Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/JRMXXLgl2U9Oc1bCV98VGLm2Coc.roa
File: JRMXXLgl2U9Oc1bCV98VGLm2Coc.roa (raw, json)
Hash identifier: oQlXBxAodDTRIOiUR3qJy9OftmZ1Ds1c9zoPnqmLFm4=
Subject key identifier: 25:13:17:5C:B8:25:D9:4F:4E:73:56:C2:57:DF:15:18:B9:B6:0A:87
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018CC801614C979E6805D551CEF503604AF6
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/JRMXXLgl2U9Oc1bCV98VGLm2Coc.roa
Signing time: Tue 02 Jan 2024 02:29:42 +0000
ROA not before: Tue 02 Jan 2024 02:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206499
IP address blocks: 2a0c:b642::/36 maxlen: 48
2a0c:b642:a00::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:61:4c:97:9e:68:05:d5:51:ce:f5:03:60:4a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 02:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2513175cb825d94f4e7356c257df1518b9b60a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:37:12:f6:21:e0:6c:d7:3c:09:25:eb:d0:6f:
b6:38:b5:9a:49:fc:f4:38:1e:3c:e6:7d:1b:b1:32:
b5:c6:a8:1c:c6:89:f4:08:db:d1:32:dd:07:c5:6a:
fe:8e:ac:3d:6a:bb:97:d1:c3:a1:ab:86:b8:f4:10:
06:ec:27:f4:a3:36:a5:3a:3d:bb:e7:53:16:0f:03:
e0:f7:e4:ca:ad:65:3d:87:bb:b6:e7:06:66:77:e0:
8a:1c:fb:1c:41:31:c1:c7:1e:a5:4b:38:ad:a6:ef:
5e:45:56:4e:32:77:3e:99:13:34:d3:94:d5:72:ff:
2f:83:9d:d7:d5:10:4c:2b:99:10:70:ab:81:dd:7b:
bb:49:8f:e8:37:3a:79:c0:f6:e0:75:34:b9:cf:8e:
2f:18:f4:d2:cc:35:cb:71:1a:6c:0b:dd:29:8b:a1:
fe:26:3e:f8:d4:46:75:d5:37:85:d8:49:45:84:8f:
85:08:36:01:eb:17:81:4c:aa:f7:8a:00:10:5b:99:
af:5b:45:4b:3f:06:a3:bc:e0:63:a0:74:dd:3f:e8:
6f:82:bb:32:c1:ea:7d:83:1f:9e:a7:3a:8c:30:1e:
5f:04:44:9c:0a:a0:c2:ee:78:d6:07:98:7d:0c:ca:
3b:70:4e:df:cd:2d:03:15:0e:79:c9:3d:ce:8e:c5:
ee:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:13:17:5C:B8:25:D9:4F:4E:73:56:C2:57:DF:15:18:B9:B6:0A:87
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/JRMXXLgl2U9Oc1bCV98VGLm2Coc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b642::/36
Signature Algorithm: sha256WithRSAEncryption
14:f3:4f:88:46:b9:7d:4a:d5:8f:e4:0c:7c:b7:70:a9:cd:4c:
59:ad:c9:12:89:20:b0:db:f3:a2:77:25:f6:e0:73:ae:da:ea:
51:27:6b:2e:1b:fe:1c:eb:78:34:51:56:9d:f4:29:8e:0f:20:
bf:23:d1:f0:bc:a8:72:d4:24:76:44:bd:a9:3d:50:76:0b:c8:
09:9c:38:d7:29:e2:29:dc:0f:c8:68:c2:ff:5c:30:93:8f:9a:
e8:da:28:09:8a:f9:f1:30:45:65:28:f6:fe:9c:17:52:08:a9:
e8:88:ae:92:78:d8:50:54:02:01:ac:a5:2f:54:3f:0f:30:15:
4f:d8:0b:4b:85:bf:b5:c1:5a:d4:fd:5f:54:cf:e7:26:cf:88:
08:86:26:e6:6d:af:d3:fa:93:91:1f:25:76:0b:82:3c:46:be:
3a:07:1f:55:72:28:35:0c:82:48:b1:55:a1:1e:f2:28:da:e8:
8b:fe:a7:1d:07:7c:26:1d:3f:dc:7e:1a:2c:29:ee:3e:11:51:
9d:90:2d:ce:e8:7e:d5:82:50:ec:03:35:6b:a4:05:3e:55:a2:
ad:af:09:49:85:ba:c7:32:38:34:c1:90:51:9a:1e:9c:93:02:
5a:48:e7:ce:e6:9b:79:b4:c8:72:41:b2:b3:08:5c:62:78:c1:
d8:2c:34:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:03:10 2024 by rpki-client on console-ams.rpki-client.org