Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/jc2C7IxpW78uAHvLhqllOQqx_Fg.roa
File: jc2C7IxpW78uAHvLhqllOQqx_Fg.roa (raw, json)
Hash identifier: FOQBY3wUNvxVA1j+o9KqM2GRFV1alJrPoPyrXy9CNPg=
Subject key identifier: 8D:CD:82:EC:8C:69:5B:BF:2E:00:7B:CB:86:A9:65:39:0A:B1:FC:58
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 018CC3B73DFC15089CC5C64FA079BA75255E
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/jc2C7IxpW78uAHvLhqllOQqx_Fg.roa
Signing time: Mon 01 Jan 2024 06:30:15 +0000
ROA not before: Mon 01 Jan 2024 06:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211293
IP address blocks: 2a13:b487:4100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:3d:fc:15:08:9c:c5:c6:4f:a0:79:ba:75:25:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Jan 1 06:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8dcd82ec8c695bbf2e007bcb86a965390ab1fc58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6e:43:18:48:3a:ad:54:05:5a:57:a1:2e:cb:
21:c9:05:15:6f:02:63:81:53:91:05:34:cc:cf:aa:
bb:5f:af:1e:c3:0f:99:7c:77:a9:8f:90:c7:80:b3:
f7:cc:dd:da:85:9b:bc:53:b9:85:c1:02:d4:74:cb:
46:41:21:1a:3d:90:e7:0e:88:62:0a:46:f9:07:d6:
72:ed:61:46:34:7e:be:81:25:92:4a:7a:cc:fe:f3:
12:77:64:3e:c5:60:c9:1e:79:10:84:51:a8:09:85:
02:40:a8:13:65:9d:1b:16:82:ce:f4:2d:14:dc:e3:
dc:3c:72:cb:c5:1a:ff:ad:e9:6a:65:15:b1:f2:6c:
cf:3d:5e:cb:39:af:f6:a6:9f:15:1c:9b:bc:77:ec:
4a:2c:00:68:db:b9:32:a8:37:bd:7b:a9:39:f2:c7:
ae:bf:1c:00:50:18:79:cc:bb:3e:fa:8b:e5:78:ef:
b4:a5:d0:5d:20:93:7d:c9:37:b5:9c:96:8c:7b:86:
25:9e:b2:39:cd:88:15:6c:4b:bf:87:a8:05:c9:4d:
3e:c4:14:cf:2a:50:dd:b6:de:25:dc:81:a1:1b:ce:
a1:fc:01:d2:56:97:54:07:d2:23:37:ef:e1:64:87:
a3:c1:fa:ed:ad:52:a6:56:fc:bf:03:12:b9:4a:e8:
a8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:CD:82:EC:8C:69:5B:BF:2E:00:7B:CB:86:A9:65:39:0A:B1:FC:58
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/jc2C7IxpW78uAHvLhqllOQqx_Fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b487:4100::/40
Signature Algorithm: sha256WithRSAEncryption
9f:fa:5f:69:6a:46:35:2e:f1:6a:3b:5e:cc:a1:b0:ce:c0:6a:
59:b2:03:40:cc:26:fe:9c:9c:e3:46:da:dd:f8:8c:e7:d2:e3:
41:f7:ba:2e:97:56:82:c3:83:3d:e7:d8:4f:a7:41:1d:9f:05:
bf:1b:16:e5:a6:c9:29:76:88:23:8d:b8:c9:56:1a:f2:9e:2e:
d2:a0:01:86:de:f1:f7:87:39:15:f3:62:71:3c:ee:fe:4d:6e:
e2:4a:b5:ff:3e:4c:f4:1d:51:ab:13:81:d1:78:b5:5c:97:64:
d8:7b:69:09:b8:a4:25:ad:0b:27:ea:bc:11:91:47:57:5e:8e:
cf:86:c2:e0:09:ea:3c:9f:3a:6b:60:48:18:9a:cb:da:38:dc:
c4:56:bf:91:56:af:ef:35:d0:f7:f5:86:be:08:e2:bd:3f:bb:
d6:0f:b5:17:f3:a9:d8:97:09:b1:5e:f0:db:f7:6f:06:12:c5:
20:db:35:81:ed:d8:2d:70:7a:bc:8d:72:65:29:c1:2a:ad:28:
d6:a7:46:0f:b1:30:82:61:04:cd:60:6e:a6:1a:4c:b3:40:f1:
21:9d:b6:72:1a:47:f9:94:bb:4f:71:90:bf:0b:30:76:c6:56:
31:58:d9:eb:95:32:8c:90:a3:1e:7e:f8:12:11:63:72:2a:31:
ac:6d:07:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 12:36:08 2024 by rpki-client on console-fra.rpki-client.org