Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/L_N6jW2eKeeJs0Vi3zZLjkGSh-g.roa
File: L_N6jW2eKeeJs0Vi3zZLjkGSh-g.roa (raw, json)
Hash identifier: 03+NEMADuLrKYiLY8iuXFIWWQniOpavlsZZCuNleSP0=
Subject key identifier: 2F:F3:7A:8D:6D:9E:29:E7:89:B3:45:62:DF:36:4B:8E:41:92:87:E8
Certificate issuer: /CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Certificate serial: 01903A7CC83EEE070A954EC91666DAC94181
Authority key identifier: 3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/L_N6jW2eKeeJs0Vi3zZLjkGSh-g.roa
Signing time: Fri 21 Jun 2024 11:09:34 +0000
ROA not before: Fri 21 Jun 2024 11:09:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200373
IP address blocks: 2a07:db80::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 17:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3a:7c:c8:3e:ee:07:0a:95:4e:c9:16:66:da:c9:41:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Validity
Not Before: Jun 21 11:09:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ff37a8d6d9e29e789b34562df364b8e419287e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b6:4d:8b:8e:a5:cc:cb:82:d3:85:98:84:35:
e0:9e:34:6b:21:42:be:ee:10:b5:cf:e9:a6:b2:9a:
35:8d:b2:d4:b7:b0:16:19:ec:7c:d9:68:b2:ac:1f:
c5:50:fd:1a:7c:52:60:29:1d:0d:9d:34:18:81:fd:
41:7c:8f:fc:5b:ce:35:f1:30:82:59:85:6b:0c:34:
6d:46:f3:70:ac:42:5b:2c:4f:50:5b:55:36:06:5a:
8d:35:09:94:4a:8c:3d:f1:a0:cd:c3:94:0c:ce:27:
98:43:30:5e:4e:8b:61:08:db:c4:d4:a9:96:7d:83:
40:46:57:6d:37:2c:a8:ec:00:b0:fa:a7:e2:6e:bd:
74:32:dd:69:1c:6f:3c:d2:2e:5e:ca:57:c1:5a:2d:
3d:93:29:9c:96:63:3f:c1:9c:83:82:ce:f5:a7:0f:
f8:05:8f:73:cd:2b:21:91:ff:a7:a5:b8:ee:dd:7f:
a2:75:16:4d:13:1f:63:8e:60:7f:17:78:36:e8:bb:
92:d8:01:8f:3a:47:e0:08:e7:74:f2:00:0f:3e:0c:
e3:d0:10:6a:3e:ac:54:fa:a7:19:1e:22:94:45:ac:
f3:17:e1:d5:1e:fa:39:e6:a5:89:0c:d2:4f:d6:f5:
d1:0f:0e:32:ad:9b:9e:89:31:e3:ba:0a:3b:a4:6f:
8b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F3:7A:8D:6D:9E:29:E7:89:B3:45:62:DF:36:4B:8E:41:92:87:E8
X509v3 Authority Key Identifier:
keyid:3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/L_N6jW2eKeeJs0Vi3zZLjkGSh-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:db80::/29
Signature Algorithm: sha256WithRSAEncryption
2b:29:78:5e:b6:52:9d:cb:8a:98:e0:72:80:c7:82:99:48:97:
00:c1:57:d9:67:98:2b:ee:3a:3e:ad:de:cb:92:4d:d8:db:02:
f0:08:25:8e:a2:df:15:71:dc:ff:ba:e7:85:9b:98:4d:dc:b2:
93:f7:20:69:ea:0d:7c:f9:f3:a2:2c:94:dc:05:73:30:d6:47:
c0:54:f6:73:8c:bb:7c:ec:c8:34:45:77:b4:f2:67:82:b8:e3:
9f:ed:27:47:11:b1:bc:30:7c:da:c5:3a:27:c5:83:36:c4:c8:
c4:3a:a3:27:cc:86:10:9f:34:39:c3:62:58:46:51:1c:f5:69:
47:9e:0c:e7:19:d9:ab:77:0e:1e:56:93:82:87:0f:11:77:66:
df:80:67:98:29:44:25:9a:ed:d2:14:83:5a:86:ec:7f:4f:97:
25:08:ee:ee:a7:d5:00:ac:b9:16:50:da:a1:9e:f4:dc:26:cf:
47:02:ce:4d:b2:d4:2f:dd:50:2f:a7:ec:70:71:75:f7:81:dc:
ee:ae:f6:50:52:a6:de:8c:1f:cf:82:38:ea:db:64:32:a5:02:
61:5b:c0:83:4e:e4:1c:22:cc:e3:bb:65:ce:97:74:df:61:fe:
6e:a5:c3:16:73:07:30:26:2b:1a:ad:a2:da:39:fe:e8:69:e4:
f0:c3:66:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:32:27 2024 by rpki-client on console-fra.rpki-client.org