Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/bSrRfvbxgJSOn6Mv14KZBbBoLpA.roa
File: bSrRfvbxgJSOn6Mv14KZBbBoLpA.roa (raw, json)
Hash identifier: Ck6I5jpyTOAb4kykEG13BUMNK5zCKJBwkZyllvbT5yo=
Subject key identifier: 6D:2A:D1:7E:F6:F1:80:94:8E:9F:A3:2F:D7:82:99:05:B0:68:2E:90
Certificate issuer: /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Certificate serial: 018CC72755960E4875CCA9A5A86D1128BA40
Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/bSrRfvbxgJSOn6Mv14KZBbBoLpA.roa
Signing time: Mon 01 Jan 2024 22:31:32 +0000
ROA not before: Mon 01 Jan 2024 22:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200365
IP address blocks: 2a0b:6b86:a00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:55:96:0e:48:75:cc:a9:a5:a8:6d:11:28:ba:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Validity
Not Before: Jan 1 22:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d2ad17ef6f180948e9fa32fd7829905b0682e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:23:ed:1b:91:29:00:b4:ba:f1:bd:b5:97:f1:
60:1a:34:d3:61:8a:a3:9b:56:35:57:d7:b0:1c:5b:
f3:63:3b:61:30:66:59:11:69:86:74:f2:5e:14:23:
7c:09:0f:71:78:94:12:50:a7:fa:3a:69:15:f1:a4:
b8:ac:0c:57:21:da:cf:06:46:73:ae:18:66:d0:05:
95:91:4d:63:f5:a8:98:b6:18:89:c6:03:c6:f8:92:
bc:49:83:a8:20:8d:47:f7:07:08:7d:94:78:d9:aa:
04:44:6c:b7:40:37:67:2c:5a:35:a3:e2:8f:21:6b:
fc:6f:a1:77:1d:22:bf:05:46:82:2c:50:a6:59:b4:
28:5e:3d:39:69:62:83:93:5b:e7:4c:f2:92:21:61:
50:18:27:12:a2:22:cc:48:eb:90:d9:25:bc:b2:9a:
50:1d:c6:f2:96:fe:c9:95:de:b0:da:18:ea:04:6f:
94:c8:f1:df:77:ee:cc:14:e9:56:bc:61:e1:d9:0c:
52:24:38:a8:44:41:f6:9e:75:67:44:66:5f:2f:14:
fe:db:9b:70:93:cf:23:aa:d8:6d:d5:c4:9e:b4:fe:
9e:03:1f:ac:cd:f6:8e:25:25:5e:78:8c:b3:f0:65:
c1:de:44:c4:bb:59:66:b4:91:47:a0:d2:6b:62:f3:
7c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2A:D1:7E:F6:F1:80:94:8E:9F:A3:2F:D7:82:99:05:B0:68:2E:90
X509v3 Authority Key Identifier:
keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/bSrRfvbxgJSOn6Mv14KZBbBoLpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:6b86:a00::/40
Signature Algorithm: sha256WithRSAEncryption
4e:8b:57:01:19:4a:c4:52:c3:61:5f:14:87:80:2d:20:9b:a6:
f5:72:32:5d:e1:b7:5a:4e:bc:79:2a:3d:61:6d:a0:2f:e5:67:
ef:0a:ae:82:0d:64:4a:d1:14:c6:76:ac:d8:4a:3b:ca:b5:0f:
a2:06:bc:d4:ab:4e:2b:f2:b2:cd:f2:71:63:4f:2c:a2:03:35:
50:23:9b:eb:69:5a:8d:a0:16:9e:25:a6:49:b0:81:88:10:fb:
d0:4e:ca:ca:a4:3d:e6:3c:ac:27:f9:1a:3a:99:5a:6e:f1:7c:
57:e8:9f:f1:04:f1:d1:83:26:d2:d9:b4:ef:8c:21:09:5a:24:
9a:fb:51:03:92:91:9b:8e:1e:be:06:96:1a:54:00:b0:ee:33:
eb:15:0f:bc:4b:41:d9:b3:dd:6a:53:66:8d:86:a8:84:57:fe:
db:e7:ed:a4:ed:65:a8:1a:94:f6:3c:a8:85:83:26:70:d5:b6:
52:9e:b2:c0:ce:e1:7c:37:1e:f9:45:21:db:e7:6e:d9:a7:8f:
41:ef:10:cc:02:e8:ea:25:91:4e:b4:96:32:0b:45:59:e1:f3:
3e:16:6e:ca:26:b0:e9:d5:7f:f7:07:87:ef:c6:99:6c:cc:cc:
01:2a:eb:14:66:c5:e1:4a:d2:18:24:d3:81:91:fe:6f:5b:8c:
32:68:bc:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:29:20 2024 by rpki-client on console-ams.rpki-client.org