Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/lU0XgAvF1MXdvrqd1avo64xeBs0.roa
File: lU0XgAvF1MXdvrqd1avo64xeBs0.roa (raw, json)
Hash identifier: COjkGuJIEP2tiqN69/pKoxWcefpsc6CHjzKD0d6VOQE=
Subject key identifier: 95:4D:17:80:0B:C5:D4:C5:DD:BE:BA:9D:D5:AB:E8:EB:8C:5E:06:CD
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 018CC49251DE7E69DD88BE4D19CFCBF60D3C
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/lU0XgAvF1MXdvrqd1avo64xeBs0.roa
Signing time: Mon 01 Jan 2024 10:29:32 +0000
ROA not before: Mon 01 Jan 2024 10:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198127
IP address blocks: 2a00:e200:104::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:51:de:7e:69:dd:88:be:4d:19:cf:cb:f6:0d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 1 10:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=954d17800bc5d4c5ddbeba9dd5abe8eb8c5e06cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:97:0e:ae:02:35:95:37:5e:54:eb:30:0a:62:
ab:f1:65:fb:68:72:25:b0:15:41:fb:83:a9:b8:45:
3f:a8:dd:f2:5c:e6:04:0a:00:ec:e3:34:81:ab:dd:
0a:6f:c6:e6:c9:84:63:20:1f:c0:49:06:18:7d:fc:
1a:8d:19:fb:76:17:24:19:d7:64:ad:31:28:38:c1:
42:a5:94:1f:ae:dd:bf:86:66:68:2c:86:86:c0:1a:
00:32:f6:f5:19:d3:62:e1:28:e9:9e:ab:e0:94:1f:
38:8e:93:9f:97:70:df:b2:26:8a:08:4e:02:45:14:
0a:33:6b:9c:8e:12:54:af:cf:d5:2a:a8:f5:6f:59:
e1:c2:e3:af:48:7f:54:e3:9b:e5:6a:88:9a:f3:f2:
cb:d2:43:48:61:7d:0e:6a:3d:64:41:d4:57:7d:78:
a9:ba:8f:b9:37:f4:27:0a:b3:5c:ca:2f:8d:32:1a:
a4:91:3f:5c:00:0c:d4:b1:eb:b4:c1:57:5b:8e:65:
23:e6:08:04:28:0d:fa:be:2d:70:33:da:d2:79:4a:
b1:53:24:ba:b0:0a:65:20:f6:82:1b:7f:19:30:75:
51:1f:45:15:b9:a2:55:eb:70:6b:90:e2:4f:97:90:
f3:af:95:dc:59:a2:8f:d5:04:2d:cb:40:5e:ef:3f:
c9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4D:17:80:0B:C5:D4:C5:DD:BE:BA:9D:D5:AB:E8:EB:8C:5E:06:CD
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/lU0XgAvF1MXdvrqd1avo64xeBs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:e200:104::/48
Signature Algorithm: sha256WithRSAEncryption
45:08:54:57:30:d7:51:e3:38:f5:c3:fe:d3:47:d8:14:57:37:
59:a2:3b:07:0f:bb:4c:eb:d5:05:64:40:0b:3f:e5:7e:5a:18:
82:58:12:87:1a:a2:0b:d9:d7:85:9c:cd:ce:84:7c:58:ca:a4:
9f:2c:ce:3a:d0:50:ee:29:47:2e:ea:76:3b:fc:63:d8:78:3e:
ae:00:fe:6f:07:26:96:5f:0a:47:c4:fe:94:d5:ba:f6:e1:5d:
81:ec:a6:10:cd:0f:8d:50:b6:c6:00:f7:55:5a:e4:2b:50:d8:
42:db:b4:96:45:03:11:5f:49:fd:72:33:1c:ba:e9:59:c5:fb:
69:c2:5d:ad:2b:17:64:01:ea:99:b2:f8:01:6b:cc:bb:a1:4f:
2d:c0:7c:dc:5a:bb:83:fb:ac:34:80:58:0d:77:46:70:8d:75:
c5:2a:ad:df:2c:aa:37:a2:f9:f3:bb:1f:3e:46:7a:1d:11:e4:
c8:f0:b6:ef:3c:2a:0e:85:50:f7:14:40:85:49:b3:2c:73:48:
62:c6:a7:77:cb:f8:7a:ec:1d:ca:13:81:23:cf:b1:a6:37:cd:
77:06:8a:a9:9b:ed:0d:57:24:c0:69:38:11:8a:2b:92:a7:6a:
12:b3:fc:c8:e0:51:80:fc:a5:cf:5b:d8:82:3e:72:bf:ca:b8:
f2:0d:15:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:12:56 2024 by rpki-client on console-ams.rpki-client.org