Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/xmJ3uEpjtFFBai2EVlXYd3C-VEQ.roa
File: xmJ3uEpjtFFBai2EVlXYd3C-VEQ.roa (raw, json)
Hash identifier: HiRxE7tCJ8nBvkqRXjq5PtfqwQjxuRotzYPFl+Kr840=
Subject key identifier: C6:62:77:B8:4A:63:B4:51:41:6A:2D:84:56:55:D8:77:70:BE:54:44
Certificate issuer: /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial: 018CC2DB60C65F62DEE29AC928B366ABE235
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/xmJ3uEpjtFFBai2EVlXYd3C-VEQ.roa
Signing time: Mon 01 Jan 2024 02:30:06 +0000
ROA not before: Mon 01 Jan 2024 02:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213109
IP address blocks: 2a07:22c1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:60:c6:5f:62:de:e2:9a:c9:28:b3:66:ab:e2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
Validity
Not Before: Jan 1 02:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c66277b84a63b451416a2d845655d87770be5444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9e:77:8c:0f:d7:54:1e:17:c7:4e:b4:fc:d0:
87:10:be:eb:ba:f7:67:40:ff:ed:34:1c:bc:7a:9f:
3a:2a:d8:e9:d5:a0:33:51:85:8f:97:79:69:35:21:
d8:f2:ba:b5:1d:29:9a:84:e1:15:3f:65:53:72:0a:
1a:b4:1b:af:55:21:5d:98:2e:15:62:6e:4a:ac:76:
ba:2c:7d:9f:1d:49:78:27:ca:5c:87:72:77:2a:11:
bf:fe:9f:37:68:7f:86:84:2d:15:e3:5b:2b:87:06:
d9:5b:5f:ee:1f:02:b1:c0:ec:c4:a0:00:2d:3d:79:
07:7b:c0:c4:4f:bb:ea:f3:36:3d:96:bd:17:ff:c1:
c4:19:e8:1b:d4:7e:69:43:ca:2e:af:f3:36:ce:9e:
86:9f:66:37:8e:93:29:b9:27:68:69:51:ed:4f:30:
7b:15:85:46:c5:01:ab:a9:17:14:36:aa:0c:e8:7a:
67:99:4a:d4:be:b6:b9:21:a4:fc:98:fc:8e:a8:88:
a9:36:bb:71:fa:1a:c5:78:04:33:2c:0a:87:d5:b1:
f8:e8:2d:af:00:fa:8c:67:bd:4c:92:63:fd:1c:5e:
7b:49:67:c5:29:ec:34:d6:07:23:67:9f:7a:ba:d0:
79:30:57:6d:7a:ac:8f:c6:5a:c6:50:f5:8a:5e:48:
93:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:62:77:B8:4A:63:B4:51:41:6A:2D:84:56:55:D8:77:70:BE:54:44
X509v3 Authority Key Identifier:
keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/xmJ3uEpjtFFBai2EVlXYd3C-VEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:22c1::/48
Signature Algorithm: sha256WithRSAEncryption
8b:3b:71:1f:3a:53:95:7c:bb:1e:06:2a:41:ca:bc:42:ae:5e:
dc:6c:e3:7e:65:50:ba:e0:b1:0d:70:d6:f9:8d:95:5f:69:2f:
9f:4c:04:2e:4a:b6:5d:b3:c4:87:a3:33:c8:9e:ca:6a:2d:e0:
04:ba:5e:0e:48:9d:30:0a:c4:ed:af:ba:77:ab:db:9e:0d:4e:
6a:58:f3:1e:d9:41:96:d0:9a:8c:e4:69:af:c5:80:b6:40:5d:
da:b2:08:cd:40:5b:ec:25:3f:d6:17:03:10:06:38:db:1d:3e:
f6:55:58:46:4f:23:0a:70:91:41:4c:64:ce:62:e8:11:e7:08:
cb:48:5a:4f:2e:24:ae:05:69:63:35:11:82:86:64:f5:75:9c:
c4:cf:59:6b:9e:62:2d:83:ac:57:50:ee:67:d7:49:71:d7:22:
a9:2a:c2:b2:12:7b:87:9e:36:e1:81:9c:df:3c:fa:26:45:28:
89:97:fd:89:c4:f2:f2:88:60:af:57:f9:5e:7d:65:24:31:a9:
be:3c:dd:c8:80:c3:9e:ca:ad:04:e7:a4:3b:98:a6:61:f7:7d:
8e:f8:6b:ed:ae:1f:57:f3:c4:f5:8b:0e:f1:1f:94:cc:4f:77:
41:20:cd:82:dc:af:e5:26:c9:07:cb:bc:23:cd:a1:9e:68:13:
27:cb:4f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 22:55:21 2024 by rpki-client on console-fra.rpki-client.org