Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/jsqmfOOlDxV3S5NEuOiokCpm-HY.roa
File: jsqmfOOlDxV3S5NEuOiokCpm-HY.roa (raw, json)
Hash identifier: 35GNGpMX1eKoWaTDnAoj+8UotrnrkMkEFYm4/uW5/W4=
Subject key identifier: 8E:CA:A6:7C:E3:A5:0F:15:77:4B:93:44:B8:E8:A8:90:2A:66:F8:76
Certificate issuer: /CN=bc0078a27f1003263c4c561b0250766f2f526e7d
Certificate serial: 01916AC9E778194A06ED4297F03E23051059
Authority key identifier: BC:00:78:A2:7F:10:03:26:3C:4C:56:1B:02:50:76:6F:2F:52:6E:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/jsqmfOOlDxV3S5NEuOiokCpm-HY.roa
Signing time: Mon 19 Aug 2024 13:18:22 +0000
ROA not before: Mon 19 Aug 2024 13:18:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30058
IP address blocks: 2001:3680::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6a:c9:e7:78:19:4a:06:ed:42:97:f0:3e:23:05:10:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc0078a27f1003263c4c561b0250766f2f526e7d
Validity
Not Before: Aug 19 13:18:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ecaa67ce3a50f15774b9344b8e8a8902a66f876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:02:7b:61:50:83:a0:de:03:d1:6d:42:27:a2:
c6:ce:66:8f:4b:04:2a:89:7a:c1:3d:2d:54:60:22:
77:f9:9e:d3:24:27:64:63:e4:67:ce:d4:69:d1:20:
31:d2:99:ba:e4:3d:cb:5c:dc:b2:88:f3:4b:55:78:
8a:e4:b9:16:24:ba:ee:57:bf:ef:6b:47:4f:48:27:
64:a3:9f:de:dc:b7:1c:6d:ae:2c:6c:d9:d8:f4:dd:
b8:1f:7a:74:b1:f1:d0:a1:83:37:a1:9d:d7:3a:47:
6f:47:66:97:f7:56:3b:d6:77:be:02:f0:4b:06:b7:
cc:62:6f:48:bc:4a:1c:ca:f4:b9:aa:5a:56:3c:88:
4f:a1:f6:2a:2c:22:b5:d2:22:bb:65:bd:f6:ee:e7:
b7:78:89:b5:dc:34:a2:91:9c:fd:21:36:68:b0:58:
a7:2b:08:03:00:cd:05:94:da:69:1f:88:91:8f:9f:
d7:ee:20:5e:a2:5a:ea:8a:dd:d6:ae:6a:2b:cc:43:
f3:99:3b:19:a3:18:38:39:4f:1a:16:68:69:05:02:
dd:e4:36:67:34:42:a7:d5:69:c5:d2:cd:7b:71:36:
b9:b8:78:0b:00:fd:36:c7:e2:00:72:ee:bd:cf:33:
4d:1e:bc:0d:59:5b:ef:d1:0d:1b:d8:ce:d8:59:0b:
40:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CA:A6:7C:E3:A5:0F:15:77:4B:93:44:B8:E8:A8:90:2A:66:F8:76
X509v3 Authority Key Identifier:
keyid:BC:00:78:A2:7F:10:03:26:3C:4C:56:1B:02:50:76:6F:2F:52:6E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/jsqmfOOlDxV3S5NEuOiokCpm-HY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3680::/29
Signature Algorithm: sha256WithRSAEncryption
5e:86:e2:52:6a:3d:d0:fc:3d:0e:5d:1e:98:45:db:08:5c:02:
8f:e8:af:0a:5a:a9:50:5b:39:f7:7c:a5:d0:cb:e2:5a:b9:d2:
36:61:33:38:fc:c7:54:63:5f:4f:0a:2b:bf:31:11:58:25:a7:
3a:38:46:cf:b4:00:10:c5:c7:6d:31:cc:a3:d7:37:29:e7:38:
e5:e9:32:1a:ce:ce:97:57:f5:4b:d8:12:1c:74:59:04:fa:0a:
e4:e0:d1:d7:65:13:99:69:8e:e6:92:64:6c:87:40:9b:c2:3b:
35:2a:3d:29:fc:62:a8:2a:47:ae:99:4f:f7:58:5b:5c:ca:ec:
ef:8c:da:9f:23:9e:70:ad:39:0c:23:36:66:96:cb:69:13:72:
52:a0:2b:74:11:f1:7a:5c:24:64:00:f9:e0:1b:b9:bc:76:be:
cf:17:7b:9c:c1:c5:a4:52:3d:52:98:75:3b:1e:5d:02:df:29:
80:39:c6:a4:b8:e0:76:d4:c5:86:20:65:b3:15:4c:ed:ac:6e:
04:83:69:25:86:b7:5d:ba:18:04:24:ad:a8:ca:25:6b:47:cb:
90:90:bb:aa:a4:df:c4:e0:43:d5:42:20:11:05:46:c5:b6:ca:
b3:e6:ef:a8:fc:43:bd:af:94:7f:e1:4e:34:c8:0b:93:99:c7:
86:2b:ba:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:13:31 2024 by rpki-client on console-ams.rpki-client.org