Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/_8XCcFEdxETexy0Dqw358b3NoPE.roa
File: _8XCcFEdxETexy0Dqw358b3NoPE.roa (raw, json)
Hash identifier: iYt/FD00ew8W5BpQc2CBuaWRLFVEUHRP7dx0nzpO39I=
Subject key identifier: FF:C5:C2:70:51:1D:C4:44:DE:C7:2D:03:AB:0D:F9:F1:BD:CD:A0:F1
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 018CC3B737F6151D8E0553DCA6D983BBFC4D
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/_8XCcFEdxETexy0Dqw358b3NoPE.roa
Signing time: Mon 01 Jan 2024 06:30:13 +0000
ROA not before: Mon 01 Jan 2024 06:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 150173
IP address blocks: 2a13:b487:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:37:f6:15:1d:8e:05:53:dc:a6:d9:83:bb:fc:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Jan 1 06:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ffc5c270511dc444dec72d03ab0df9f1bdcda0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ee:fb:28:54:2c:5c:84:43:4c:f9:2e:c6:86:
e5:bb:49:91:6d:15:1a:a2:67:43:92:7b:80:64:ec:
93:ab:68:49:c9:3d:99:d6:02:60:1a:c1:34:91:34:
e7:2c:26:c8:d1:18:b0:5e:7b:9c:63:ba:0c:73:e5:
8b:75:77:56:81:59:6f:6e:7a:f8:ed:37:f6:23:f3:
82:95:99:dc:3c:7f:06:05:b5:0a:56:73:39:7d:9c:
bb:d5:2d:0a:a8:ed:60:28:2e:a7:d3:51:a6:ef:b6:
ed:77:7e:5c:9b:31:ae:cc:fc:b0:f8:bc:28:40:8e:
80:bf:e4:e3:cc:90:8f:9e:2e:ed:2e:a5:24:66:8c:
41:75:ee:ce:e1:e5:51:32:2a:36:a1:ec:39:d0:81:
d1:ce:53:29:c0:58:68:92:38:60:34:77:a8:d0:2d:
12:4f:98:73:93:1a:d8:49:3f:62:12:d9:17:53:fe:
31:cc:c4:25:f6:d0:ad:50:85:44:a8:e7:ac:68:15:
6b:f0:42:c1:50:42:1c:ba:45:83:2b:22:f9:c3:88:
43:49:06:6d:44:e3:c5:55:d7:08:1a:82:ff:cf:a5:
36:fc:82:3e:33:95:d5:79:45:dc:06:a9:da:f8:23:
4a:d6:4b:da:58:97:d0:ff:9c:2e:e8:4b:89:e6:30:
4c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C5:C2:70:51:1D:C4:44:DE:C7:2D:03:AB:0D:F9:F1:BD:CD:A0:F1
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/_8XCcFEdxETexy0Dqw358b3NoPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b487:5000::/40
Signature Algorithm: sha256WithRSAEncryption
e0:08:81:17:ad:49:7f:8b:a8:f2:77:b1:33:c5:e6:e9:7e:17:
19:18:60:e3:4d:84:c8:32:11:95:8c:6d:57:2b:29:70:bd:af:
3b:8d:25:b5:af:cf:80:b5:9e:0e:33:d4:f4:c9:3d:f4:bf:28:
3a:dc:e2:84:7d:36:c8:d6:9f:cc:59:d0:c2:e5:4c:a0:cb:88:
e7:bb:49:a5:15:28:f1:ec:0b:9c:2a:13:a0:7a:e4:ee:46:5e:
b4:12:92:0a:6b:2d:56:61:28:f3:e8:04:c7:9f:48:45:79:65:
cd:36:87:4a:ca:84:d4:ba:b7:b2:d3:1b:63:37:30:be:09:7b:
48:76:38:17:51:57:21:7e:cb:bc:c7:29:40:8b:29:27:9d:b7:
4f:5b:c4:1e:34:68:ac:46:35:0c:d5:14:eb:fd:13:8b:79:1f:
d8:aa:8d:6b:52:df:f1:62:36:25:e7:47:04:4b:fe:ba:84:51:
43:dc:44:ac:bf:53:a6:ef:e5:31:a3:35:c5:01:84:1a:fb:64:
a4:a4:88:40:40:d5:da:6c:2a:7e:f7:77:04:45:1c:b9:0f:52:
53:fc:1c:24:b6:4c:cf:d9:4a:03:be:13:90:14:75:82:54:87:
d0:d6:68:14:47:a9:56:e6:ca:87:13:b1:5f:b3:c0:5e:1d:cb:
c1:c7:89:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:40:44 2024 by rpki-client on console-fra.rpki-client.org