Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/IBR7S1BdJZw1sWxQyQ5JJOYa2qY.roa
File: IBR7S1BdJZw1sWxQyQ5JJOYa2qY.roa (raw, json)
Hash identifier: unWs/SLTaVpa3ikmVcWMaHbvxbZbEh8tLP9P8hX79O0=
Subject key identifier: 20:14:7B:4B:50:5D:25:9C:35:B1:6C:50:C9:0E:49:24:E6:1A:DA:A6
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 018CC5DCC00973743B21E125539A8FEA7F91
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/IBR7S1BdJZw1sWxQyQ5JJOYa2qY.roa
Signing time: Mon 01 Jan 2024 16:30:27 +0000
ROA not before: Mon 01 Jan 2024 16:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52048
IP address blocks: 2a06:c3c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 14:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:c0:09:73:74:3b:21:e1:25:53:9a:8f:ea:7f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 16:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20147b4b505d259c35b16c50c90e4924e61adaa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:51:7c:ff:a4:72:12:23:ce:84:7b:dd:1a:d1:
87:7f:66:5d:f0:c3:11:43:33:3f:44:88:2a:fa:40:
c7:d7:77:69:e1:1d:ed:58:41:41:90:20:3b:ac:7e:
11:24:33:f0:6e:8b:5e:e3:b0:df:6b:42:e0:9d:9a:
a7:ff:4f:b5:57:31:04:4a:9a:41:ce:6c:37:b2:23:
c0:1d:9c:9c:4f:9b:62:7f:c3:35:2b:84:19:8f:0a:
30:6e:79:e6:e7:dc:ef:8a:3e:54:89:12:b8:81:d2:
3c:d3:44:2b:d4:3d:4b:ea:98:78:34:07:01:b3:f9:
5a:77:21:c5:a5:cd:82:fc:5f:32:52:57:88:58:9b:
ea:35:15:95:10:dd:2b:62:c1:28:96:c6:9c:19:7f:
eb:7b:e0:a4:09:91:59:03:55:fc:d8:81:64:a0:08:
f4:3c:ab:36:cd:0b:90:41:30:18:ab:a2:25:bd:72:
c0:24:e9:8b:41:02:6f:c5:8d:ee:db:91:51:f7:2c:
c3:80:4c:17:74:42:d8:2d:8b:f9:a9:a2:c6:fd:ea:
ec:f0:0f:82:90:19:6b:81:28:bf:74:4f:7f:02:44:
a3:fa:0e:d1:02:3e:36:35:57:26:58:0f:f8:14:af:
b4:32:c8:84:72:9f:f5:29:09:dd:8d:c4:4e:66:58:
94:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:14:7B:4B:50:5D:25:9C:35:B1:6C:50:C9:0E:49:24:E6:1A:DA:A6
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/IBR7S1BdJZw1sWxQyQ5JJOYa2qY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:c3c0::/48
Signature Algorithm: sha256WithRSAEncryption
9a:c8:05:15:34:3a:52:86:0d:54:29:63:78:85:36:c4:a4:42:
8d:c9:46:0d:e5:cb:a1:1e:e0:94:1e:a0:27:40:b8:9b:00:f3:
2a:06:90:b6:b0:e6:94:37:d6:28:f7:35:4a:2d:ce:46:e9:c8:
6e:56:86:d3:4e:24:b0:a9:3d:54:d6:16:9c:1b:1e:ba:7e:6e:
de:c7:f9:97:67:03:01:38:7a:c1:56:b1:81:af:b5:b9:5a:29:
e6:fc:3b:08:32:3f:0d:c4:0c:ce:a0:21:8b:88:57:4a:37:73:
89:0b:ff:6e:c4:e1:4c:09:b9:81:fa:35:da:8b:65:b7:9d:c5:
71:c5:75:64:df:bc:06:0b:ae:5a:01:09:08:df:f9:6c:2d:76:
05:f0:df:8e:9e:56:cc:26:ff:c5:79:51:88:ec:74:d8:1e:35:
ce:38:f1:68:f8:bb:3e:8b:07:f6:f8:10:2e:81:03:ad:f8:17:
8b:79:fa:35:f4:1d:07:ea:ba:88:ac:56:c2:6f:4d:de:77:af:
60:b9:25:9b:d0:ef:9c:bb:c3:66:d4:85:3e:4e:19:b3:43:99:
65:e2:d5:34:aa:9a:49:cb:33:70:ed:fa:d9:a5:43:66:6c:ec:
76:d9:ba:81:e4:40:80:66:aa:53:55:ae:06:f5:b9:0c:55:d7:
bf:58:f0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:11:42 2024 by rpki-client on console-ams.rpki-client.org