Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/cpZe6iCBfa-eGTffVz3U-xD_-V8.roa
File: cpZe6iCBfa-eGTffVz3U-xD_-V8.roa (raw, json)
Hash identifier: tfRJd8wVuZAsNAj6YqwM3P2W3EXtfbyhAgDGFrmXx7M=
Subject key identifier: 72:96:5E:EA:20:81:7D:AF:9E:19:37:DF:57:3D:D4:FB:10:FF:F9:5F
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 018CCA2A520B699880A8DBCFFE2EB336286A
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/cpZe6iCBfa-eGTffVz3U-xD_-V8.roa
Signing time: Tue 02 Jan 2024 12:33:40 +0000
ROA not before: Tue 02 Jan 2024 12:33:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204003
IP address blocks: 2a06:e881:5800::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:52:0b:69:98:80:a8:db:cf:fe:2e:b3:36:28:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 12:33:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72965eea20817daf9e1937df573dd4fb10fff95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7d:16:77:b8:27:85:fe:8a:b1:f0:0d:c1:94:
8a:a0:3e:ca:de:aa:73:2e:e3:20:f3:30:cf:d8:80:
3a:e5:72:69:90:7d:81:61:49:77:be:df:58:c9:2f:
b4:d0:4c:67:a9:20:27:98:38:1c:7f:a2:23:a6:e3:
6b:f0:56:9b:a2:57:c1:db:48:53:09:66:86:03:ae:
d6:65:98:10:2d:8a:5a:8e:0e:2b:4f:88:1b:ff:cb:
82:24:0e:bf:41:49:4f:e5:ca:a7:2d:ec:70:cf:6d:
32:05:6b:08:7e:78:4f:cf:96:ea:0b:2c:65:e0:2d:
68:41:12:8a:33:f4:35:d3:c0:31:41:b2:e1:c0:92:
a7:b2:6b:e8:5e:31:78:41:1b:99:d0:ab:98:35:f1:
af:b5:fd:a8:22:a1:eb:87:80:a8:f8:cd:d5:da:76:
46:2f:58:8b:38:e2:3b:31:bc:6e:b2:98:c9:17:38:
07:1e:ec:3d:46:8a:8a:99:97:8a:4b:eb:15:de:d7:
92:cf:9a:b1:0b:66:27:a6:33:5a:9d:67:22:3e:0d:
d6:6e:b0:5a:8f:4e:b4:82:c6:0b:f0:01:ac:2c:a8:
78:cc:00:ad:99:6e:f7:b3:54:6e:79:25:98:19:30:
cc:f3:a2:21:fe:50:1a:73:32:9c:07:ad:32:08:c2:
bc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:96:5E:EA:20:81:7D:AF:9E:19:37:DF:57:3D:D4:FB:10:FF:F9:5F
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/cpZe6iCBfa-eGTffVz3U-xD_-V8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:5800::/44
Signature Algorithm: sha256WithRSAEncryption
ad:c6:fd:b1:00:21:ef:c9:dc:f9:1a:44:ae:a8:0c:da:d5:c6:
1f:db:c4:57:a6:14:52:35:d7:37:08:ee:b9:05:88:a0:68:34:
75:6d:c2:78:6f:fa:56:33:09:25:96:fa:af:5d:5a:18:2d:9a:
9e:9e:f5:f9:bf:05:b1:c5:68:e6:d3:1d:97:a0:da:5b:79:a3:
ee:dc:34:30:76:74:b0:a0:75:ee:e0:db:c7:e7:37:f5:67:e1:
fe:6c:07:7d:af:65:37:94:f3:b4:2c:ce:cf:c7:8e:cf:a0:e1:
13:4e:85:a3:b4:02:5f:bb:cf:ec:77:79:b6:ee:62:ba:48:84:
d4:f8:75:61:aa:52:51:a4:00:88:35:e4:b5:53:1d:86:f7:31:
63:62:cd:24:81:57:86:6c:49:73:62:56:e7:bb:9b:1b:b7:09:
77:ec:36:a6:15:ff:44:98:32:3e:3b:d5:1d:6b:23:fa:73:fd:
7c:23:d6:03:80:21:2e:88:fd:6f:ce:9e:b9:03:34:c9:aa:8d:
f8:2e:dd:b0:9e:c7:f9:36:25:7e:16:51:3c:39:db:8f:00:d1:
7e:1b:32:01:2a:a3:37:6a:ff:55:36:1a:77:ef:41:2f:55:eb:
b1:a9:74:54:3e:2e:d8:a2:0e:c0:e0:ae:e0:1d:72:36:40:75:
c6:67:5d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:31:34 2024 by rpki-client on console-ams.rpki-client.org