Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/ErrscbMNLxaOjm8XZuKeZBXTNqs.roa
File: ErrscbMNLxaOjm8XZuKeZBXTNqs.roa (raw, json)
Hash identifier: iVjrPp9i71oTmpDXCdDrKpCUmPTfWafQ89Xu7zYk8GI=
Subject key identifier: 12:BA:EC:71:B3:0D:2F:16:8E:8E:6F:17:66:E2:9E:64:15:D3:36:AB
Certificate issuer: /CN=6f6a28b85b917982072b9f4f406d7eb099913a31
Certificate serial: 018CC500F528D00B503FF0DB822548AB1D6B
Authority key identifier: 6F:6A:28:B8:5B:91:79:82:07:2B:9F:4F:40:6D:7E:B0:99:91:3A:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b2oouFuReYIHK59PQG1-sJmROjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/ErrscbMNLxaOjm8XZuKeZBXTNqs.roa
Signing time: Mon 01 Jan 2024 12:30:23 +0000
ROA not before: Mon 01 Jan 2024 12:30:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13045
IP address blocks: 2001:678:9d4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/b2oouFuReYIHK59PQG1-sJmROjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:f5:28:d0:0b:50:3f:f0:db:82:25:48:ab:1d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f6a28b85b917982072b9f4f406d7eb099913a31
Validity
Not Before: Jan 1 12:30:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12baec71b30d2f168e8e6f1766e29e6415d336ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:1b:c1:1c:eb:64:46:7f:75:5d:91:1a:da:35:
ad:47:ca:43:4d:89:cc:18:0c:34:67:f3:a0:d6:74:
0b:89:5b:80:cf:70:69:f1:da:93:ac:52:ea:68:5c:
a6:e0:a0:5c:86:b4:aa:f4:9a:f1:d0:d5:4c:8e:b2:
47:2e:c7:0f:1c:fe:bd:a0:76:f0:65:38:d3:b6:95:
a4:49:ec:15:b8:9e:99:35:25:e0:62:c7:03:c4:5c:
50:e3:ce:fc:af:71:e7:4c:e1:91:68:5a:90:19:d5:
e0:af:04:71:7d:00:74:fb:5d:04:9c:fe:24:fc:18:
9b:f5:f2:3c:23:63:7f:22:43:1c:5b:41:eb:28:12:
74:5d:4a:f7:ca:1b:79:29:2f:8f:a8:1b:42:30:02:
a6:38:e4:e0:2c:54:b5:2a:97:c3:a1:09:cb:b7:e0:
99:b4:a7:dc:0a:f5:45:f5:06:00:d9:6e:88:f8:9d:
91:40:54:9f:10:cf:e1:34:ad:4a:94:a2:83:1b:cc:
36:a3:ed:e6:3c:0d:5a:62:a7:03:8c:c0:d8:c1:5a:
20:f1:fb:eb:11:59:fb:8c:88:25:47:b3:c5:0f:29:
92:21:67:fd:e5:53:ea:ed:33:d2:4b:2f:79:eb:fd:
c8:b3:3b:5e:44:66:a4:8a:b2:1f:6e:da:1a:81:6a:
bc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BA:EC:71:B3:0D:2F:16:8E:8E:6F:17:66:E2:9E:64:15:D3:36:AB
X509v3 Authority Key Identifier:
keyid:6F:6A:28:B8:5B:91:79:82:07:2B:9F:4F:40:6D:7E:B0:99:91:3A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2oouFuReYIHK59PQG1-sJmROjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/ErrscbMNLxaOjm8XZuKeZBXTNqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:9d4::/48
Signature Algorithm: sha256WithRSAEncryption
03:12:6c:bf:d2:20:7a:27:09:49:7c:74:6f:a0:9f:ca:cf:58:
01:6b:e9:6e:85:45:f2:61:ea:76:30:b9:90:e9:36:73:c7:5a:
c4:64:12:78:0f:13:96:3b:e4:c8:f4:6d:90:d9:fd:72:87:74:
4f:0e:94:b0:ce:98:39:97:d3:c0:d3:00:74:ac:a0:00:70:2e:
5c:07:a1:28:7a:19:56:cb:eb:56:da:5b:1c:09:a3:56:74:f5:
18:b6:23:8f:c5:89:ad:43:82:a8:04:b2:2b:e5:3e:92:1e:72:
e7:5d:df:00:3e:c8:a7:1c:1c:be:8d:4c:ca:7f:66:d3:b1:d8:
9f:aa:26:58:7e:9d:2c:a9:95:81:13:2d:43:82:45:56:d8:44:
de:55:65:71:82:79:1a:81:ae:6a:5d:2f:59:61:c4:5f:f3:32:
b4:b0:89:77:c4:3f:49:57:12:a3:19:ee:6b:72:c7:b0:f5:eb:
5c:7b:e2:c4:02:ae:e6:4c:f7:68:05:33:2d:36:28:fa:f4:cc:
f3:6c:e5:a1:41:57:05:97:9e:b2:44:49:ef:e5:45:81:d3:09:
ca:92:9c:02:a6:6f:d2:f0:20:17:c2:e8:d7:5a:60:27:f7:ec:
69:4b:8c:5c:b1:91:e9:7c:a4:91:24:82:13:33:af:b8:66:f2:
21:e7:09:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:00:09 2024 by rpki-client on console-ams.rpki-client.org