Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/DAJmvubfbV2MSQXFifAboOS7Hk4.roa
File: DAJmvubfbV2MSQXFifAboOS7Hk4.roa (raw, json)
Hash identifier: vAU6BC+tipT+CQr6dPuAoWeNA74hWrCwxOmbeJSh5dw=
Subject key identifier: 0C:02:66:BE:E6:DF:6D:5D:8C:49:05:C5:89:F0:1B:A0:E4:BB:1E:4E
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018CC9BC21DA61F15A426C1D1BC1FFD832E2
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/DAJmvubfbV2MSQXFifAboOS7Hk4.roa
Signing time: Tue 02 Jan 2024 10:33:19 +0000
ROA not before: Tue 02 Jan 2024 10:33:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29465
IP address blocks: 2a13:e107:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:21:da:61:f1:5a:42:6c:1d:1b:c1:ff:d8:32:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 10:33:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c0266bee6df6d5d8c4905c589f01ba0e4bb1e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:72:e3:09:ad:2f:92:07:3a:96:24:5c:f8:98:
d6:96:77:5d:25:e4:f1:75:6c:16:3b:11:27:5a:86:
47:2b:e7:42:b7:52:c7:12:fe:21:2a:6b:07:f9:d9:
42:19:45:ab:ef:2f:c0:0e:79:53:1b:6a:21:fa:33:
ec:ad:6d:d6:b1:84:cf:fc:c1:8b:b3:2e:59:28:15:
7e:f8:42:9a:16:49:3b:56:4f:95:5f:4c:14:ed:c3:
f4:80:ae:b2:3a:85:f9:06:76:aa:e0:2c:8d:d4:28:
b1:51:61:06:3b:43:3b:0f:83:78:d5:60:69:87:7d:
df:1e:83:38:20:c3:e5:55:00:a7:fb:02:c5:3a:91:
0d:f1:60:eb:ae:dc:bf:a1:d2:23:39:55:d6:de:4f:
03:30:bb:c7:8f:e7:08:5a:02:ff:93:16:21:ca:a5:
d6:d1:f9:4c:1e:78:c8:aa:af:b9:64:94:c8:5e:43:
8d:c8:ed:46:28:8b:52:25:99:3e:37:c4:d4:f6:14:
be:66:5b:03:b2:52:f6:e6:41:38:16:d4:9b:d8:cc:
83:9b:9e:5f:80:9b:9e:ef:d2:46:da:83:8a:69:8f:
c4:f7:41:33:17:dd:4c:15:03:1e:f8:c8:2a:8a:e5:
5d:27:e1:0a:7f:c5:7d:c8:9b:91:70:6c:bc:cf:80:
25:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:02:66:BE:E6:DF:6D:5D:8C:49:05:C5:89:F0:1B:A0:E4:BB:1E:4E
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/DAJmvubfbV2MSQXFifAboOS7Hk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:e107:7::/48
Signature Algorithm: sha256WithRSAEncryption
c3:d9:8f:60:0b:a0:00:26:00:32:70:67:ec:f8:a8:82:2d:a6:
de:d2:bc:ee:20:7a:54:12:e3:cc:7c:c5:e7:fe:5b:94:80:5c:
87:c5:2d:da:d2:83:d4:70:40:c9:1e:90:b2:4b:67:2c:5e:8b:
3b:9f:3b:07:14:f5:b3:bf:bd:02:49:4a:13:93:4f:e6:bd:24:
14:c0:b9:ab:98:2f:5f:18:47:fa:d5:62:f9:98:9d:bb:75:fc:
91:08:d0:8e:de:0a:7a:d9:e1:bf:87:83:b5:bc:5b:1c:05:c2:
49:9d:42:37:d3:79:81:cc:ee:8b:b7:37:c1:4b:14:22:2f:fc:
6e:8a:a5:7f:5b:98:17:3d:24:60:88:88:d9:b2:ea:9d:4b:57:
da:b0:a0:13:1e:11:a4:e1:7d:5f:03:f4:de:0a:19:48:84:b7:
e4:1e:10:47:f3:43:b6:4f:6f:0d:61:4a:14:f6:c2:2b:44:08:
ee:22:28:e9:97:1a:02:6d:d4:ed:a5:a7:1b:cb:45:cb:32:14:
ac:aa:10:9e:a8:0e:9f:6f:ab:8d:50:f8:21:2e:ab:e2:9b:63:
b6:c2:de:f0:fa:c1:48:36:ca:a8:7b:c9:bc:74:d6:67:46:a4:
3a:2b:a1:1d:ce:4c:df:bf:84:62:84:80:f1:48:1d:41:bc:e6:
77:7f:49:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 13:31:59 2024 by rpki-client on console-ams.rpki-client.org