Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/2TTSOfXnXpV7ajNtDHqPwl7MI44.roa
File: 2TTSOfXnXpV7ajNtDHqPwl7MI44.roa (raw, json)
Hash identifier: M1KIGmV5ggp3Vd0lKz9ca9hTrBlPH2nIY1F8We0HeSU=
Subject key identifier: D9:34:D2:39:F5:E7:5E:95:7B:6A:33:6D:0C:7A:8F:C2:5E:CC:23:8E
Certificate issuer: /CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Certificate serial: 018CC500C55F6EF33D34DD252E227C5B010C
Authority key identifier: 8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/2TTSOfXnXpV7ajNtDHqPwl7MI44.roa
Signing time: Mon 01 Jan 2024 12:30:11 +0000
ROA not before: Mon 01 Jan 2024 12:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1213
IP address blocks: 160.6.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:c5:5f:6e:f3:3d:34:dd:25:2e:22:7c:5b:01:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Validity
Not Before: Jan 1 12:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d934d239f5e75e957b6a336d0c7a8fc25ecc238e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:24:cd:f4:84:b3:a3:e9:d6:08:f1:ac:6d:52:
c0:06:42:a6:4b:8d:90:96:d6:7e:32:5b:99:1e:eb:
4d:ea:c8:ba:0f:5e:d6:e1:6b:ee:f7:17:ec:70:a9:
02:06:31:fe:f4:37:42:e3:49:74:ec:53:09:09:19:
a0:44:f0:c2:8f:93:c5:39:fb:c4:a7:6f:1a:55:96:
5c:38:1d:87:8e:60:14:32:b8:17:56:4f:bc:7a:f4:
99:a1:e0:4e:d3:8d:56:2d:2e:60:95:43:a0:2c:24:
e2:a5:e1:0f:c8:87:09:b2:35:4c:c5:f0:b6:8e:03:
d7:ff:bb:01:bd:27:c3:f0:65:6c:35:00:72:90:29:
da:5c:f6:e0:9e:f5:c3:61:a0:b1:db:c1:66:7c:3f:
80:43:2c:ab:63:a3:80:a0:c3:55:af:3b:e3:ac:e7:
ea:38:60:43:17:d6:5b:1a:1f:95:e0:3a:0c:8f:0f:
9c:43:51:b6:e8:e7:fe:12:2a:8e:71:57:2c:67:34:
d3:b6:c6:47:a7:4a:40:61:eb:60:a7:42:c9:33:31:
15:97:a2:19:7a:87:8c:1b:d6:f4:c4:fc:43:5a:28:
40:79:ac:e1:8d:57:2d:18:9c:65:11:d9:60:73:28:
d8:7a:ee:7e:a9:36:6c:f1:cc:30:ce:b3:ee:9a:52:
b4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:34:D2:39:F5:E7:5E:95:7B:6A:33:6D:0C:7A:8F:C2:5E:CC:23:8E
X509v3 Authority Key Identifier:
keyid:8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/2TTSOfXnXpV7ajNtDHqPwl7MI44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.6.0.0/16
Signature Algorithm: sha256WithRSAEncryption
70:2c:25:b4:e6:d9:6e:c6:f2:64:53:81:7b:9f:85:62:73:4e:
07:6a:33:64:46:5a:b4:c3:47:fe:7d:5a:14:62:7f:9d:86:07:
eb:f8:13:58:76:85:7c:02:34:08:50:41:c9:c0:2e:55:76:87:
77:5b:fd:44:cd:d0:59:b1:1d:50:df:d8:5e:20:2d:a9:49:e3:
72:db:ed:5e:b5:6f:4e:a7:0d:ac:50:92:2b:4e:ac:cb:58:88:
c2:89:0c:8f:b0:ff:72:5f:49:54:05:a2:2e:f2:c4:a8:ea:a0:
13:d4:c2:91:b1:b1:08:40:1d:0d:36:fb:f1:3f:34:f0:1d:1b:
5d:c7:71:56:88:b6:48:f5:f0:bc:3f:3f:72:68:94:6e:47:e6:
b8:79:4d:be:2d:ad:d3:77:0c:6c:3d:cc:26:2c:36:91:ef:c7:
0c:76:db:e3:6b:e4:de:e5:51:fb:ce:28:13:e3:44:e9:08:e7:
45:5c:c1:a0:d9:7f:84:7a:eb:f4:fa:d7:70:33:52:dd:43:3a:
6f:75:d9:ac:67:09:b1:d1:bc:ab:bd:58:8f:e0:ed:5c:5a:ee:
b0:b8:1b:06:9c:25:20:e0:5d:da:70:83:15:6f:00:32:18:cb:
21:87:63:13:97:7d:56:f9:94:fc:7d:f9:5e:6e:24:43:af:98:
56:a5:b8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:11:48 2024 by rpki-client on console-fra.rpki-client.org