Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/AJc3vSU7PMt9ixG88lQ2ok35iUw.roa
File: AJc3vSU7PMt9ixG88lQ2ok35iUw.roa (raw, json)
Hash identifier: D/6jsDxroId4i5lO1ohr+FLqTi4El1b/10z/tBvlvoo=
Subject key identifier: 00:97:37:BD:25:3B:3C:CB:7D:8B:11:BC:F2:54:36:A2:4D:F9:89:4C
Certificate issuer: /CN=dc94bb69453f139a60029e22db0fb3424a906cee
Certificate serial: 018CC9BA5E175B6E152EC8CF0E772FB6211D
Authority key identifier: DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/AJc3vSU7PMt9ixG88lQ2ok35iUw.roa
Signing time: Tue 02 Jan 2024 10:31:23 +0000
ROA not before: Tue 02 Jan 2024 10:31:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15683
IP address blocks: 2a01:6d80:2000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 01:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:ba:5e:17:5b:6e:15:2e:c8:cf:0e:77:2f:b6:21:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc94bb69453f139a60029e22db0fb3424a906cee
Validity
Not Before: Jan 2 10:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=009737bd253b3ccb7d8b11bcf25436a24df9894c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f8:18:25:4f:05:6e:58:ce:71:c6:3e:f6:43:
8c:1f:b8:d8:49:f8:70:7c:2b:21:c1:d9:37:1f:49:
cb:9a:ca:f6:9e:dc:93:de:fd:be:4f:2a:e6:a3:7a:
bc:d5:d8:10:b9:32:82:83:f6:91:e4:6c:96:6b:6f:
6e:d4:80:6a:fe:ed:d5:35:ac:bf:1b:42:37:27:29:
a9:e5:d6:7c:bd:e1:7c:ea:f1:75:e1:c9:2a:90:c9:
03:ee:d7:b2:5f:15:7a:de:7e:d2:2e:3e:37:a8:e9:
66:90:79:0b:26:5c:90:49:1a:d1:80:26:a8:39:03:
61:77:cc:11:47:b2:c2:32:6b:55:cd:cb:9c:a6:fd:
17:80:04:e4:fc:fe:dd:a1:1e:da:d6:a0:ed:34:9c:
ff:9b:28:75:68:11:3e:b5:8a:ce:77:b4:a6:df:ae:
39:d6:f3:b7:3a:29:3e:8f:d3:3e:cd:0c:f1:ec:b1:
c1:9d:4f:09:12:64:32:ae:51:a4:43:ed:a0:44:e8:
14:64:50:a9:42:ac:9b:28:0c:b9:4a:74:84:09:22:
e6:d0:34:07:f1:31:66:70:49:17:0e:f5:ad:4f:ab:
ec:dd:f3:c9:c4:d7:74:c3:79:7f:cd:20:c6:f8:ab:
4e:4f:f2:7b:21:f4:a6:e5:1d:20:fb:d1:06:d8:9b:
7b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:97:37:BD:25:3B:3C:CB:7D:8B:11:BC:F2:54:36:A2:4D:F9:89:4C
X509v3 Authority Key Identifier:
keyid:DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/AJc3vSU7PMt9ixG88lQ2ok35iUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:6d80:2000::/36
Signature Algorithm: sha256WithRSAEncryption
66:45:ec:e6:a1:b4:5b:12:20:8d:70:81:fd:10:74:9a:76:5e:
71:35:d6:a5:7b:17:0a:5e:54:11:58:17:6a:71:f0:57:75:17:
00:db:bb:8f:fd:5e:27:f7:8d:c5:30:67:ce:5e:d5:a1:e5:8c:
66:23:63:64:8f:ea:ab:d6:ca:d7:73:bf:4d:4f:fb:24:48:41:
6a:60:3e:8f:72:cd:d3:71:2d:06:2c:fa:fe:e7:06:8c:6e:8a:
1f:98:71:5a:b8:41:40:d6:c0:3b:cb:82:fa:c4:c6:d3:05:da:
4c:bc:d9:bf:a4:b6:d3:b7:c2:31:0d:23:e5:07:be:45:d0:80:
e3:6a:9b:06:67:bf:22:02:56:67:3e:83:7d:85:9a:71:e3:8e:
6a:4d:f0:35:e2:c8:ab:44:15:05:e9:5e:67:b3:ba:62:b0:51:
8b:30:c3:8d:61:82:63:14:02:38:2f:9c:1c:6d:95:13:f6:f5:
ce:40:54:3f:84:a5:46:3e:b9:27:7e:c9:df:54:d1:4a:7c:3e:
35:5f:ea:9b:1e:5b:e4:b6:a2:a8:8f:21:81:dd:11:5a:6c:8e:
b4:d0:a1:e9:32:b4:2c:a7:83:e0:b4:13:81:ab:1b:14:d5:83:
5e:bb:7b:0a:fc:6e:a3:6c:c2:5f:87:7a:72:c7:17:72:38:97:
97:5c:fd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 09:38:42 2024 by rpki-client on console-ams.rpki-client.org