Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/JMo5lfYTKWZT9Ef1GDZ0beZKyfc.roa
File: JMo5lfYTKWZT9Ef1GDZ0beZKyfc.roa (raw, json)
Hash identifier: GecDWZwMVJdaoaQeFoK33CJgNff3vDXN7JIe3Dd2dCA=
Subject key identifier: 24:CA:39:95:F6:13:29:66:53:F4:47:F5:18:36:74:6D:E6:4A:C9:F7
Certificate issuer: /CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Certificate serial: 018CC26D2BB7E9ED98C8DEB8EDCCF004B261
Authority key identifier: 29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/JMo5lfYTKWZT9Ef1GDZ0beZKyfc.roa
Signing time: Mon 01 Jan 2024 00:29:43 +0000
ROA not before: Mon 01 Jan 2024 00:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13213
IP address blocks: 2a04:76c7:200::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:2b:b7:e9:ed:98:c8:de:b8:ed:cc:f0:04:b2:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Validity
Not Before: Jan 1 00:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24ca3995f613296653f447f51836746de64ac9f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:63:e5:9e:7d:bc:84:85:5e:01:f2:e0:a6:63:
a3:80:46:14:71:17:68:76:aa:49:1d:37:3f:cf:cb:
ab:df:8a:56:3c:a5:d7:3e:46:68:f4:fc:57:cd:77:
2b:2e:e7:b0:22:0c:5b:c7:9a:a9:02:99:83:4d:ed:
0d:ca:8a:0c:f2:89:b2:4f:d0:a9:b3:45:cc:2d:53:
76:33:34:fb:c9:64:d0:25:40:e6:86:37:f5:69:a0:
55:fc:6f:19:2a:74:58:6c:3a:c9:73:a5:2b:63:ed:
33:06:a0:6f:76:12:a1:d4:39:80:66:2f:48:cf:aa:
48:98:84:2f:06:99:cb:d8:86:7f:a4:43:97:51:27:
29:6c:23:84:48:e4:4f:15:b7:e9:bb:6e:4b:58:be:
3e:d5:96:64:56:ba:1f:7a:7e:ca:00:43:7f:51:8a:
09:c8:4c:5b:86:d0:98:7b:d3:38:71:7b:ba:1f:2e:
30:51:a3:c6:e7:1f:df:cb:b5:74:f7:c4:b5:75:b4:
84:45:02:50:09:74:ba:8a:70:95:bb:0f:0d:61:d1:
87:16:2f:ac:3f:d0:cd:1d:69:7f:4b:5c:f4:c7:b6:
08:73:22:3c:3a:be:be:20:6c:cf:18:8e:19:7b:9d:
75:fc:34:82:e9:da:84:80:1e:7c:ac:bd:56:e3:d7:
8f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CA:39:95:F6:13:29:66:53:F4:47:F5:18:36:74:6D:E6:4A:C9:F7
X509v3 Authority Key Identifier:
keyid:29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/JMo5lfYTKWZT9Ef1GDZ0beZKyfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:76c7:200::/48
Signature Algorithm: sha256WithRSAEncryption
48:87:68:f8:11:a0:1a:a5:af:b6:27:dc:f9:46:2d:28:93:e7:
55:71:e6:56:6f:4d:2d:69:c7:dd:7b:d7:7b:8e:27:b9:b4:ec:
a7:7b:ae:92:48:c4:9f:44:ed:ba:2b:04:79:5b:32:61:ca:6c:
af:d9:2a:d5:a6:57:20:35:5d:9d:18:40:09:03:b4:80:6c:94:
26:f2:a8:bd:a7:ec:c2:ce:5b:63:b6:e4:40:85:0c:6c:85:14:
ed:44:b4:35:85:1a:21:0b:ba:4c:02:d4:c8:05:b0:2e:af:de:
73:a4:02:99:b9:96:68:73:9f:92:53:be:2f:8f:e0:f6:b2:5f:
69:39:99:fd:4b:dc:40:1d:fb:c9:2b:7a:79:51:53:68:6b:d6:
bd:f8:cb:01:ab:ec:67:93:8a:87:66:e6:53:42:27:4d:88:31:
a1:60:55:78:ab:81:5c:49:a3:ed:b1:52:24:1d:38:b8:cf:30:
c5:c6:a1:1d:8a:14:af:8a:06:f9:33:4e:2a:c3:df:26:e2:60:
44:3b:9d:cf:d2:d5:eb:68:93:16:a5:8f:3a:12:59:b3:09:5f:
77:00:de:63:7d:d5:38:04:43:8a:1c:78:2e:54:3e:a1:71:3a:
dc:dd:17:59:84:24:17:ef:02:09:19:7e:5b:1c:90:77:2f:88:
4d:d8:ce:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:39:43 2024 by rpki-client on console-fra.rpki-client.org