Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/6y4H2h0jh8Z6ZMozsvM5Ppg9HcE.roa
File: 6y4H2h0jh8Z6ZMozsvM5Ppg9HcE.roa (raw, json)
Hash identifier: tKywQT6IgHrsP+EzPcrarMPkpVmuqKCeZc3GzA7wt2A=
Subject key identifier: EB:2E:07:DA:1D:23:87:C6:7A:64:CA:33:B2:F3:39:3E:98:3D:1D:C1
Certificate issuer: /CN=925069a5d764da255954db2ee9d1243de16b9101
Certificate serial: 018FA19F9ABCFCBC5D5869D2E1B3B86F1A9E
Authority key identifier: 92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/6y4H2h0jh8Z6ZMozsvM5Ppg9HcE.roa
Signing time: Wed 22 May 2024 18:45:42 +0000
ROA not before: Wed 22 May 2024 18:45:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64398
IP address blocks: 2a0c:b0c6::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Jun 2024 11:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a1:9f:9a:bc:fc:bc:5d:58:69:d2:e1:b3:b8:6f:1a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=925069a5d764da255954db2ee9d1243de16b9101
Validity
Not Before: May 22 18:45:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb2e07da1d2387c67a64ca33b2f3393e983d1dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7c:22:8d:71:23:7b:30:ff:ed:47:2a:a3:39:
f0:7d:7f:c1:8e:13:b0:45:f6:16:ee:ae:43:5f:fb:
67:93:bf:fb:10:b8:98:8a:62:8a:1b:46:ed:d6:ce:
10:a4:cf:e2:5b:79:5e:cf:46:43:1f:fe:7e:9b:1f:
93:ca:0a:ce:8b:6d:3b:36:72:f5:22:28:78:a2:d3:
83:fe:30:f8:28:12:d2:60:41:d7:cc:d3:fa:c7:ab:
d8:fd:a3:e2:2a:8c:6f:a4:c7:db:98:8a:68:ae:8f:
24:f6:50:df:94:ad:d5:3f:d5:77:a6:b4:e1:1e:c6:
f1:98:ad:15:27:57:a9:55:e7:50:e3:38:d7:f3:fe:
e6:80:cd:c1:11:28:8e:aa:9c:61:b3:69:61:d8:40:
7b:92:9d:a6:6a:07:60:c6:03:8b:df:01:de:b1:50:
5e:fe:3a:d8:1c:f6:3c:43:9d:23:f3:86:5a:41:d0:
92:dd:a3:78:9e:9e:c9:14:32:d0:eb:23:88:74:c5:
5b:23:a5:99:98:e2:d4:0a:35:e4:bf:73:9f:34:c9:
60:8e:5a:53:20:2e:c8:de:c1:31:80:b6:d1:fc:53:
e9:c3:98:62:1a:b4:bb:a4:f9:26:3f:c7:d7:46:1e:
aa:32:74:13:51:f6:f7:60:75:75:96:a1:8d:f6:e1:
6a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2E:07:DA:1D:23:87:C6:7A:64:CA:33:B2:F3:39:3E:98:3D:1D:C1
X509v3 Authority Key Identifier:
keyid:92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/6y4H2h0jh8Z6ZMozsvM5Ppg9HcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b0c6::/31
Signature Algorithm: sha256WithRSAEncryption
0e:db:24:c8:10:33:3a:97:72:8d:7d:a4:22:64:db:eb:8d:42:
19:9a:0a:90:f3:0b:b5:19:1d:fc:b9:46:3f:8f:b9:a8:67:16:
0d:50:aa:7f:51:d8:36:8d:19:aa:84:ad:17:b4:25:27:c1:44:
