Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/DbMo_NzkiiliYs57pi4EQRNM8iA.roa
File: DbMo_NzkiiliYs57pi4EQRNM8iA.roa (raw, json)
Hash identifier: mZdkZo/YNL2ivX6Ucdz/rXgcskCAHWUSNqEp3aidXmI=
Subject key identifier: 0D:B3:28:FC:DC:E4:8A:29:62:62:CE:7B:A6:2E:04:41:13:4C:F2:20
Certificate issuer: /CN=8a1f0ad5572bae26e39c8740c68a8fbb46ee4864
Certificate serial: 018CC8DE38A2648D6CF0AD156B57E2314755
Authority key identifier: 8A:1F:0A:D5:57:2B:AE:26:E3:9C:87:40:C6:8A:8F:BB:46:EE:48:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/DbMo_NzkiiliYs57pi4EQRNM8iA.roa
Signing time: Tue 02 Jan 2024 06:30:55 +0000
ROA not before: Tue 02 Jan 2024 06:30:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201634
IP address blocks: 2a05:c181::/32 maxlen: 32
2a05:c180::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:38:a2:64:8d:6c:f0:ad:15:6b:57:e2:31:47:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1f0ad5572bae26e39c8740c68a8fbb46ee4864
Validity
Not Before: Jan 2 06:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0db328fcdce48a296262ce7ba62e0441134cf220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:93:99:2f:5f:f1:2a:3f:2b:2d:dd:a6:9b:e8:
e1:c9:b7:8a:ac:e1:8d:71:0d:a8:d3:ea:d8:37:11:
a2:9d:51:84:67:d1:57:31:57:6b:ea:44:90:19:97:
5f:b8:ea:f6:78:d8:8e:0f:0e:5d:d7:7a:72:42:2b:
87:97:4e:44:aa:98:f3:c5:e5:5a:7e:3d:08:b1:7f:
4a:54:c5:88:ef:cb:ed:3f:e4:a1:bb:c8:09:0d:c7:
c8:77:45:7a:07:ac:d9:fe:03:ec:f2:36:70:0f:91:
aa:09:a2:8a:c1:15:05:18:92:bb:62:6b:61:c7:80:
5c:df:4e:ea:8f:e7:33:a7:30:f5:60:2a:3c:54:b4:
4c:67:da:55:75:65:bd:43:c8:b7:cd:f0:1b:65:1c:
f8:9e:ee:9c:26:76:66:99:fe:ea:c6:3a:1c:f3:c5:
34:6c:a7:6b:05:05:da:26:27:48:48:9f:af:87:10:
cc:5b:27:ab:5d:aa:9f:e4:64:4c:59:69:48:20:a9:
1d:19:29:49:c9:15:9a:29:bc:98:34:cd:ea:94:b3:
93:b1:f1:52:54:11:9c:50:f7:23:4c:c5:97:b5:b8:
bb:45:bf:b4:e5:8a:04:9f:dd:b4:2b:8e:40:c1:a1:
c4:55:15:aa:fe:cc:71:2b:03:99:8e:60:0c:8c:e5:
43:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B3:28:FC:DC:E4:8A:29:62:62:CE:7B:A6:2E:04:41:13:4C:F2:20
X509v3 Authority Key Identifier:
keyid:8A:1F:0A:D5:57:2B:AE:26:E3:9C:87:40:C6:8A:8F:BB:46:EE:48:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/DbMo_NzkiiliYs57pi4EQRNM8iA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:c180::/31
Signature Algorithm: sha256WithRSAEncryption
88:a2:a7:8f:36:f1:37:30:41:cd:2a:03:b1:ed:d1:6f:4f:0f:
4b:a1:85:ea:28:d8:75:3b:8e:4d:79:4e:32:53:4e:14:6d:0e:
f3:14:6a:28:3a:15:80:1d:24:a1:cd:99:09:7f:5f:04:62:ea:
c5:18:1f:ef:78:3b:2d:6a:de:c4:50:e3:91:f3:c7:23:fc:3f:
15:b4:9a:1f:e0:43:b3:b9:1d:c7:57:b5:75:b5:ce:a3:95:23:
57:e6:30:41:6e:01:4c:b5:b2:c3:0b:3c:d7:05:ab:8d:ea:c6:
b1:ec:32:3c:8e:ae:0d:bd:56:4c:64:73:68:cf:66:09:db:73:
a1:9a:68:b1:c4:49:ef:cb:bb:65:50:2c:a6:48:ce:eb:83:4b:
58:bd:be:dd:43:78:5e:26:28:4a:38:81:73:ea:c4:c5:16:b4:
78:7d:20:2d:6c:4e:90:bb:49:be:14:14:c0:a5:70:1a:cc:22:
10:d5:5d:11:b5:a6:d2:9c:a2:77:be:6b:d2:7a:24:5c:b6:89:
a5:f1:2a:c5:0e:77:57:14:70:6e:d2:d3:0d:45:7a:31:6f:39:
df:a0:98:0c:ed:f6:6f:e4:22:3e:c8:3c:30:d5:9d:d7:3b:f0:
bf:3c:fb:30:b2:bc:f2:97:a5:fa:63:ed:78:ad:62:b4:89:cc:
95:f9:bd:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:45:09 2024 by rpki-client on console-ams.rpki-client.org