Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/8MInqxj4916UiKo1GLX9fXcvi_Q.roa
File: 8MInqxj4916UiKo1GLX9fXcvi_Q.roa (raw, json)
Hash identifier: wbiVc6D/p7ury1PWHB28KS/FZ7SipCbEvFb97JeS1jI=
Subject key identifier: F0:C2:27:AB:18:F8:F7:5E:94:88:AA:35:18:B5:FD:7D:77:2F:8B:F4
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 018CC3B73C812BD4F0686C012605EDEF116E
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/8MInqxj4916UiKo1GLX9fXcvi_Q.roa
Signing time: Mon 01 Jan 2024 06:30:14 +0000
ROA not before: Mon 01 Jan 2024 06:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200078
IP address blocks: 2a13:b487:1100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:3c:81:2b:d4:f0:68:6c:01:26:05:ed:ef:11:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Jan 1 06:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0c227ab18f8f75e9488aa3518b5fd7d772f8bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7d:0b:a6:ae:8b:1f:76:b6:13:e4:51:bb:9a:
54:dc:df:eb:c4:c7:78:f9:ce:89:8a:a2:43:cd:c4:
2e:3c:5f:2f:52:27:e0:3d:44:88:ec:a3:e9:62:29:
15:bd:99:ae:b3:00:5b:90:29:5c:c5:39:9f:5c:f6:
2c:05:db:11:45:68:95:fb:bb:e5:aa:d8:f4:b2:78:
9d:59:b9:0a:d5:d9:eb:a5:3a:95:94:c6:c1:61:6d:
b6:de:6c:15:a1:b3:fc:2b:f6:56:ed:ac:c1:c8:80:
c4:ae:81:05:66:d9:13:fd:b8:f3:8e:d9:4f:4f:67:
18:13:fe:ca:02:d4:45:4d:b7:df:42:5a:89:88:50:
65:f3:4f:43:3b:4f:61:0f:54:af:cc:16:71:18:b0:
ee:e4:25:9a:6e:e7:51:b9:6c:4e:48:a1:03:cd:50:
53:98:e4:b9:da:81:88:5f:0a:d6:95:b0:ce:25:f8:
4f:9e:ea:a8:55:f8:d8:42:9b:14:5c:35:a5:85:21:
e2:09:bf:51:34:4c:85:9d:59:86:6c:61:69:32:d3:
f3:9c:9f:db:90:9f:6f:61:78:39:fb:70:ef:05:95:
5c:40:42:16:6a:a8:0e:d2:a7:1b:0f:f5:b9:c6:48:
e9:76:07:97:bb:6b:8d:7d:a8:76:39:72:79:77:49:
02:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C2:27:AB:18:F8:F7:5E:94:88:AA:35:18:B5:FD:7D:77:2F:8B:F4
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/8MInqxj4916UiKo1GLX9fXcvi_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b487:1100::/40
Signature Algorithm: sha256WithRSAEncryption
d9:81:30:c2:71:66:97:07:ed:c8:74:c4:2e:fc:9b:cc:f8:97:
bf:7b:2f:06:e8:3f:5e:bb:5d:37:e3:d4:b6:05:27:42:e0:70:
c5:1f:b0:cf:82:4b:ce:97:da:ea:fa:2f:09:47:eb:22:3c:a2:
f6:60:c4:36:28:34:b0:20:e6:ef:0c:57:58:d7:2a:0f:96:23:
cc:05:1c:a1:37:a9:bf:cd:b4:cc:cf:03:f4:d4:05:00:34:2a:
62:c6:51:12:49:4d:a0:34:63:9a:31:8e:b4:51:3a:17:4f:94:
47:aa:4b:77:27:d3:00:aa:d3:11:41:c2:1f:9c:04:f9:92:56:
28:77:2d:c5:ed:f6:14:81:3f:2d:87:13:2b:09:ba:ae:36:4e:
90:41:15:38:25:95:88:72:fa:30:59:81:66:e2:4b:74:50:ad:
bc:3a:09:e0:eb:b9:01:e7:9c:71:c5:6c:28:22:d8:f3:b7:85:
0e:14:22:f6:48:65:ed:34:98:37:64:86:57:99:32:09:43:61:
64:a6:42:02:a8:72:05:8f:ce:14:cf:f8:99:f0:50:db:18:ef:
56:b2:00:90:d9:2f:33:12:a4:a0:d4:39:71:39:ce:d0:a4:6b:
92:01:55:ec:7c:c7:61:13:01:9e:64:10:cd:c3:cc:1a:a0:b3:
ec:de:98:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:35:17 2024 by rpki-client on console-fra.rpki-client.org