Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/rZmTIkmvWRNuE7O99H7M6XAR_jc.roa
File: rZmTIkmvWRNuE7O99H7M6XAR_jc.roa (raw, json)
Hash identifier: ZmyZxzvuQs5F9UBxB6xj90ZU3lH6MD9TfZmvnFwJa/k=
Subject key identifier: AD:99:93:22:49:AF:59:13:6E:13:B3:BD:F4:7E:CC:E9:70:11:FE:37
Certificate issuer: /CN=34e110b59362f673eae33b66ee7aea3c4028294e
Certificate serial: 018CC8DE9ADE2E2ECD98736F9CFCB21B38F7
Authority key identifier: 34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/rZmTIkmvWRNuE7O99H7M6XAR_jc.roa
Signing time: Tue 02 Jan 2024 06:31:20 +0000
ROA not before: Tue 02 Jan 2024 06:31:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198485
IP address blocks: 2a02:2308:50::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 15:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:9a:de:2e:2e:cd:98:73:6f:9c:fc:b2:1b:38:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e110b59362f673eae33b66ee7aea3c4028294e
Validity
Not Before: Jan 2 06:31:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad99932249af59136e13b3bdf47ecce97011fe37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:27:b1:88:6c:36:37:d2:f3:f1:d6:c1:4d:45:
d7:1f:b3:f1:fa:e0:9f:b8:11:50:3f:9e:47:67:2a:
66:97:85:eb:ec:be:a3:68:ff:f5:13:88:a5:4e:d5:
6d:7e:80:8c:0c:29:60:7d:2c:28:6f:7f:76:ab:80:
3e:e2:fd:55:34:11:ba:1e:4a:12:dd:02:76:ec:c6:
cb:03:d1:e4:0b:b3:f0:f9:10:58:e2:53:de:b0:8d:
be:e8:62:db:6f:49:90:14:c0:2e:aa:16:3d:9c:60:
02:10:59:2b:a8:ed:e1:b5:a8:a3:b9:48:95:31:05:
58:f8:9b:37:42:a6:9e:6d:a5:d7:2f:2e:1d:75:79:
b9:c2:39:c6:ba:1e:6a:ae:e1:4a:8a:23:77:53:71:
db:a1:16:b8:50:14:83:11:be:26:0d:f6:c0:5c:ba:
b0:7e:7f:cc:35:4f:13:6c:ac:6c:59:e3:d9:f3:9f:
21:9c:6a:5b:68:79:30:d1:e8:70:90:d9:70:cf:c3:
2e:a8:6c:45:ce:23:8c:59:90:da:a0:f0:9b:6d:65:
c2:a9:b8:3b:a6:31:a7:b7:ac:b2:e2:c0:68:35:6c:
7f:6f:a0:16:a1:34:35:f7:92:5d:37:db:f5:fb:f8:
1b:4d:82:87:a3:5c:fa:41:42:bf:5e:ae:0c:b7:4b:
5d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:99:93:22:49:AF:59:13:6E:13:B3:BD:F4:7E:CC:E9:70:11:FE:37
X509v3 Authority Key Identifier:
keyid:34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/rZmTIkmvWRNuE7O99H7M6XAR_jc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2308:50::/48
Signature Algorithm: sha256WithRSAEncryption
a3:72:fc:d1:b8:65:14:be:88:7d:5f:2c:95:0a:bf:42:07:15:
85:b3:76:69:3e:4e:9d:c7:2a:ae:86:74:0f:28:c4:f5:40:ae:
20:a1:31:3c:00:8d:55:02:07:55:90:cf:ea:f2:ce:05:c1:9d:
c5:0f:5c:32:31:46:8c:95:db:f4:7a:1c:4c:ff:9a:73:0b:d7:
02:50:0c:7c:da:ae:0c:f8:2f:9b:19:4d:69:dc:6a:d4:28:42:
65:63:c0:30:fb:51:87:5d:1a:b5:84:16:6e:be:63:d7:1d:8a:
34:7f:b4:db:32:64:be:a2:2a:bd:60:44:97:19:88:8b:6d:8c:
17:2a:43:90:b3:f7:a3:07:6e:0d:77:85:7f:37:57:a9:07:e6:
26:e2:8e:a6:6a:9b:60:ff:0d:55:74:7c:2e:5c:42:c0:3f:93:
79:2a:02:b8:78:8d:90:e7:39:f2:0a:61:57:c0:2b:ce:40:ef:
0d:6e:fb:10:9c:fc:74:13:09:64:72:0b:b8:b7:ed:e3:f0:4f:
14:dd:aa:74:c2:9c:c9:66:07:5e:01:fa:35:ad:78:ad:80:e8:
09:3e:b3:93:92:01:76:1b:55:06:1d:f6:c7:99:78:f8:e6:71:
7a:d9:eb:b0:cb:26:4e:8d:fa:78:35:c4:f1:f7:e1:81:36:a6:
95:be:5e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 00:10:16 2024 by rpki-client on console-fra.rpki-client.org