Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/jNmcEGlij-JbNVxxDuucnQlCrcE.roa
File: jNmcEGlij-JbNVxxDuucnQlCrcE.roa (raw, json)
Hash identifier: 7AYn/FqY4h0muoIe9pFM8fB9gjlmcue8ES5gRxc11Ec=
Subject key identifier: 8C:D9:9C:10:69:62:8F:E2:5B:35:5C:71:0E:EB:9C:9D:09:42:AD:C1
Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Certificate serial: 018CC8DEEC0A8F051AE8913564156B535974
Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/jNmcEGlij-JbNVxxDuucnQlCrcE.roa
Signing time: Tue 02 Jan 2024 06:31:41 +0000
ROA not before: Tue 02 Jan 2024 06:31:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197481
IP address blocks: 2a0a:2c0:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:ec:0a:8f:05:1a:e8:91:35:64:15:6b:53:59:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Validity
Not Before: Jan 2 06:31:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8cd99c1069628fe25b355c710eeb9c9d0942adc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:78:d2:5b:f3:0b:0e:dd:33:bb:2d:9e:a2:63:
bb:40:01:98:92:51:dc:c4:7c:bf:dc:b0:8d:bc:28:
d5:c3:92:09:93:44:ee:83:0e:f2:84:e6:ee:b3:4e:
12:10:e1:c8:3a:90:8b:ab:52:9e:7f:29:c0:e5:c4:
24:94:b2:96:04:61:bd:8d:ae:10:a1:b2:6f:fa:28:
69:91:1c:4b:fd:a5:bc:36:22:9a:59:f1:95:ec:73:
a8:2f:19:16:5c:f5:e4:13:bb:49:d4:07:3d:57:13:
96:bb:e8:0e:87:f7:6c:fe:70:f0:03:d1:bc:d7:58:
7d:13:0e:e7:3e:02:ac:8f:7e:99:f3:e2:6f:12:f9:
5e:7c:61:3a:cd:41:5b:ed:c0:37:57:7e:bd:43:ea:
37:a6:c4:af:bb:1d:09:36:fa:59:ef:a7:85:17:f5:
ef:7d:40:5d:79:37:b8:37:dd:28:79:78:79:69:85:
d1:0d:71:fe:1a:da:ad:6d:cf:3c:87:ae:a5:a4:c9:
20:c9:fb:8c:e8:a2:ef:c4:67:68:7e:8a:5b:27:d2:
86:ea:a9:71:75:4e:87:5f:3b:25:52:9c:b2:df:ff:
5f:b1:f7:a1:df:67:20:18:b6:ee:17:c1:13:5f:4a:
8a:10:d4:69:d7:78:bb:b8:cb:2d:d6:6d:6f:b8:9a:
56:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D9:9C:10:69:62:8F:E2:5B:35:5C:71:0E:EB:9C:9D:09:42:AD:C1
X509v3 Authority Key Identifier:
keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/jNmcEGlij-JbNVxxDuucnQlCrcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2c0:3::/48
Signature Algorithm: sha256WithRSAEncryption
09:ef:67:35:9d:05:49:51:0d:be:cd:cc:8d:2d:f4:90:d9:45:
66:f6:9e:55:92:5c:c5:fb:04:54:e2:73:33:23:d7:73:2a:b9:
ae:e2:1f:8d:29:32:69:10:b5:e7:80:a4:56:19:b4:79:e5:1d:
a3:76:65:43:45:cd:40:40:58:33:19:07:bb:32:b4:ac:93:e7:
52:4b:ee:e9:78:b1:3c:a4:dc:fe:a6:48:47:e2:67:17:70:77:
a4:cf:34:42:6f:b7:9e:69:98:17:e5:3f:cd:89:99:c3:99:ba:
6d:02:18:73:36:13:9b:9e:5b:92:8b:32:68:ab:3f:45:3b:1f:
c0:12:ab:c6:66:1e:a3:ad:dd:d5:ba:eb:29:c9:9f:54:27:6c:
85:e3:f4:ac:70:2f:4f:a7:79:ed:ce:ad:11:3f:17:ac:f7:13:
58:43:b8:00:62:b9:b4:6d:2e:4e:14:65:d1:8a:bd:0e:dd:ef:
c8:31:28:c6:85:51:19:de:63:aa:86:01:b0:c1:1e:d6:aa:9b:
ef:d6:7e:6b:0a:16:3d:f7:58:24:c9:fe:e4:1e:a0:ca:80:64:
1d:1a:dc:2c:45:36:b5:28:a5:9e:dd:c5:7e:6a:3f:f0:87:25:
ff:b9:b2:3a:ce:f2:79:dd:d2:e0:a3:62:94:2b:50:b0:4a:ee:
4f:c4:58:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 05:13:12 2024 by rpki-client on console-ams.rpki-client.org