50:
c4:e3:09:c0:7c:bd:6b:5e:44:50:ce:d5:bd:45:f6:bf:1d:24:
69:1d:ad:53:17:37:7d:79:c4:f9:52:ba:59:c8:92:25:c0:35:
6d:e0:a1:4b:3e:35:86:61:83:27:76:0b:56:f8:e8:a4:4d:f7:
db:9c:5a:d0:6e:7f:86:1f:69:bb:94:ff:80:d2:84:ae:14:2c:
c5:13:1a:d0:b0:4e:9c:c4:dd:1c:f9:51:d8:81:a6:59:6b:c3:
31:75:41:21:cb:bc:63:ed:0e:25:32:8b:ba:14:7b:b6:16:7e:
22:49:5a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:38:53 2024 by rpki-client on console-ams.rpki-client.org