Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/3_8yBMLxMmniO_9_ozJWnfHTjrw.roa
File: 3_8yBMLxMmniO_9_ozJWnfHTjrw.roa (raw, json)
Hash identifier: vxd5zANMstJn1573YjWcmRPMpvn8Mz4+Lec0d2UTcVA=
Subject key identifier: DF:FF:32:04:C2:F1:32:69:E2:3B:FF:7F:A3:32:56:9D:F1:D3:8E:BC
Certificate issuer: /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
Certificate serial: 018CCA2ADE27B0DCECE39E738F51FDA710B6
Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/3_8yBMLxMmniO_9_ozJWnfHTjrw.roa
Signing time: Tue 02 Jan 2024 12:34:16 +0000
ROA not before: Tue 02 Jan 2024 12:34:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212970
IP address blocks: 2a0e:e704:45::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:de:27:b0:dc:ec:e3:9e:73:8f:51:fd:a7:10:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
Validity
Not Before: Jan 2 12:34:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dfff3204c2f13269e23bff7fa332569df1d38ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7c:a2:7b:72:fe:f1:09:42:97:e1:d2:5a:bd:
9c:ba:b5:93:83:15:37:e1:ab:10:f7:70:d7:e8:8e:
a5:c4:50:48:15:38:b9:88:0c:10:99:cd:c7:5f:68:
7a:a3:28:78:0f:16:e9:fb:be:af:93:8b:12:d9:d5:
de:96:84:8f:20:96:6d:a5:4f:3a:fb:08:39:32:48:
fb:30:f7:71:8c:12:e4:36:dc:72:4f:65:92:3d:b5:
0b:fa:be:76:b7:08:5a:97:44:2e:9c:7d:66:54:4f:
09:f5:ba:2c:f1:65:9d:8f:69:10:39:4b:a5:ba:bf:
52:34:b6:94:09:aa:b2:23:8e:34:36:d2:ed:ab:f6:
3e:96:da:03:44:50:0b:e8:ca:0b:24:a6:a7:5e:99:
8b:4b:7a:2e:eb:b8:14:98:47:7c:2d:b1:cf:89:a4:
49:52:a5:5f:51:00:20:a8:8b:c5:30:b6:c9:2c:67:
cd:2b:0d:70:a3:f0:67:2e:a6:97:31:6c:30:5c:7a:
a8:77:e4:bf:a6:61:ca:66:a6:8e:39:48:33:c2:77:
79:a2:62:49:3b:36:df:8a:af:d2:07:0b:ed:de:91:
6f:c5:e1:d8:ac:96:1e:21:37:c0:ac:62:02:f9:ab:
a1:f1:0c:70:c3:11:48:e2:f6:28:aa:a7:e9:1a:f2:
71:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FF:32:04:C2:F1:32:69:E2:3B:FF:7F:A3:32:56:9D:F1:D3:8E:BC
X509v3 Authority Key Identifier:
keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/3_8yBMLxMmniO_9_ozJWnfHTjrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:e704:45::/48
Signature Algorithm: sha256WithRSAEncryption
19:e8:f4:2e:46:50:85:20:20:19:ea:81:fd:67:f6:de:b2:b4:
ec:ad:28:8e:02:7e:41:b3:8c:eb:41:f6:37:d9:0a:a7:30:8c:
69:a6:03:c2:fd:5c:71:b7:62:37:c8:b8:11:a0:2f:4f:4f:1d:
e7:58:fe:93:10:1e:a3:46:c0:7d:fe:42:36:04:a2:9c:39:52:
2e:63:7f:82:a9:37:cd:9e:1b:82:0d:05:da:62:f3:17:79:a1:
60:c6:e7:01:7a:10:8a:18:33:a7:6b:64:e1:e1:77:b5:72:48:
13:85:bb:1f:43:5a:ca:56:3a:0b:92:14:6d:99:2f:ff:0d:51:
e1:69:8d:7b:f1:ec:c4:c9:71:90:17:eb:3c:e7:d2:32:1a:9d:
3e:ab:ef:75:45:22:1f:93:f6:ca:9b:44:c4:31:21:52:c8:13:
4f:e0:56:4a:ec:38:7c:7e:c6:22:bc:5b:22:af:7c:8c:e7:ee:
a1:3b:01:9b:d1:6c:53:4f:45:1d:51:ef:0f:2a:59:23:81:a3:
ce:32:6c:22:c1:2a:08:b7:75:bc:01:76:46:fa:01:bb:aa:2b:
b5:61:13:4f:be:c4:cf:61:23:9c:6b:c6:70:60:54:1e:92:a4:
e4:29:54:c0:c9:80:c6:85:38:b6:4a:b2:2b:57:9d:b8:a1:00:
4b:b7:b2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 09:42:00 2024 by rpki-client on console-fra.rpki-client.org