Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/h1S0ILwwnxtd73LeXJx_s4eu-0g.roa
File: h1S0ILwwnxtd73LeXJx_s4eu-0g.roa (raw, json)
Hash identifier: GnUWmXYg/7kqcvNPgW7PBgJ+PNvCRgdMDTZ74uiRD4I=
Subject key identifier: 87:54:B4:20:BC:30:9F:1B:5D:EF:72:DE:5C:9C:7F:B3:87:AE:FB:48
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 018CC3B738D8A2489E8ABDDF4DDA2B3964AB
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/h1S0ILwwnxtd73LeXJx_s4eu-0g.roa
Signing time: Mon 01 Jan 2024 06:30:13 +0000
ROA not before: Mon 01 Jan 2024 06:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198077
IP address blocks: 2a13:b487:4a00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:38:d8:a2:48:9e:8a:bd:df:4d:da:2b:39:64:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Jan 1 06:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8754b420bc309f1b5def72de5c9c7fb387aefb48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b3:20:40:10:09:30:ec:46:6c:1f:e0:44:2b:
27:24:b2:37:ce:a4:61:22:a9:4b:4b:b5:0c:e5:6d:
04:21:0c:c6:30:b2:87:9d:d0:e3:72:55:e2:ac:48:
b1:30:75:cd:64:8e:09:52:63:71:80:88:50:89:5b:
79:ac:45:c5:13:8d:9e:97:75:b9:ae:7c:f3:a2:b5:
35:05:08:0c:95:b2:5e:cd:af:f6:82:ff:04:97:54:
8c:d3:46:20:df:ec:5f:96:1e:23:2d:0e:6a:d0:41:
5f:73:81:67:47:bf:2b:5e:af:86:40:5a:27:37:77:
dd:52:c1:bf:63:50:7c:35:66:85:90:bc:84:63:d7:
aa:5a:04:19:9c:4e:2d:6a:a3:85:ff:86:59:11:fd:
d8:36:01:0f:06:15:5f:33:ce:ef:ff:6a:44:83:5f:
df:37:80:50:a9:bb:a9:9e:d3:79:9f:d5:d8:ee:fe:
02:02:eb:79:f5:76:22:10:87:c9:97:3b:be:d8:54:
9a:a2:02:89:ba:2c:16:2a:c0:16:96:75:31:df:7f:
dc:29:af:95:1c:d7:36:44:8c:42:3e:bf:78:09:81:
a9:e2:c2:a4:f2:ee:73:70:a3:da:5e:e5:f2:ab:31:
d8:b0:59:04:54:2e:d7:8d:86:ef:f9:8e:f9:0f:fc:
ec:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:54:B4:20:BC:30:9F:1B:5D:EF:72:DE:5C:9C:7F:B3:87:AE:FB:48
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/h1S0ILwwnxtd73LeXJx_s4eu-0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b487:4a00::/40
Signature Algorithm: sha256WithRSAEncryption
0e:7e:f9:8c:f0:55:96:2c:01:31:81:91:99:66:2f:20:c1:8b:
41:17:2b:3f:da:25:f0:f2:b4:93:d5:7c:c9:9a:07:d8:31:a6:
ed:7f:63:3e:83:b7:00:2a:11:8b:71:11:82:09:04:4a:30:a8:
5c:c0:2e:f2:38:c9:74:7b:b1:79:cd:44:94:f7:c4:b9:2b:ef:
2f:3b:42:bb:76:f1:19:b3:4d:9f:ad:e5:9b:ac:7c:94:bb:f6:
5f:95:7a:e4:21:a9:9d:4f:dc:d6:88:c3:0c:b4:4b:9c:bd:15:
45:5f:b6:b4:0b:65:ec:89:c3:f7:34:e0:81:a5:72:80:41:21:
71:af:b6:02:4a:88:02:03:8e:5a:de:97:77:e5:c2:db:d6:46:
18:2a:b4:78:97:0c:0c:39:6b:ef:d9:43:c0:94:fc:a0:f2:ed:
b0:ca:ba:eb:46:4f:00:7f:ba:31:05:6e:e8:a7:f8:10:11:de:
9f:bc:9a:b9:5f:03:75:40:3b:be:99:69:6f:16:76:66:52:fe:
d9:08:37:49:6a:d8:64:0b:79:63:f8:4f:15:c3:39:f6:35:94:
c3:f2:5a:d7:88:bd:3a:e5:84:03:2b:e8:db:9c:f0:9e:d5:73:
24:25:7f:17:03:ea:6b:e1:58:f4:8c:ba:fe:f3:01:b3:09:99:
a7:0b:df:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:09:29 2024 by rpki-client on console-ams.rpki-client.org