Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/d0L6bb7r1F6SLcmNpKOJBJIb6E4.roa
File: d0L6bb7r1F6SLcmNpKOJBJIb6E4.roa (raw, json)
Hash identifier: JCSA+N/MF9bDVb4BqHtSbovY2aumYg2QD6P+ORw1Zs8=
Subject key identifier: 77:42:FA:6D:BE:EB:D4:5E:92:2D:C9:8D:A4:A3:89:04:92:1B:E8:4E
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 018CC3489AEF66433BB42DBDC5F817475DF7
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/d0L6bb7r1F6SLcmNpKOJBJIb6E4.roa
Signing time: Mon 01 Jan 2024 04:29:24 +0000
ROA not before: Mon 01 Jan 2024 04:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216126
IP address blocks: 2a05:1082::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:9a:ef:66:43:3b:b4:2d:bd:c5:f8:17:47:5d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 1 04:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7742fa6dbeebd45e922dc98da4a38904921be84e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:26:4f:d1:d8:19:0e:48:bf:78:40:6a:59:76:
a5:cf:df:da:4e:96:17:b4:54:7a:0c:e2:a7:df:7b:
e4:7d:bd:a5:b3:e7:a2:1e:71:ec:6b:13:3c:af:72:
a8:2a:c1:51:b1:1d:5f:a5:7a:69:2d:3b:0e:1f:76:
21:df:c2:3b:d7:87:eb:cd:ae:fc:66:11:a8:c0:b4:
93:fb:32:e3:06:1c:73:2e:88:ca:76:04:01:b7:e4:
9d:a9:56:a5:df:65:50:e5:92:8a:5d:3a:9b:7c:0c:
14:23:b9:b8:bf:55:0d:03:a0:b6:d2:bb:84:e9:0b:
4a:30:13:af:01:f0:79:33:31:54:55:a7:b7:7f:fc:
49:1b:95:26:08:a2:df:63:7c:57:58:ff:4f:35:d6:
3c:6a:7c:22:6a:3b:de:a7:e8:75:1b:b4:aa:f6:7c:
bb:62:f9:4c:af:e6:0d:71:15:2a:a6:8f:65:05:e4:
9b:93:02:59:6a:84:09:4a:9f:2c:62:23:a3:87:ac:
d7:68:e1:a9:df:e8:d9:94:1f:7e:2e:65:07:1f:b9:
ea:4c:c7:d6:b7:9f:c8:87:7b:6d:aa:82:21:b6:19:
21:38:35:45:ff:5d:61:a5:18:8d:7f:3e:c5:46:8c:
e2:d6:88:67:ec:20:63:2a:a0:d8:11:b3:cd:dc:80:
1d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:42:FA:6D:BE:EB:D4:5E:92:2D:C9:8D:A4:A3:89:04:92:1B:E8:4E
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/d0L6bb7r1F6SLcmNpKOJBJIb6E4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:1082::/32
Signature Algorithm: sha256WithRSAEncryption
22:d8:47:05:c0:47:b6:f0:4f:2d:5d:42:c9:20:57:78:64:33:
aa:ce:e1:b9:47:30:19:b8:a5:58:d0:d4:e1:d9:c6:f2:20:91:
55:0d:cb:e0:4a:a8:c5:47:ba:e5:51:56:38:a8:35:99:dd:6a:
66:a2:d7:6d:91:a0:64:7a:3e:b3:62:2a:5e:c1:eb:f1:54:ef:
06:78:eb:14:af:b1:98:bc:4b:b8:d5:ef:3e:e4:7d:ea:05:3e:
35:83:63:40:6d:4e:aa:c2:68:51:ea:71:b2:ab:51:8a:2f:2d:
cc:2b:39:6e:ac:65:2a:28:7c:be:66:71:b1:2d:9d:28:32:08:
1d:e9:b7:a6:0c:90:76:2b:07:7d:ca:07:05:40:9f:10:58:e7:
b9:2c:21:a7:63:aa:5b:f7:b6:a1:35:f1:a2:27:b0:c6:11:10:
fd:c2:88:42:7b:5e:ec:62:4c:0b:50:04:e3:42:9c:13:af:ea:
c1:66:05:fb:62:ce:51:47:09:8c:c8:97:53:ce:93:3f:c8:93:
ca:15:fe:5a:cb:b6:54:6f:84:73:6e:21:50:03:1e:5e:28:84:
0b:3f:05:fb:8e:0b:32:24:6d:57:df:a7:7c:d7:54:55:eb:b8:
c8:01:2d:e9:d8:d6:47:9a:da:92:54:b5:8f:c6:33:e0:e8:68:
f4:cf:43:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:16:37 2024 by rpki-client on console-fra.rpki-client.org