Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/0b0YQwrD11iHjt_xYRXTd5jCD3I.roa
File: 0b0YQwrD11iHjt_xYRXTd5jCD3I.roa (raw, json)
Hash identifier: UvKGsob5S/eBLcT3jIDDkJ0ljSXxSZDNMU5hs/b8XRU=
Subject key identifier: D1:BD:18:43:0A:C3:D7:58:87:8E:DF:F1:61:15:D3:77:98:C2:0F:72
Certificate issuer: /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
Certificate serial: 018CCA2ADE6E82BE51C77B4578E5AA98F621
Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/0b0YQwrD11iHjt_xYRXTd5jCD3I.roa
Signing time: Tue 02 Jan 2024 12:34:16 +0000
ROA not before: Tue 02 Jan 2024 12:34:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212971
IP address blocks: 2a0e:e704:44::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:de:6e:82:be:51:c7:7b:45:78:e5:aa:98:f6:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
Validity
Not Before: Jan 2 12:34:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1bd18430ac3d758878edff16115d37798c20f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:17:50:9a:8e:98:fc:f3:8f:17:d4:23:f4:0f:
7b:bd:3d:25:70:65:99:af:fa:92:92:6f:2b:df:22:
c6:8a:3c:37:3f:11:6b:f1:94:3b:c3:cb:f3:75:60:
2a:a4:95:eb:24:62:28:cb:0c:be:ee:2f:46:b8:d4:
db:1a:c4:b6:0a:b0:6c:1b:7a:6d:3e:2d:4c:9d:e5:
94:54:3e:3b:1a:39:b0:0d:e5:4c:1b:a7:05:a3:27:
28:4d:76:02:d3:a2:b0:75:1e:b1:3f:fd:0c:22:8a:
48:68:67:c7:ab:15:5f:67:4a:df:7e:80:87:5f:62:
57:01:24:9b:0a:cd:5b:06:68:ed:f0:89:63:80:98:
68:05:aa:bb:84:0c:2b:38:34:e4:0f:9d:68:10:f7:
0e:d4:0a:8a:e4:43:a8:07:80:ba:c5:f2:d7:da:54:
6e:d2:db:fb:80:b2:0b:82:77:ed:4d:57:0d:77:9e:
56:83:e8:72:d8:53:2e:da:7a:e8:a3:26:df:fe:c2:
62:f1:94:52:52:31:07:01:cb:d8:10:51:a9:6b:56:
f1:ad:77:aa:d5:9d:1f:c5:58:4a:92:df:ac:49:28:
75:6b:93:a9:88:89:da:11:56:f9:2e:02:a7:95:c3:
8d:61:ab:5c:da:4a:a5:f0:80:5b:82:fa:10:c4:20:
61:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:BD:18:43:0A:C3:D7:58:87:8E:DF:F1:61:15:D3:77:98:C2:0F:72
X509v3 Authority Key Identifier:
keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/0b0YQwrD11iHjt_xYRXTd5jCD3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:e704:44::/48
Signature Algorithm: sha256WithRSAEncryption
b1:c1:8b:0d:49:ea:a1:bb:16:5a:f2:4b:27:83:cd:84:4f:c6:
9e:13:1f:2d:5f:f2:ec:4d:58:56:b8:a9:80:85:c7:68:4d:3e:
a9:96:d5:dc:8c:92:32:66:17:3f:b2:8f:bd:82:d2:be:0a:3f:
00:97:a6:2d:8d:d7:34:41:03:4a:33:88:12:26:77:05:5a:0b:
ce:79:72:0a:a8:69:d9:9f:d3:23:0b:fe:30:de:a6:c7:a6:54:
ca:24:f6:bd:fc:62:e1:a5:9f:6f:53:ca:e9:60:a9:f0:a3:fb:
60:8b:ad:0c:36:df:e3:9d:0c:c0:bf:a1:43:42:f2:54:77:8d:
e1:56:43:47:3d:7d:44:23:67:07:9b:93:b2:d6:21:70:41:ba:
ff:5c:4b:06:83:94:04:ad:da:41:8c:95:c7:14:61:77:40:87:
49:76:d6:d6:63:2a:bd:76:5a:ea:cb:50:08:75:49:25:07:73:
ac:02:7c:16:14:d4:26:8c:88:dc:56:02:fa:86:5b:f2:d2:05:
65:16:0f:1a:5e:f4:f1:c1:c1:05:cb:85:67:07:3c:75:b4:72:
1a:06:d0:07:60:02:dd:e3:4c:f9:c8:f8:f2:bc:ff:b9:03:5f:
ed:6d:6f:01:29:4c:17:d3:9f:c4:40:84:27:48:7e:2d:5a:13:
23:e0:2e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 19:54:37 2024 by rpki-client on console-fra.rpki-client.org