Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/b1sYY2HF3tXzWOCovnulvuM5T4c.roa
File: b1sYY2HF3tXzWOCovnulvuM5T4c.roa (raw, json)
Hash identifier: GAa6Pw1fgfuHKM7PZ1AFiDp1hgGo+PklbLc77NUYzt8=
Subject key identifier: 6F:5B:18:63:61:C5:DE:D5:F3:58:E0:A8:BE:7B:A5:BE:E3:39:4F:87
Certificate issuer: /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
Certificate serial: 018CC8DCF7AF62B89586A8EC3037705B835F
Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/b1sYY2HF3tXzWOCovnulvuM5T4c.roa
Signing time: Tue 02 Jan 2024 06:29:33 +0000
ROA not before: Tue 02 Jan 2024 06:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209309
IP address blocks: 2a0e:e0c5::/32 maxlen: 32
2a0e:e0c2::/32 maxlen: 32
2a0e:e0c1::/32 maxlen: 32
2a0e:e0c6::/32 maxlen: 32
2a0e:e0c4::/32 maxlen: 32
2a0e:e0c3::/32 maxlen: 32
2a0e:e0c7::/32 maxlen: 32
2a0e:e0c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:f7:af:62:b8:95:86:a8:ec:30:37:70:5b:83:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
Validity
Not Before: Jan 2 06:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f5b186361c5ded5f358e0a8be7ba5bee3394f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:35:f1:ce:44:54:95:4e:26:8c:56:7c:08:3a:
33:7a:45:fe:d0:17:88:d8:55:14:bf:89:48:08:21:
a8:79:f8:07:e0:15:bf:50:3f:d9:82:05:df:a8:09:
32:d8:5d:0b:3d:6f:47:e5:1b:14:a5:80:e8:dd:9a:
b6:5c:9e:19:9f:6a:9c:63:47:33:8c:a0:8a:e2:7f:
fc:9b:b6:bc:b9:49:8a:f5:a9:d2:03:16:19:47:91:
69:af:fd:0e:c9:26:81:3e:12:51:bb:f4:a9:6e:65:
d7:ad:2f:6a:78:59:b8:82:bb:b8:ff:d5:c0:a0:c2:
10:9c:fd:2b:63:66:62:72:08:d6:ea:15:44:a4:cf:
dd:4a:96:c7:a9:c7:01:2e:1c:42:e2:bd:5b:6f:9f:
14:7c:f7:93:4b:ac:44:4d:bd:8f:ec:cb:37:ff:94:
54:7b:62:98:28:6f:ec:92:25:08:55:da:88:8f:2c:
25:f7:5a:9e:cb:ce:43:5c:80:c9:ef:cb:75:e0:26:
68:ba:27:af:52:2a:35:37:3d:e3:36:40:f0:c1:f9:
7e:23:3d:bf:3f:b0:d7:27:b9:cf:df:a6:a5:c8:45:
d5:cb:c2:c4:8b:78:48:0e:c0:50:92:18:fb:ed:36:
41:49:12:80:24:d8:96:91:6f:31:b4:f1:a4:8b:55:
71:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5B:18:63:61:C5:DE:D5:F3:58:E0:A8:BE:7B:A5:BE:E3:39:4F:87
X509v3 Authority Key Identifier:
keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/b1sYY2HF3tXzWOCovnulvuM5T4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:e0c0::/29
Signature Algorithm: sha256WithRSAEncryption
64:8d:ee:4f:63:44:09:cc:3b:86:66:c3:97:67:e2:79:a1:74:
b4:d6:06:df:b7:d5:61:61:8b:4d:95:4a:0d:4e:cb:87:31:4f:
25:cd:7f:e5:97:f5:86:50:f5:b0:2c:65:1f:e9:66:a0:57:a1:
f7:58:d4:d5:45:24:05:d3:41:72:fc:09:98:f5:27:00:8b:16:
89:6a:e1:ce:fb:07:a2:5e:04:be:85:14:63:6a:61:2b:4f:bd:
3c:18:5d:f6:e6:e2:6d:bc:34:5c:13:59:a1:01:33:45:c8:82:
d6:a7:7a:66:3e:50:76:91:2d:63:5c:cd:46:39:47:d2:7d:c2:
cf:d4:e7:75:9f:ec:98:44:f6:aa:fd:8a:4a:9a:e2:4a:d9:ca:
c2:da:3f:9b:8d:cc:4f:59:83:d0:4c:f9:bb:ae:7f:72:ce:6d:
49:4b:37:82:1a:94:b4:a4:a2:f8:b7:a5:b2:79:21:a5:5c:6c:
5e:a6:c8:6e:80:9f:3d:c4:78:92:0f:c0:f6:57:bc:c6:61:c4:
82:dc:b5:de:d9:65:f1:ae:b5:ed:f2:28:e3:94:88:4d:e4:46:
18:92:8c:d9:ad:7d:e0:34:26:28:b8:d7:fe:9e:0b:fb:95:bc:
48:85:1f:66:1c:00:ca:38:2b:91:ca:6b:c1:69:e0:a2:d5:79:
04:b7:38:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 22:13:27 2024 by rpki-client on console-fra.rpki-client.org