Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/N6GlHxxx2essuHEbdhHVQy8cvsc.roa
File: N6GlHxxx2essuHEbdhHVQy8cvsc.roa (raw, json)
Hash identifier: 5S0L9FIOHfGx7oMZcorkuwM3BJdLrlGULjdThuwC06g=
Subject key identifier: 37:A1:A5:1F:1C:71:D9:EB:2C:B8:71:1B:76:11:D5:43:2F:1C:BE:C7
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 0190709124072EED6B2B9FF4B57B1CDF1550
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/N6GlHxxx2essuHEbdhHVQy8cvsc.roa
Signing time: Mon 01 Jul 2024 23:11:18 +0000
ROA not before: Mon 01 Jul 2024 23:11:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214625
IP address blocks: 2a0a:79c0:500::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:70:91:24:07:2e:ed:6b:2b:9f:f4:b5:7b:1c:df:15:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jul 1 23:11:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37a1a51f1c71d9eb2cb8711b7611d5432f1cbec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:39:cf:56:7f:98:fa:a0:9b:99:b5:88:73:0c:
a7:bb:ce:c7:b0:c1:b6:4d:08:be:e1:01:54:b0:a3:
dc:dd:87:97:a1:10:a6:2a:06:98:3e:ef:7e:32:a1:
3f:ae:4f:2f:58:91:11:de:1c:31:30:b0:be:76:fc:
32:1b:e1:fe:cd:98:06:13:da:12:6c:91:8c:6f:9a:
de:bc:38:87:b4:d2:21:6a:d9:48:59:1c:46:01:e8:
11:ef:71:34:88:16:7c:ce:b9:34:d8:d7:e8:f9:32:
db:31:b0:07:1f:54:f2:a6:72:c4:13:5f:bd:a7:48:
e8:46:e2:c6:ac:91:9c:a2:68:36:d8:83:f7:13:1b:
0d:e5:0e:62:88:ad:95:39:84:04:5f:dd:76:e7:8e:
b5:b9:42:bb:61:aa:dc:a3:58:ee:9d:7a:d1:08:26:
b9:dc:90:47:f6:86:59:eb:cf:39:da:3b:8c:59:2b:
cb:ff:ee:7f:b3:8a:5e:b8:d6:47:dd:07:c2:2e:76:
64:e1:3b:28:cc:5b:30:60:b7:1d:c5:0b:d7:99:36:
f7:4b:c5:95:3c:19:27:30:77:49:e6:38:5c:b2:63:
47:5f:c9:36:c3:16:d2:e7:9d:28:5b:a8:8d:1e:54:
c7:3f:43:9a:a1:75:33:fa:b0:2b:0c:c3:05:8a:22:
7a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A1:A5:1F:1C:71:D9:EB:2C:B8:71:1B:76:11:D5:43:2F:1C:BE:C7
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/N6GlHxxx2essuHEbdhHVQy8cvsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:79c0:500::/44
Signature Algorithm: sha256WithRSAEncryption
0a:85:e2:da:b7:86:ab:22:0f:93:eb:08:34:a0:9b:99:6d:d8:
34:28:77:ec:e6:6d:16:de:40:00:56:69:6b:c3:88:e6:d2:f1:
5b:ce:49:7a:ca:2d:34:0c:8c:c8:9a:ed:61:6b:e9:12:41:65:
3a:f0:78:ed:ab:cd:aa:05:9d:46:9a:3f:b8:35:06:3d:70:66:
94:75:65:22:47:7e:5c:94:a5:a6:ea:ba:98:3f:95:4a:cb:88:
7e:f7:28:c8:74:b8:98:a9:15:9f:05:ec:75:5b:cd:b5:88:2f:
7e:a2:19:47:d0:26:77:2d:03:45:32:07:50:e8:73:35:21:ca:
09:cc:46:66:f7:2a:2b:b4:d4:50:7d:25:da:ef:7a:f7:04:5c:
bd:29:d9:ae:48:b5:92:a9:3e:bd:38:ff:d8:e7:ed:88:04:6c:
ab:78:5c:fa:b6:0b:cf:eb:c4:0f:18:3c:26:ea:7f:83:7a:44:
0d:67:be:9b:e7:c0:71:2c:3d:53:8b:d1:02:f7:33:06:8d:1b:
71:0f:3f:25:4b:c6:18:36:34:15:b8:1f:36:be:78:1c:21:3c:
aa:be:19:13:7d:ee:0d:10:7a:46:e7:90:21:a8:3d:3d:c9:56:
f2:fa:7f:cd:ae:56:6b:96:0a:ac:32:d9:00:85:c0:5c:fc:45:
2f:84:77:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:58:37 2024 by rpki-client on console-fra.rpki-client.org