Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/xpcGhu6N96p0MxVFVw9wpTn6n88.roa
File: xpcGhu6N96p0MxVFVw9wpTn6n88.roa (raw, json)
Hash identifier: vGvC9LpE1teBf6xma9xiviC6TT6Jzc1prFkVbkySDhE=
Subject key identifier: C6:97:06:86:EE:8D:F7:AA:74:33:15:45:57:0F:70:A5:39:FA:9F:CF
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018CC42573F2833144C6512EB8C4EAA93E14
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/xpcGhu6N96p0MxVFVw9wpTn6n88.roa
Signing time: Mon 01 Jan 2024 08:30:37 +0000
ROA not before: Mon 01 Jan 2024 08:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212623
IP address blocks: 2a0b:b83:ff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:73:f2:83:31:44:c6:51:2e:b8:c4:ea:a9:3e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 08:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6970686ee8df7aa74331545570f70a539fa9fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c4:3a:88:1b:b1:c2:52:bf:f4:c4:4d:2f:16:
3b:bb:90:f2:76:c4:38:e6:e8:21:75:09:aa:c4:37:
87:2c:20:0d:ea:84:43:b4:1e:df:51:f8:5b:ff:65:
af:a2:d7:08:20:4f:98:92:04:21:dc:09:9e:f0:09:
33:6c:1c:c6:77:e9:d0:e5:24:43:b4:b4:5f:16:d6:
b3:fd:c8:37:20:7f:62:c7:45:43:2d:8b:50:4c:a1:
5e:40:c7:c1:87:da:d0:0e:51:35:66:5c:74:b1:4d:
f5:9f:38:6f:ab:24:ea:b9:d9:56:8a:5d:55:44:1b:
c0:23:78:79:f0:f3:fc:75:a9:d6:b6:c1:21:2d:dc:
a7:5f:42:00:a6:08:d0:ad:ae:6f:52:39:c3:2f:02:
d3:f7:81:90:48:60:ea:ba:ad:68:e7:f9:85:a9:3b:
24:15:a8:01:94:38:61:46:81:94:2b:62:d4:92:02:
79:4c:af:18:d3:cd:27:78:19:e5:3c:86:57:5b:ec:
3c:5b:e9:93:90:13:a2:1f:26:27:a5:e4:1d:fc:a5:
64:33:8c:0e:f0:83:8f:60:db:96:7c:77:10:fb:9a:
3b:b5:30:89:a1:b7:fd:a3:4c:17:7e:57:4f:74:4f:
78:19:22:ed:65:fe:43:44:d4:df:44:aa:d6:e1:a2:
87:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:97:06:86:EE:8D:F7:AA:74:33:15:45:57:0F:70:A5:39:FA:9F:CF
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/xpcGhu6N96p0MxVFVw9wpTn6n88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b83:ff::/48
Signature Algorithm: sha256WithRSAEncryption
85:1a:93:85:60:6a:40:6e:8d:35:8f:36:76:58:8e:fc:90:c9:
0b:86:91:f3:a6:da:2a:42:27:8f:bd:3e:ad:1d:ce:d3:95:79:
f7:87:fe:2d:f5:9c:47:29:4b:42:21:bd:d4:bc:8f:3c:a5:88:
24:a2:6a:f1:93:de:29:bc:79:4f:f3:b4:de:ff:57:77:af:99:
83:d3:fc:84:a9:55:cf:d1:e7:bd:d3:d0:69:6b:76:c2:6c:70:
9b:87:ea:9c:1d:18:c4:8b:40:83:58:a3:85:42:51:65:8e:70:
b2:72:0a:b7:98:0f:3a:d0:6e:19:57:5e:ea:ce:0f:9e:85:c5:
6d:bd:d1:59:f0:08:0e:71:1a:94:ce:04:a5:bc:fd:8a:d3:1c:
23:3c:d5:95:6d:fb:2c:0c:98:0f:d0:94:4f:cf:ae:01:0c:01:
3c:7b:7d:93:06:4f:7e:2e:b7:6f:41:1c:68:c4:90:95:c7:6e:
eb:c8:e4:e7:4d:b8:36:58:e4:8b:b6:4d:07:ff:92:a6:8e:6c:
56:15:2f:bd:6e:ab:95:bf:77:54:b5:e5:0e:fc:5f:74:8f:3b:
6d:96:7e:59:56:55:b8:23:83:3d:d2:49:da:89:1c:3c:69:1b:
26:97:51:b9:eb:b3:5c:4a:b9:66:26:2b:bb:a5:6d:eb:16:db:
04:82:dc:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:13:52 2024 by rpki-client on console-ams.rpki-client.org