Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/2M70nxbLqnt65PB66pYaB-R_6pY.roa
File: 2M70nxbLqnt65PB66pYaB-R_6pY.roa (raw, json)
Hash identifier: avqN05agZf1q8s+MNe8lVvICJ2NlsujNu30WMXU9n74=
Subject key identifier: D8:CE:F4:9F:16:CB:AA:7B:7A:E4:F0:7A:EA:96:1A:07:E4:7F:EA:96
Certificate issuer: /CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Certificate serial: 018CC26D08F308FFE506D7447E82D8FCD5B2
Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/2M70nxbLqnt65PB66pYaB-R_6pY.roa
Signing time: Mon 01 Jan 2024 00:29:34 +0000
ROA not before: Mon 01 Jan 2024 00:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62177
IP address blocks: 2a0c:9480::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 11:28:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:08:f3:08:ff:e5:06:d7:44:7e:82:d8:fc:d5:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Validity
Not Before: Jan 1 00:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8cef49f16cbaa7b7ae4f07aea961a07e47fea96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:89:43:a8:20:db:59:f1:fc:95:ac:78:a2:a2:
36:ed:dd:fe:4b:45:86:97:0c:25:26:d3:ab:f8:3b:
a9:04:d8:03:26:ca:53:32:1b:70:8a:88:15:9c:c0:
e5:7f:22:be:bf:2f:33:83:04:3d:4d:be:95:13:26:
fd:fa:67:f1:ec:07:f4:ef:57:b2:57:d6:02:42:fc:
ff:c7:a8:d0:c0:5d:04:2e:1d:78:ac:1b:04:bd:a4:
51:83:d6:36:de:10:c8:63:08:0b:9e:87:c3:14:20:
98:fe:e7:55:45:11:41:a7:63:3a:d0:08:07:d7:63:
f0:45:c7:78:cb:07:53:31:8f:47:bf:88:e5:f4:02:
65:4a:30:0c:7a:95:4f:c1:e9:3a:bb:ef:44:ba:37:
9e:28:ea:fa:58:04:33:df:45:61:d6:22:da:ca:a4:
c5:1b:0e:29:47:8f:43:5d:f9:a5:10:21:c4:19:a3:
d6:04:54:c1:44:c0:a5:61:90:17:6d:eb:34:85:65:
0e:0d:c1:7c:fc:a9:22:0e:b4:9d:88:3f:af:ec:11:
24:c4:82:41:93:8a:2b:56:67:da:1b:76:6f:11:b2:
3e:79:aa:02:83:0e:cb:67:63:1e:de:d0:f1:01:8c:
06:8c:ee:21:a7:78:1b:71:43:55:21:ca:e1:a1:46:
66:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CE:F4:9F:16:CB:AA:7B:7A:E4:F0:7A:EA:96:1A:07:E4:7F:EA:96
X509v3 Authority Key Identifier:
keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/2M70nxbLqnt65PB66pYaB-R_6pY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9480::/29
Signature Algorithm: sha256WithRSAEncryption
5a:8a:e1:7c:13:36:f6:b9:ae:6a:2c:9a:ef:48:6d:e8:c5:6b:
a4:ae:9c:7a:4d:b0:a3:24:ad:0f:f7:cc:e8:70:d8:6b:11:ea:
51:21:14:90:25:f5:00:18:15:3a:21:78:65:36:9b:b8:58:f8:
24:b3:fa:3f:b5:13:c2:b2:11:5e:03:39:62:ac:91:f4:0f:72:
57:9c:39:74:27:aa:fb:ef:87:34:b4:4f:db:0a:15:72:4d:4d:
ce:08:29:da:dd:92:0f:05:33:5a:13:87:33:7e:a9:bf:a5:0a:
27:3e:5a:a6:bd:e9:4a:13:ae:3b:43:bc:ad:6c:9f:85:4f:36:
8c:52:c0:b2:40:b9:63:58:8a:d3:c3:49:55:57:71:8d:b3:bd:
b5:bb:e4:3a:2a:36:be:74:dc:31:28:35:a9:90:86:f3:77:f3:
4f:99:42:83:00:fe:0b:92:64:a3:5c:51:6a:37:22:c9:fd:fe:
fb:5c:2d:55:67:8e:03:a0:49:bd:28:7b:29:79:0a:3c:c2:ce:
f4:34:17:50:51:90:b9:c9:9e:b3:bd:9b:46:29:93:a2:79:07:
54:e0:bf:1b:95:8e:dc:cb:51:aa:3a:c7:4a:d1:38:18:d7:b4:
3e:a2:6e:39:73:4e:c6:3b:f1:6e:95:aa:5b:27:5b:83:ed:f6:
42:c7:a2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:07:16 2024 by rpki-client on console-fra.rpki-client.org