Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/8InhtxhJ2CokS8o8pl8Zx0fXDNI.roa
File: 8InhtxhJ2CokS8o8pl8Zx0fXDNI.roa (raw, json)
Hash identifier: wouYOr5NL8fihUC73ctUChORb0LZcEgoN1GTY/qNwx4=
Subject key identifier: F0:89:E1:B7:18:49:D8:2A:24:4B:CA:3C:A6:5F:19:C7:47:D7:0C:D2
Certificate issuer: /CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d
Certificate serial: 018CC4922D8E9090111F69DDDED483DDF31F
Authority key identifier: 21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/8InhtxhJ2CokS8o8pl8Zx0fXDNI.roa
Signing time: Mon 01 Jan 2024 10:29:23 +0000
ROA not before: Mon 01 Jan 2024 10:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 2a0a:2f80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:2d:8e:90:90:11:1f:69:dd:de:d4:83:dd:f3:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d
Validity
Not Before: Jan 1 10:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f089e1b71849d82a244bca3ca65f19c747d70cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:cb:35:be:bf:d7:e7:2f:61:af:c7:4a:58:1d:
d5:06:06:34:38:d5:c4:ba:6d:92:fa:d0:ee:b9:52:
d6:78:4a:8c:85:23:df:f3:21:7d:e9:10:5e:59:26:
62:34:38:2e:26:92:f7:fe:60:75:88:e6:08:18:64:
6e:9c:5c:1f:e4:02:37:44:02:85:7e:c5:19:74:da:
f0:33:3f:55:39:08:69:5c:16:84:3d:64:ce:2d:5b:
b2:de:4e:d9:49:2b:69:bd:94:bb:72:18:8d:25:99:
f2:8f:41:72:4b:f0:1f:54:83:d1:68:e2:e3:3e:a4:
d8:0d:4a:6c:0e:f2:c8:91:e1:73:a3:2c:9e:46:08:
2b:3c:ec:99:fe:f4:61:ec:15:4b:4d:17:59:81:7a:
d0:42:21:ae:1e:96:91:f1:70:2c:c7:de:67:75:ed:
d1:a0:6b:60:a9:88:3c:65:30:27:d1:ec:c6:a6:54:
d7:00:a0:d4:e4:0f:e5:2d:1e:61:48:01:b4:b5:77:
fc:6c:0e:f7:7c:0f:cd:91:4d:b3:37:a6:56:90:da:
d4:d5:1e:3a:8b:8e:bb:38:f4:78:0b:38:13:bb:fa:
43:ec:03:5b:ff:74:d7:cb:34:31:09:aa:5a:77:41:
75:63:f0:e0:41:10:a2:34:51:cc:9a:f4:55:a3:94:
49:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:89:E1:B7:18:49:D8:2A:24:4B:CA:3C:A6:5F:19:C7:47:D7:0C:D2
X509v3 Authority Key Identifier:
keyid:21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/8InhtxhJ2CokS8o8pl8Zx0fXDNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2f80::/32
Signature Algorithm: sha256WithRSAEncryption
3a:f8:38:41:3a:a4:ef:9a:e8:a0:28:54:3d:85:54:cc:eb:18:
be:a6:0c:95:c6:81:be:f1:a0:ad:38:48:06:45:2c:f1:5b:df:
b8:e3:5c:97:d8:80:55:1b:c4:fc:39:2f:80:10:8d:a1:85:6c:
86:bb:42:2c:7b:e4:84:f1:14:8d:0b:d2:5a:5d:84:d1:94:f4:
c8:bd:c3:6c:f1:a6:f2:a7:bb:8e:b6:9c:34:37:fe:59:ab:e3:
8a:d6:1b:07:56:af:65:55:1b:09:7e:40:bf:7e:25:be:3c:53:
50:29:73:00:bf:95:3e:d3:e4:85:2c:87:64:12:42:44:03:d8:
f1:47:cc:28:aa:88:f3:32:63:61:57:92:37:dc:1a:7a:ee:a4:
2f:e6:c2:ef:f8:46:7a:c4:0e:80:a7:65:63:e2:b6:2a:10:f2:
06:7e:a3:94:99:76:bb:13:fb:ff:80:f1:c3:72:ef:30:20:d2:
c4:49:d2:24:71:71:0b:c3:05:b1:ec:b5:44:ac:db:7f:31:0c:
94:b1:f3:1f:11:f8:05:97:da:42:99:18:da:2a:0a:a0:0b:a8:
db:f1:5b:1a:dc:5b:2d:b9:fc:fa:03:65:10:32:21:f7:cb:71:
b5:b1:90:9c:87:c0:01:39:d8:37:c2:8f:07:e3:40:1a:50:2f:
ef:f4:1c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 18:00:09 2024 by rpki-client on console-ams.rpki-client.org