Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/6FdImWMlo3G4O8w6v8vR0uwOfk0.roa
File: 6FdImWMlo3G4O8w6v8vR0uwOfk0.roa (raw, json)
Hash identifier: wx5U4py4aLl0/FBlq6cRbRre6KByVJ8saNG91154s1A=
Subject key identifier: E8:57:48:99:63:25:A3:71:B8:3B:CC:3A:BF:CB:D1:D2:EC:0E:7E:4D
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 018CCA2961FCEAA07667AB8B4DF2093D110B
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/6FdImWMlo3G4O8w6v8vR0uwOfk0.roa
Signing time: Tue 02 Jan 2024 12:32:38 +0000
ROA not before: Tue 02 Jan 2024 12:32:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208809
IP address blocks: 2a0e:8f02:f05d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:61:fc:ea:a0:76:67:ab:8b:4d:f2:09:3d:11:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 2 12:32:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e85748996325a371b83bcc3abfcbd1d2ec0e7e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ce:f1:f2:a4:53:88:42:60:d2:76:ad:48:57:
37:06:8c:50:b4:63:2c:e3:82:e0:d4:61:b2:7b:f6:
b4:d5:70:06:8f:74:94:2f:90:db:dd:3a:b0:78:11:
cc:53:c9:69:7a:73:f3:06:da:d6:ae:39:5f:89:23:
eb:43:3d:41:b9:8c:90:69:f0:81:00:90:73:a8:93:
37:02:70:5d:ac:28:ee:56:e8:fb:87:79:46:26:af:
bc:68:b6:c3:ad:9f:74:50:c7:29:50:8b:59:60:47:
4c:ff:c4:50:74:b6:7c:d0:ea:60:58:b5:b7:a7:6c:
72:d8:cd:c9:55:26:9a:2e:76:23:72:4d:58:24:3b:
3b:db:5f:f6:94:0b:84:b7:65:59:01:d1:dd:a4:96:
5e:c7:40:95:39:71:5d:f2:55:fa:31:ac:41:62:9a:
bb:5c:04:18:90:c6:e4:88:0d:ab:97:46:b8:b5:02:
08:70:77:ea:fe:c7:48:4d:53:56:bf:15:d7:20:84:
26:8e:9e:9e:19:06:f0:ec:93:74:00:2f:55:73:54:
a6:e0:c2:73:fe:24:63:4c:98:cb:e3:c7:95:2a:7d:
1c:74:9a:8f:32:b6:eb:07:ea:42:5c:92:f3:d7:cc:
20:54:d3:cb:f4:54:c1:a7:a8:57:1a:f3:ff:e3:2e:
57:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:57:48:99:63:25:A3:71:B8:3B:CC:3A:BF:CB:D1:D2:EC:0E:7E:4D
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/6FdImWMlo3G4O8w6v8vR0uwOfk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f05d::/48
Signature Algorithm: sha256WithRSAEncryption
9d:dc:83:4c:b5:50:8a:db:90:2f:b2:9e:4c:b3:ef:38:8c:ed:
41:a6:22:6b:ee:a2:44:60:7a:97:6e:7e:40:25:64:93:59:32:
ed:f7:8c:fd:69:1e:9f:76:67:ea:62:6f:5d:1f:1f:52:ae:9e:
96:9a:ac:d9:91:6f:32:66:2e:57:14:91:76:7a:75:b9:f3:e1:
2f:2e:cc:a9:ff:a9:04:12:9c:70:1d:51:c7:96:71:2f:08:f6:
d7:3b:48:ac:61:cd:75:8f:36:c7:05:fc:d5:b0:b4:fb:79:48:
d5:94:12:bf:eb:17:32:9c:2b:d0:a8:b8:50:53:51:21:69:1b:
11:63:2e:14:c3:f4:86:6a:a0:d0:4e:8a:f1:e9:5a:71:53:c7:
45:40:4c:2d:9a:11:33:20:dc:c0:00:1d:43:f8:12:8e:7b:a1:
55:58:f7:20:93:ba:d9:f1:46:fa:28:0c:96:ef:bd:35:fb:12:
f2:75:2b:19:98:13:c6:0b:77:91:25:91:fd:03:91:ce:03:46:
c6:b9:f5:3c:df:a4:54:6d:41:95:af:23:b0:db:3f:ca:5f:c7:
e5:d0:0c:48:39:a0:c5:09:e5:b8:cc:b9:f5:7d:9b:f5:22:22:
b8:d7:d5:1c:dc:5f:95:65:74:f6:7e:8c:60:45:41:56:14:45:
8b:62:4c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:38:21 2024 by rpki-client on console-fra.rpki-client.org