Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/XN0vw7HKgAWhLOqAfGD7-OX8V68.roa
File: XN0vw7HKgAWhLOqAfGD7-OX8V68.roa (raw, json)
Hash identifier: ijAm4wGsCuP1/s2vvTHiCpsVqkuMIJpiuc208SqGde4=
Subject key identifier: 5C:DD:2F:C3:B1:CA:80:05:A1:2C:EA:80:7C:60:FB:F8:E5:FC:57:AF
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 018CC94DFEFA1B5CDAC62A74CC18A1729BF9
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/XN0vw7HKgAWhLOqAfGD7-OX8V68.roa
Signing time: Tue 02 Jan 2024 08:33:01 +0000
ROA not before: Tue 02 Jan 2024 08:33:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52153
IP address blocks: 2001:a10:186::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:fe:fa:1b:5c:da:c6:2a:74:cc:18:a1:72:9b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 2 08:33:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5cdd2fc3b1ca8005a12cea807c60fbf8e5fc57af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d3:fc:72:64:e5:48:3b:04:34:51:93:c2:4b:
cf:e0:97:c5:25:11:80:9c:74:c0:63:82:69:09:70:
6b:f3:f0:62:fc:3c:31:f4:b6:00:99:76:bf:f7:2d:
2f:98:8f:77:84:34:7a:a5:58:05:8c:63:e7:dc:2f:
c5:89:70:41:bb:3d:cb:85:b6:fb:47:32:45:85:e6:
aa:fb:8e:69:c5:4c:ee:c8:02:b4:65:f1:7b:ce:a2:
52:5a:41:d2:a8:ba:a5:b1:85:e4:3f:f2:71:4f:3a:
a3:6d:2a:a1:d2:cb:2c:a4:2c:27:cd:eb:0e:3a:27:
77:c3:c6:f0:d0:45:a9:d3:f7:69:5e:b6:6e:8b:9a:
68:43:fb:00:82:99:14:00:d4:65:f0:f2:3d:91:e5:
b5:6e:f4:0d:11:07:2d:15:99:ae:74:7a:10:60:19:
30:31:b3:74:d8:f1:c3:e7:7e:7c:a6:02:30:da:b5:
e4:c4:86:8b:77:45:93:cf:83:d2:0d:d7:53:68:3d:
2f:34:7a:0a:48:9c:e5:77:04:8c:b6:a8:d5:b9:ee:
a7:09:61:e4:72:13:fa:0c:c7:84:5a:1d:f7:b5:ed:
cd:a5:e6:be:3c:11:9f:0a:fc:fa:73:5f:d6:4a:34:
10:25:80:e4:45:46:20:96:57:52:35:f8:df:e9:17:
7b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DD:2F:C3:B1:CA:80:05:A1:2C:EA:80:7C:60:FB:F8:E5:FC:57:AF
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/XN0vw7HKgAWhLOqAfGD7-OX8V68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:a10:186::/48
Signature Algorithm: sha256WithRSAEncryption
0c:ea:ca:1a:7f:fb:30:0b:b0:43:66:5b:a7:14:7d:4e:ac:ad:
85:b1:bd:f7:6d:ec:88:52:ed:da:0a:fd:a5:18:3e:57:22:88:
f4:a8:90:f0:8d:05:4b:7f:71:ea:7e:e6:ea:45:e0:b8:92:20:
22:b6:15:63:a8:ab:e2:a8:39:c3:c5:f7:6b:f6:d5:a4:fd:d4:
a5:87:f2:3b:45:ab:19:c0:7d:16:0d:52:6d:ff:ff:ca:c3:9e:
dd:2b:a1:32:1c:b8:48:f3:1c:c5:5c:a3:53:97:6d:0b:f2:be:
78:1d:82:79:93:72:da:bb:1c:be:99:90:01:da:ee:ac:25:e5:
63:34:dc:37:58:12:34:77:6d:f2:08:54:7d:bd:6f:7b:89:b7:
e8:ba:75:de:c5:3c:27:b6:ba:7a:ed:27:0c:fd:75:1c:70:a1:
12:fa:a9:4c:75:a0:07:ae:d3:12:3c:a5:9c:fe:88:e3:ef:9b:
6d:37:c5:b5:a4:a4:37:2c:3f:c5:61:56:e3:87:03:43:00:2e:
76:20:d7:a0:2f:b1:cf:34:af:cc:4f:67:a5:dc:23:49:4d:57:
8b:4a:2b:63:89:4d:8a:82:83:8e:83:65:7c:13:9c:a2:e1:8f:
a4:df:f8:62:ea:52:1c:a7:16:f0:5a:75:84:26:d9:9e:e2:2e:
98:e9:a5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:44:17 2024 by rpki-client on console-ams.rpki-client.org