Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/6lxl1LvqdpopS91QMZGcfaRJUJU.roa
File: 6lxl1LvqdpopS91QMZGcfaRJUJU.roa (raw, json)
Hash identifier: BopeNxc7wzFlo25ct5vvVke0ItL5uDEHEWDZ8l+Nxkc=
Subject key identifier: EA:5C:65:D4:BB:EA:76:9A:29:4B:DD:50:31:91:9C:7D:A4:49:50:95
Certificate issuer: /CN=ef3ee31d2f0ef103296ddec3c66b07a3f442ac98
Certificate serial: 0193513CA8561B17DDD688E9DF912C152124
Authority key identifier: EF:3E:E3:1D:2F:0E:F1:03:29:6D:DE:C3:C6:6B:07:A3:F4:42:AC:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/6lxl1LvqdpopS91QMZGcfaRJUJU.roa
Signing time: Fri 22 Nov 2024 00:19:09 +0000
ROA not before: Fri 22 Nov 2024 00:19:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25160
IP address blocks: 2a0e:fc80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:3c:a8:56:1b:17:dd:d6:88:e9:df:91:2c:15:21:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3ee31d2f0ef103296ddec3c66b07a3f442ac98
Validity
Not Before: Nov 22 00:19:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea5c65d4bbea769a294bdd5031919c7da4495095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:91:3f:b4:3a:36:45:7a:cb:7c:18:78:cc:6c:
af:b8:f5:fc:13:8c:11:43:58:68:b1:2b:9c:ed:70:
fe:7a:5a:6f:41:f5:54:49:e3:00:24:fa:4b:53:21:
4e:52:7f:31:e4:21:a0:12:36:8a:59:f0:88:28:2b:
91:4a:30:3a:4f:24:7c:8c:8a:76:c0:50:6d:f8:9b:
84:86:85:b9:dd:b4:d9:a1:61:fa:e7:be:aa:4a:8a:
85:21:91:50:69:9b:1e:ce:22:6f:f1:66:dd:ab:ee:
b9:28:11:e9:5c:23:18:90:3f:78:4e:6f:63:d4:ab:
a4:77:83:2d:9c:4e:84:ae:92:86:4c:d3:d5:d8:6f:
18:2e:cc:3f:9f:13:09:bd:96:53:7f:f3:b9:23:1c:
6c:9c:3d:31:68:90:a9:62:be:00:47:a5:a2:9a:c0:
3f:64:60:07:c1:ce:1e:df:7d:68:ea:d8:99:67:4d:
8e:17:44:ff:46:06:66:bc:81:f9:75:8c:ac:a7:04:
fd:77:21:1b:3a:1c:0d:57:5d:ff:63:3a:46:d5:0c:
95:9e:f0:5a:dc:52:a8:d8:2a:0f:5e:9c:74:ef:ed:
6f:01:ce:51:a5:44:78:9c:6c:23:f6:90:38:87:db:
6f:b9:15:1e:ae:ce:04:5e:ae:fe:4f:55:22:af:bd:
e5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5C:65:D4:BB:EA:76:9A:29:4B:DD:50:31:91:9C:7D:A4:49:50:95
X509v3 Authority Key Identifier:
keyid:EF:3E:E3:1D:2F:0E:F1:03:29:6D:DE:C3:C6:6B:07:A3:F4:42:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/6lxl1LvqdpopS91QMZGcfaRJUJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:fc80::/29
Signature Algorithm: sha256WithRSAEncryption
76:7a:f9:49:1e:9d:af:dc:80:bd:e5:c4:26:0b:53:2c:de:6c:
44:b4:69:85:a2:f2:06:1e:b9:cd:6c:df:3b:4d:27:d5:c7:d9:
8d:30:7a:e9:9a:fe:95:17:79:90:e4:9c:6f:1f:7c:09:94:66:
db:f1:63:cd:e6:ba:f6:a5:b2:ba:d0:30:d5:1e:7d:1f:bb:2a:
ef:db:5b:db:be:6f:35:c0:15:15:b2:0f:09:c8:5b:5b:5a:e3:
8e:d7:7e:8b:a1:ad:02:7a:59:55:97:cc:b3:4d:32:33:0e:93:
64:e2:a2:1f:4c:0a:d2:cd:2f:34:14:6c:a7:77:32:a5:b1:7e:
ee:dd:4d:bc:45:e5:e5:61:4a:23:2d:6e:2f:ee:33:d6:6d:cf:
a9:a8:b4:1e:e5:d8:1d:4b:3a:da:e2:62:9a:4c:f1:ca:07:c7:
a4:cb:55:e4:ee:47:ce:9b:86:69:0f:5b:e7:09:0d:6d:85:64:
ca:f5:6a:bc:e5:bf:1c:76:f9:3b:e9:91:66:b2:34:97:61:90:
a1:15:7c:59:cb:cd:b1:79:7a:c5:b1:75:6e:84:06:e2:f7:28:
b3:1a:79:9e:68:ec:7e:8e:9f:41:7a:ce:68:bc:73:33:3e:97:
87:d7:c6:9f:62:38:80:34:b9:57:85:1e:8f:eb:5a:85:46:e4:
e7:b5:32:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:43:54 2024 by rpki-client on console-ams.rpki-client.org