Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/ergcyIpcwGuiiSaaUOcdU2Rz2Jw.roa
File: ergcyIpcwGuiiSaaUOcdU2Rz2Jw.roa (raw, json)
Hash identifier: zEegMcX2v2fkYUEEGtDEflRz5452QJumvpTUC0hz/yQ=
Subject key identifier: 7A:B8:1C:C8:8A:5C:C0:6B:A2:89:26:9A:50:E7:1D:53:64:73:D8:9C
Certificate issuer: /CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Certificate serial: 018CC793DB04CBBA2DDCC7080A00633318B3
Authority key identifier: C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/ergcyIpcwGuiiSaaUOcdU2Rz2Jw.roa
Signing time: Tue 02 Jan 2024 00:30:05 +0000
ROA not before: Tue 02 Jan 2024 00:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216225
IP address blocks: 2a13:d8c4:40::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:db:04:cb:ba:2d:dc:c7:08:0a:00:63:33:18:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Validity
Not Before: Jan 2 00:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ab81cc88a5cc06ba289269a50e71d536473d89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:30:28:95:07:ca:48:47:6e:da:20:3a:f9:c0:
b0:9d:29:32:c0:f4:0e:76:69:46:a0:8d:2e:1c:a1:
82:a8:56:22:3f:c2:1d:a8:83:76:4f:1f:d2:4b:41:
58:76:f0:95:92:9b:fa:f4:b4:0c:1f:30:59:15:26:
4c:8b:9a:20:e6:52:bd:f9:59:20:5b:4c:db:09:31:
f1:20:bf:16:26:68:87:dc:05:8f:67:5d:48:a8:72:
ac:19:f8:29:d9:e7:56:4a:66:ac:a9:ce:7c:b1:30:
ce:bc:28:67:f8:c7:14:5c:88:48:f8:e7:1a:37:cb:
72:61:db:d8:f1:e4:0e:b1:c9:6e:ea:8c:49:ef:a6:
67:12:38:2e:ba:5e:23:48:a6:92:13:58:07:c0:aa:
20:e1:9a:2d:ab:a1:e9:78:39:ff:af:ef:67:54:c6:
66:88:e1:65:62:ea:3b:d9:d7:95:b6:3d:ee:33:4b:
c0:be:19:e5:d9:bd:83:a8:e9:52:cf:e6:23:c7:82:
aa:62:84:2c:48:93:22:e7:f3:27:b9:16:58:76:5f:
dd:8c:b6:cc:77:dd:00:94:c7:52:cf:2c:e0:68:a3:
9c:c0:af:14:eb:e5:9e:43:6d:86:ad:05:55:2b:a5:
c7:a4:bf:90:7b:ff:e5:f3:27:43:73:86:7b:9e:09:
64:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B8:1C:C8:8A:5C:C0:6B:A2:89:26:9A:50:E7:1D:53:64:73:D8:9C
X509v3 Authority Key Identifier:
keyid:C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/ergcyIpcwGuiiSaaUOcdU2Rz2Jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:d8c4:40::/44
Signature Algorithm: sha256WithRSAEncryption
95:2a:8e:38:e2:c5:54:bc:3f:ea:e0:8a:f0:c6:7b:19:83:e0:
31:3f:66:3b:4a:f3:e5:ce:99:5e:02:f7:dc:a5:f1:0b:11:f6:
b5:b3:ae:52:98:63:ed:08:d7:23:bd:47:b6:54:93:ec:0f:28:
cb:f3:d8:de:82:8e:a5:6e:34:3c:8c:38:52:dd:47:f9:ca:5a:
b1:32:61:27:7b:5c:64:8b:e4:09:40:4c:cc:5c:bd:1d:06:85:
03:4f:de:4b:20:e3:44:bf:de:95:f0:14:57:fa:d0:9a:ca:9d:
b9:b7:e6:a2:d6:52:57:2e:83:c6:33:11:28:7d:81:29:46:2b:
de:31:9e:4e:2d:8f:12:ab:97:f2:a8:a8:73:ae:fd:30:af:0b:
3b:8a:e7:98:83:79:6f:55:9e:c5:ae:9e:7f:a7:b2:eb:fb:8e:
25:c0:fc:25:11:cf:df:96:7b:dc:8b:01:f1:e4:9c:9a:4e:01:
70:10:51:cf:32:93:97:a9:49:c1:55:5b:8a:aa:1d:e4:ab:fa:
5d:3a:bf:e6:4b:64:5f:de:16:5a:c0:17:7f:8b:83:04:96:05:
3e:6a:5a:3e:71:09:db:9c:09:d7:54:65:ff:c0:29:0d:6a:e1:
97:2f:d1:11:fa:6a:b8:09:8c:b4:09:4a:fa:ef:9e:0a:8a:7c:
7f:df:5b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:58:12 2024 by rpki-client on console-fra.rpki-client.org