68:09:ef:0d:e7:29:15:4f:78:06:3a:25:0f:ce:65:dd:fd:38:
87:00:03:39:45:a5:73:99:a0:1d:4b:6c:35:d1:fb:45:bb:f3:
4d:b0:f0:d2:c1:58:e9:53:fb:cf:1d:c3:fd:69:dc:05:03:2d:
92:6b:e9:e9:ef:96:f1:d2:e0:fb:ae:ac:a8:03:b6:e4:6e:75:
cb:4a:db:b3:5c:09:49:99:e7:ec:22:a2:a0:36:7d:a9:32:31:
c6:78:39:94:4e:5c:15:c7:9d:a1:59:ad:c0:0b:2c:db:42:78:
fc:f7:8d:89:74:2c:47:92:80:8d:f1:88:af:a7:56:2f:53:7b:
0c:be:41:ed:11:ad:cc:29:23:2e:e2:f2:2d:4b:85:35:cc:9f:
55:ce:0a:7a:57:9e:da:4a:35:76:29:3e:21:5d:b8:1a:bb:12:
33:b4:ed:f4:7d:4d:bd:cf:a1:a2:7a:91:16:6f:98:cd:d7:ab:
78:5b:60:84:59:28:ef:57:8c:0c:e6:5f:b8:3a:87:2f:ec:a9:
6b:42:76:8e
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAY+hn5q8/LxdWGnS4bO4bxqeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNTA2OWE1ZDc2NGRhMjU1OTU0ZGIyZWU5ZDEyNDNkZTE2
YjkxMDEwHhcNMjQwNTIyMTg0NTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjJlMDdkYTFkMjM4N2M2N2E2NGNhMzNiMmYzMzkzZTk4M2QxZGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3wijXEjezD/7UcqoznwfX/BjhOw
RfYW7q5DX/tnk7/7ELiYimKKG0bt1s4QpM/iW3lez0ZDH/5+mx+TygrOi207NnL1
Iih4otOD/jD4KBLSYEHXzNP6x6vY/aPiKoxvpMfbmIporo8k9lDflK3VP9V3prTh
HsbxmK0VJ1epVedQ4zjX8/7mgM3BESiOqpxhs2lh2EB7kp2magdgxgOL3wHesVBe
/jrYHPY8Q50j84ZaQdCS3aN4np7JFDLQ6yOIdMVbI6WZmOLUCjXkv3OfNMlgjlpT
IC7I3sExgLbR/FPpw5hiGrS7pPkmP8fXRh6qMnQTUfb3YHV1lqGN9uFqxwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFOsuB9odI4fGemTKM7LzOT6YPR3BMB8GA1UdIwQY
MBaAFJJQaaXXZNolWVTbLunRJD3ha5EBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2xCcHBkZGsyaVZaVk5zdTZkRWtQZUZya1FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82Nzg4ZjUtNDg4OS00YmU3LWJiMTkt
YTliOGRlNjExYTk2LzEvNnk0SDJoMGpoOFo2Wk1venN2TTVQcGc5SGNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS82Nzg4ZjUtNDg4OS00YmU3LWJiMTktYTliOGRlNjExYTk2
LzEva2xCcHBkZGsyaVZaVk5zdTZkRWtQZUZya1FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUBKgywxjAN
BgkqhkiG9w0BAQsFAAOCAQEADtskyBAzOpdyjX2kImTb641CGZoKkPMLtRkd/LlG
P4+5qGcWDVCqf1HYNo0ZqoStF7QlJ8FEaAnvDecpFU94BjolD85l3f04hwADOUWl
c5mgHUtsNdH7RbvzTbDw0sFY6VP7zx3D/WncBQMtkmvp6e+W8dLg+66sqAO25G51
y0rbs1wJSZnn7CKioDZ9qTIxxng5lE5cFcedoVmtwAss20J4/PeNiXQsR5KAjfGI
r6dWL1N7DL5B7RGtzCkjLuLyLUuFNcyfVc4Kelee2ko1dik+IV24GrsSM7Tt9H1N
vc+honqRFm+YzdereFtghFko71eMDOZfuDqHL+ypa0J2jg==
-----END CERTIFICATE-----
Generated at Sat Jun 29 17:49:08 2024 by rpki-client on console-ams.rpki-client.org