Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/toJvefzQGoNubgS8SFzkGkzMuo0.roa
File: toJvefzQGoNubgS8SFzkGkzMuo0.roa (raw, json)
Hash identifier: p+Ft3h4EZHB2vq9W7QDlFMobZDArF5FXcHigVIhbB/U=
Subject key identifier: B6:82:6F:79:FC:D0:1A:83:6E:6E:04:BC:48:5C:E4:1A:4C:CC:BA:8D
Certificate issuer: /CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Certificate serial: 018F257B8410D3048B261CEC1A152D4BF8AB
Authority key identifier: 6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/toJvefzQGoNubgS8SFzkGkzMuo0.roa
Signing time: Sun 28 Apr 2024 16:13:22 +0000
ROA not before: Sun 28 Apr 2024 16:13:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215913
IP address blocks: 2a13:d040:2::/48 maxlen: 48
2a13:d040:3::/48 maxlen: 48
2a13:d040:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:25:7b:84:10:d3:04:8b:26:1c:ec:1a:15:2d:4b:f8:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Validity
Not Before: Apr 28 16:13:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6826f79fcd01a836e6e04bc485ce41a4cccba8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ce:31:0a:a6:6e:2c:0d:76:32:40:b3:89:1c:
3c:c1:c8:d5:8d:aa:bd:27:f7:7d:1d:06:7f:8d:10:
a9:33:2f:d1:2d:29:31:c7:a6:05:c0:fd:72:0a:d8:
2a:5e:4b:16:57:07:70:0e:0c:5a:9f:b3:bf:f7:09:
2d:b9:b8:82:e9:ad:63:f9:26:c4:7f:6b:39:13:d6:
ff:b1:24:f3:ee:d1:0b:22:8b:9e:90:dd:4b:4e:b9:
35:42:d5:ac:2c:66:b3:2f:16:28:9f:91:25:8e:bf:
d2:23:0a:82:5f:34:39:0c:ce:3b:45:f8:35:cb:2e:
e2:cd:4c:3d:b9:2d:d2:b7:1d:a8:f4:7d:87:7f:78:
5b:5c:90:1f:9d:cd:ac:d2:1f:4d:4c:35:78:9f:78:
24:cf:1e:c4:f7:27:4a:48:5d:e0:19:83:65:85:53:
d5:3f:4e:2a:8a:20:2d:ac:02:5f:0a:34:3e:67:07:
a4:b0:16:3e:5f:80:35:d8:dd:6c:77:f8:ef:b2:09:
f8:0a:7b:09:75:e2:28:cb:c4:d5:7b:0f:d1:f0:2d:
b9:aa:b3:b1:e1:5f:01:0a:18:ca:5b:f8:29:54:f5:
0f:72:f5:6c:c0:4a:98:89:de:f3:ec:3e:33:43:e6:
63:5e:a8:10:e9:89:6a:bf:a5:c8:5c:60:e6:03:9b:
f2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:82:6F:79:FC:D0:1A:83:6E:6E:04:BC:48:5C:E4:1A:4C:CC:BA:8D
X509v3 Authority Key Identifier:
keyid:6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/toJvefzQGoNubgS8SFzkGkzMuo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:d040:2::-2a13:d040:4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
47:41:8a:e4:66:7c:47:b5:82:74:e8:4f:f5:18:3f:0a:cf:5f:
2f:cb:6d:5f:13:cc:e1:5b:0a:e0:24:fa:70:fa:ec:36:5e:e0:
2f:1e:65:3d:48:21:f7:61:9b:9f:6c:41:1e:1d:b0:c6:0f:06:
15:1a:0b:6c:58:c7:e9:26:3d:91:2b:46:76:74:fd:aa:98:c7:
9d:3d:fe:41:e9:26:37:64:c4:8f:56:e5:61:58:2b:1c:9e:51:
44:04:fa:b4:b4:5c:ec:ae:fc:bb:66:86:05:c1:a2:1c:ac:a5:
fc:2d:dc:b5:f9:b6:7f:7a:a5:40:21:5a:d8:2f:8b:a7:ad:2b:
1a:8d:97:0b:69:ad:7a:0e:43:19:90:36:ee:f8:89:e3:60:67:
fa:49:94:1c:23:00:bb:0a:3f:56:9d:d1:e4:51:ec:19:e1:76:
b6:7d:05:98:68:b0:96:ee:e3:42:b8:45:8c:de:92:4a:77:3d:
27:86:5b:85:dd:a8:c9:6d:11:df:51:98:d0:b3:c5:88:f5:68:
49:d8:f8:ae:66:75:26:40:d8:0a:69:4e:ba:03:aa:c8:ab:fb:
77:3a:24:06:de:7c:2b:95:7f:bd:fb:85:3a:0b:1d:af:04:b1:
17:32:6c:55:88:10:81:cd:2b:95:09:8d:e3:27:a4:ff:7d:d7:
d5:5d:d6:46
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jun 7 22:13:12 2024 by rpki-client on console-ams.rpki-client.org