Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/f1pfxsrZ5NAgrzKAjBZ8Zj-ZEkU.roa
File: f1pfxsrZ5NAgrzKAjBZ8Zj-ZEkU.roa (raw, json)
Hash identifier: ljJeoP+Qhyb7ZUe3/1VoH/TBlRodhfeW3NKTD7Svuqk=
Subject key identifier: 7F:5A:5F:C6:CA:D9:E4:D0:20:AF:32:80:8C:16:7C:66:3F:99:12:45
Certificate issuer: /CN=73f986c7705bd808c1b02ebd754fbfa91807e9b6
Certificate serial: 018CC86F5B4BD6DF0B6635DBF6E6849E2C21
Authority key identifier: 73:F9:86:C7:70:5B:D8:08:C1:B0:2E:BD:75:4F:BF:A9:18:07:E9:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_mGx3Bb2AjBsC69dU-_qRgH6bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/f1pfxsrZ5NAgrzKAjBZ8Zj-ZEkU.roa
Signing time: Tue 02 Jan 2024 04:29:50 +0000
ROA not before: Tue 02 Jan 2024 04:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60927
IP address blocks: 2a0b:b600:3c01::/48 maxlen: 48
2a0b:b601::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_mGx3Bb2AjBsC69dU-_qRgH6bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:5b:4b:d6:df:0b:66:35:db:f6:e6:84:9e:2c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f986c7705bd808c1b02ebd754fbfa91807e9b6
Validity
Not Before: Jan 2 04:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f5a5fc6cad9e4d020af32808c167c663f991245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:80:1e:15:ec:0e:a7:da:47:80:cd:76:0d:2f:
c3:f0:a0:a2:66:5b:a1:33:9d:2f:e5:b0:ba:7f:d1:
e2:59:f1:fe:b5:f2:23:90:49:47:3c:09:74:a4:0a:
37:a4:40:5c:54:2b:1c:09:90:74:e9:bf:c0:0e:a8:
c0:16:03:da:d2:47:4f:1d:6d:46:55:26:27:c2:65:
f7:e8:87:54:cd:04:59:99:62:cf:e9:8c:1b:9b:0f:
6b:1f:88:58:7f:5b:b3:01:9f:94:69:18:4c:16:43:
6d:5a:ff:af:6b:a1:9d:cb:1a:93:61:81:cd:9f:51:
a6:8c:7f:52:ab:7a:f7:93:d5:14:25:69:0a:50:40:
b1:0c:f0:74:5e:04:0b:97:8d:39:4a:10:43:33:1c:
aa:a0:a1:fd:8b:da:be:7e:92:4b:ff:6e:44:2d:1c:
e3:67:4a:de:01:ee:cd:80:91:2a:c7:e2:cc:a1:8d:
cb:11:a3:cd:d3:03:35:7d:46:48:c0:b4:40:13:dc:
6d:58:8a:41:06:42:23:db:8c:4c:c0:37:8c:fe:4d:
3d:ae:db:9a:69:69:5e:16:37:0f:92:bf:e0:a2:73:
8f:ee:53:9b:5f:e9:30:2f:af:92:d5:e7:a6:4f:43:
ae:32:38:c2:3c:84:48:4b:df:44:6c:f6:b0:72:54:
76:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:5A:5F:C6:CA:D9:E4:D0:20:AF:32:80:8C:16:7C:66:3F:99:12:45
X509v3 Authority Key Identifier:
keyid:73:F9:86:C7:70:5B:D8:08:C1:B0:2E:BD:75:4F:BF:A9:18:07:E9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_mGx3Bb2AjBsC69dU-_qRgH6bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/f1pfxsrZ5NAgrzKAjBZ8Zj-ZEkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b600:3c01::/48
2a0b:b601::/48
Signature Algorithm: sha256WithRSAEncryption
dd:dc:81:9d:c7:d6:a4:dd:d5:73:1e:0d:c1:08:01:e4:28:23:
86:76:cb:e9:77:c4:a8:c5:98:94:57:3e:98:7a:8b:fc:53:6d:
55:7f:77:c2:bb:61:99:d8:43:61:f7:b5:1e:32:34:d9:92:f9:
c9:6b:f7:ab:c8:8c:42:29:be:0d:00:5d:e0:05:b9:6e:7e:f5:
c2:dc:c3:fa:08:fa:dd:c5:67:8c:aa:25:8c:80:51:d7:05:ed:
0f:ac:ef:46:25:44:81:24:46:20:54:5c:59:9b:6c:7c:4c:87:
42:5b:eb:c1:cc:af:55:ac:47:8c:50:13:8c:66:df:22:09:b3:
22:d9:72:2e:09:77:1b:80:48:43:ee:a7:93:56:8d:90:3e:21:
75:b0:3d:b7:1b:46:48:54:d3:b4:ff:50:f2:d4:ba:57:d0:05:
f0:04:6c:c2:06:79:c7:0b:fc:5b:4e:54:c7:13:a7:be:c8:6b:
79:ae:d6:49:b9:39:28:87:77:db:79:02:44:70:c6:e5:c0:52:
af:06:e9:a1:f0:a6:dc:0d:95:c6:38:c1:22:99:8c:7e:27:70:
8e:6c:16:b3:d9:60:2c:90:2c:b3:a2:ed:4f:a2:9c:2c:27:0a:
4f:a1:73:f6:ce:32:53:aa:dd:06:a1:2c:cf:74:4e:40:75:f7:
50:78:78:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 05:50:28 2024 by rpki-client on console-ams.rpki-client.org