Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/oCfCx4oJ_hPXB5B6FkG00N3Ff1c.roa
File: oCfCx4oJ_hPXB5B6FkG00N3Ff1c.roa (raw, json)
Hash identifier: plxuAoMmzchxpMfuInpdqbaCVZOeaWoWGoT6nV2/GRg=
Subject key identifier: A0:27:C2:C7:8A:09:FE:13:D7:07:90:7A:16:41:B4:D0:DD:C5:7F:57
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 018CC26D482FFB733A0EED8B1B625D0300AF
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/oCfCx4oJ_hPXB5B6FkG00N3Ff1c.roa
Signing time: Mon 01 Jan 2024 00:29:50 +0000
ROA not before: Mon 01 Jan 2024 00:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 394604
IP address blocks: 2a0e:aa07:f00c::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:48:2f:fb:73:3a:0e:ed:8b:1b:62:5d:03:00:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 00:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a027c2c78a09fe13d707907a1641b4d0ddc57f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:af:20:15:1c:dc:8d:50:9b:ad:91:95:c6:0b:
4d:ff:f9:bb:d8:0d:95:00:b4:22:12:e8:b9:fa:16:
58:7b:69:dd:18:d5:47:b1:5e:06:fe:44:46:12:c3:
7e:2c:b5:52:83:06:96:e4:cb:5b:d3:98:62:ff:83:
f1:9c:c3:b3:25:fd:3b:e9:7e:de:98:28:4c:5b:57:
04:2a:22:e2:18:f4:86:77:52:2b:83:c1:32:4e:3a:
29:e6:38:52:7e:e4:9f:ba:2e:6f:74:7d:14:b6:97:
27:be:3c:13:39:6b:0b:d6:8e:ae:31:38:d3:58:e6:
22:77:1c:a1:6d:0a:27:45:75:f8:bc:45:12:7e:29:
67:5d:3b:b1:93:c3:44:2b:85:ef:4c:e5:56:02:aa:
ce:d5:b9:05:45:23:7d:8b:aa:2c:f2:54:25:f0:cb:
89:f8:04:7a:93:38:14:7d:61:81:7a:0f:79:11:9c:
ef:40:c8:14:01:62:e6:b0:56:91:24:f9:55:8f:9c:
ae:a7:60:49:62:02:08:75:de:9f:fb:a7:03:3b:8d:
b4:db:2e:de:3d:ba:54:44:aa:dd:8d:43:91:73:c2:
bf:60:72:4f:d2:a1:51:f1:bf:e8:9f:4e:ef:9e:16:
06:2e:76:88:43:fe:fe:06:54:30:4d:c1:82:62:13:
7e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:27:C2:C7:8A:09:FE:13:D7:07:90:7A:16:41:B4:D0:DD:C5:7F:57
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/oCfCx4oJ_hPXB5B6FkG00N3Ff1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:f00c::/46
Signature Algorithm: sha256WithRSAEncryption
5e:b1:77:88:7c:99:8a:4e:86:7d:4a:e9:56:2a:f5:53:1b:5a:
f1:fa:56:28:5d:d5:4a:67:f9:26:43:8b:9f:3f:71:4e:a7:63:
78:a0:08:bb:05:93:f4:56:51:e8:57:30:b8:a2:be:e6:f6:88:
65:e7:36:de:16:22:9c:20:8f:83:98:24:e6:01:01:9b:ba:96:
f2:0d:52:18:85:79:e2:19:a4:b6:0e:3a:90:7e:db:81:bb:53:
ae:04:d0:0c:e6:3d:10:2c:b4:59:ea:28:28:d5:68:57:29:ce:
0b:62:84:da:ec:48:56:2d:98:8a:21:71:f6:c1:22:a5:c7:01:
a2:a4:f7:8d:cf:a2:71:98:fc:17:b0:2c:81:38:01:ab:32:0f:
ac:83:a9:dc:3f:10:50:fc:0b:12:42:fd:ac:89:bd:51:92:d2:
c0:9f:ed:a5:42:3b:c8:a7:b0:6e:e7:74:e3:c5:2a:2f:81:1c:
5f:92:b9:bd:d1:af:65:83:1e:f4:79:1d:aa:9b:0c:d3:f1:6f:
8e:1f:ad:25:a7:d0:0d:5d:c7:1d:a4:91:5f:95:c5:8f:cf:84:
73:f3:ca:6d:9f:5e:08:8f:68:37:57:cc:fd:54:9a:9d:ca:d5:
b7:7c:00:0d:e8:51:c6:9e:76:2f:be:6f:08:96:88:82:a3:9b:
32:0c:9d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:27:00 2024 by rpki-client on console-ams.rpki-client.org