Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/JdJo8kWNWUTBdsXX5XlIbRDXt5U.roa
File: JdJo8kWNWUTBdsXX5XlIbRDXt5U.roa (raw, json)
Hash identifier: ehGq9LpDyCPKM7mbLsOxBUCv0jKpXEKinEaF50eqEp0=
Subject key identifier: 25:D2:68:F2:45:8D:59:44:C1:76:C5:D7:E5:79:48:6D:10:D7:B7:95
Certificate issuer: /CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Certificate serial: 0191E61F94334B6D9B23AD6A48F37849567F
Authority key identifier: B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/JdJo8kWNWUTBdsXX5XlIbRDXt5U.roa
Signing time: Thu 12 Sep 2024 12:05:14 +0000
ROA not before: Thu 12 Sep 2024 12:05:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57487
IP address blocks: 2a11:6505::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e6:1f:94:33:4b:6d:9b:23:ad:6a:48:f3:78:49:56:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Validity
Not Before: Sep 12 12:05:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25d268f2458d5944c176c5d7e579486d10d7b795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6a:9d:9a:01:f3:ee:3d:0b:d7:08:01:ad:af:
25:39:ed:b9:a8:5b:77:60:db:35:b2:51:bf:9f:98:
07:4a:65:50:d5:88:01:3a:21:8e:5a:22:d0:6b:ff:
05:d9:39:2a:7f:56:e6:9f:1a:58:3c:e2:ca:ec:9d:
1f:07:58:3d:94:40:ff:10:ec:aa:c5:c3:1b:18:b0:
0d:dd:94:03:9f:b2:b7:c7:60:84:c7:56:8e:e1:02:
d2:05:da:b7:67:24:da:2c:fa:b7:48:63:5e:ac:1d:
9d:2e:f7:6a:4a:b7:de:bf:e9:9d:10:5d:f7:81:78:
78:6c:7c:9b:e0:6a:c2:80:c9:97:a8:1b:ff:8a:fe:
f9:c8:c1:a7:7a:4f:5c:45:5b:77:6d:e5:c9:72:5d:
37:18:d5:43:76:23:ff:28:d2:4b:51:d7:fb:11:15:
5d:0a:5d:63:70:b7:f8:7e:43:a1:72:9e:a7:46:f7:
a9:c5:45:43:b2:4d:e9:55:14:0a:c7:23:cc:13:5d:
6e:cf:bd:ae:db:05:b6:2e:16:c9:04:3d:5e:e7:13:
e7:33:e9:0f:92:be:c3:e3:62:29:01:68:b3:fb:1f:
ba:65:96:ae:95:cc:00:92:aa:77:2d:30:1d:4b:6c:
6c:8b:30:fc:12:bb:a1:a2:2f:7d:d7:a9:6d:03:05:
e2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D2:68:F2:45:8D:59:44:C1:76:C5:D7:E5:79:48:6D:10:D7:B7:95
X509v3 Authority Key Identifier:
keyid:B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/JdJo8kWNWUTBdsXX5XlIbRDXt5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:6505::/32
Signature Algorithm: sha256WithRSAEncryption
6c:83:e1:c2:73:71:2d:1d:f3:a0:a5:e0:b6:10:63:43:28:c8:
f2:57:6c:40:58:1f:f3:50:19:51:34:e1:f6:96:c8:2a:f8:ac:
ba:bf:64:5d:d6:6a:24:0a:30:e0:0a:4c:a5:8e:2f:9b:96:e7:
05:ba:06:a0:81:5e:fa:5e:7a:0c:0e:33:a6:ea:ab:00:20:3a:
2e:54:b8:24:e3:27:f0:43:8e:59:1b:00:6b:a1:5d:4f:6c:e3:
e6:ed:04:ed:49:9b:be:5b:a0:75:51:4e:fd:d7:78:86:2c:32:
43:cf:2c:9d:85:e2:06:7a:21:f9:1a:71:a7:18:1b:70:5e:3a:
fe:dc:ce:4d:71:59:33:f1:99:6f:e2:5a:55:19:cb:04:9d:82:
81:32:fd:87:3f:b0:ac:69:8b:d8:77:ea:eb:05:19:e7:8b:4a:
d8:50:91:b8:5c:22:61:83:5f:3c:8c:c3:6e:66:3f:62:54:e7:
59:d9:8e:fd:59:84:1f:ec:7c:10:5c:10:dd:6d:6c:e1:2e:54:
b5:e3:f0:1e:a8:e4:fe:b2:37:e3:8a:64:df:7c:b3:ee:7a:8c:
d0:0a:94:07:bc:49:22:4c:2c:f1:5d:82:2b:d0:96:cf:00:09:
ed:3f:77:e2:f2:bd:3a:ab:ca:9f:db:e2:9b:6e:1a:61:2e:15:
2d:6e:31:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:42:34 2024 by rpki-client on console-ams.rpki-client.org