Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/OkPYzJjmumOaWWoWUlWDcoR87o4.roa
File: OkPYzJjmumOaWWoWUlWDcoR87o4.roa (raw, json)
Hash identifier: SOP7rOvu6IGP/xNVdBYenRyUKxiSAfivEmCUTXjSaYk=
Subject key identifier: 3A:43:D8:CC:98:E6:BA:63:9A:59:6A:16:52:55:83:72:84:7C:EE:8E
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 018CCA2A585E5B234E4FD2FD451421F82FDF
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/OkPYzJjmumOaWWoWUlWDcoR87o4.roa
Signing time: Tue 02 Jan 2024 12:33:41 +0000
ROA not before: Tue 02 Jan 2024 12:33:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208340
IP address blocks: 2a06:e881:5608::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:58:5e:5b:23:4e:4f:d2:fd:45:14:21:f8:2f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 12:33:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a43d8cc98e6ba639a596a1652558372847cee8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5e:5e:dc:cf:37:9c:f9:47:61:a6:f0:ea:5f:
80:01:aa:86:f8:23:ba:75:6f:20:95:33:41:fd:95:
7f:54:04:1d:95:bc:7d:10:d4:4d:72:80:9c:ef:2d:
e2:48:d9:ab:3f:e7:09:26:6f:7c:ea:7c:03:c4:5b:
07:74:10:9f:f4:5c:48:c1:25:e9:6c:71:c4:5f:13:
36:e0:60:c1:e7:1e:1f:9d:2c:41:13:5a:21:85:73:
fc:43:e6:50:f3:ce:cc:d9:81:c6:a9:d1:95:d6:39:
a5:e5:26:c1:a9:bf:00:4f:4b:8b:9e:d5:c5:8f:3c:
7e:d3:98:bb:8b:25:3b:9d:cf:9e:fc:8d:a0:27:4a:
f4:5f:91:ef:b7:4a:cf:90:14:3f:0d:82:79:73:36:
b0:01:8d:ee:5d:52:c9:3e:40:3b:5a:07:28:de:1f:
25:17:5f:bd:10:47:4c:1c:41:a9:43:b8:cd:55:20:
c1:2e:95:36:31:20:26:c9:c5:d9:59:9f:fd:25:08:
cb:50:18:6d:49:91:c4:b8:6c:3e:10:2d:f2:ed:7d:
89:55:73:46:68:62:b9:0c:5a:ff:64:99:24:be:ed:
d4:ad:d4:82:98:6b:82:ab:83:3b:fd:d1:9c:3d:67:
a2:77:4b:4b:69:0e:69:44:dc:22:e1:49:50:42:35:
30:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:43:D8:CC:98:E6:BA:63:9A:59:6A:16:52:55:83:72:84:7C:EE:8E
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/OkPYzJjmumOaWWoWUlWDcoR87o4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:5608::/48
Signature Algorithm: sha256WithRSAEncryption
5e:86:c7:1d:db:49:fa:18:86:8b:4c:37:1f:0e:85:fe:ab:de:
c5:50:59:7e:91:c1:29:66:3d:d1:f5:63:bf:e9:9c:f6:5e:4b:
25:db:d1:94:93:b9:73:2e:8b:a4:44:60:f2:52:28:ca:0e:54:
73:f2:93:06:32:95:51:bf:3d:17:df:73:5c:ff:7d:7f:d1:26:
6e:16:ce:b5:1d:26:5d:e6:57:3e:2b:b9:77:99:55:06:6b:48:
a3:49:48:73:40:45:00:45:c5:21:5e:31:6e:9f:75:ca:c5:e6:
af:b9:4c:dc:ad:85:10:82:93:42:d0:40:69:64:66:1c:b9:ef:
8b:66:8c:4d:7c:cb:df:b1:01:fe:51:72:10:6a:57:ce:30:99:
1b:d0:fd:dc:51:2d:6d:b1:bd:f3:f3:c2:c3:b1:ef:d7:ec:ad:
f5:97:9e:3d:36:57:8e:29:44:34:9a:c1:16:0b:80:5e:ac:61:
eb:cf:36:25:90:02:a7:ae:fb:6c:30:10:36:a9:ba:ce:c7:ba:
3b:4b:99:c3:a2:b7:31:f7:2c:4d:29:50:41:bf:cd:a3:d7:5a:
cb:07:16:e1:9a:47:2a:c4:fa:43:a7:03:a3:58:de:f0:50:3f:
85:3b:d2:2f:6e:ee:73:77:1a:e2:eb:1d:e9:d5:3a:e3:d7:44:
9a:b0:76:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:58:37 2024 by rpki-client on console-fra.rpki-client.org