Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/0Q-ooQjAUdFa6W86OTEThLayeRg.roa
File: 0Q-ooQjAUdFa6W86OTEThLayeRg.roa (raw, json)
Hash identifier: zWOYgviA1yaZS5ZK25iVA3m21qDCQ6wgW1pbsGywR2c=
Subject key identifier: D1:0F:A8:A1:08:C0:51:D1:5A:E9:6F:3A:39:31:13:84:B6:B2:79:18
Certificate issuer: /CN=eb3d6fe787c50553b07317112e19e65b4f675931
Certificate serial: 018CC94D88C5FB84893BE8210FD27F368145
Authority key identifier: EB:3D:6F:E7:87:C5:05:53:B0:73:17:11:2E:19:E6:5B:4F:67:59:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/0Q-ooQjAUdFa6W86OTEThLayeRg.roa
Signing time: Tue 02 Jan 2024 08:32:30 +0000
ROA not before: Tue 02 Jan 2024 08:32:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38974
IP address blocks: 2001:678:cf8::/48 maxlen: 48
2001:67c:1708::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:88:c5:fb:84:89:3b:e8:21:0f:d2:7f:36:81:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb3d6fe787c50553b07317112e19e65b4f675931
Validity
Not Before: Jan 2 08:32:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d10fa8a108c051d15ae96f3a39311384b6b27918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e2:2b:6c:47:85:90:2b:af:5c:72:ff:1f:a5:
12:3f:97:1a:d8:bd:c1:7d:cf:73:6b:b7:e8:1c:51:
cf:19:22:7c:33:1f:eb:fa:85:35:72:c6:09:54:8e:
b7:e9:73:76:5c:43:e0:2a:7f:8c:ae:76:77:05:5f:
c9:13:c6:32:b1:47:64:9c:58:fe:1f:26:14:ba:c0:
48:41:ea:25:42:2e:24:05:90:ab:cb:2a:85:2e:69:
85:ad:9f:5e:0b:fc:92:2d:0f:65:e2:62:d3:be:f6:
1a:89:07:f0:f7:3e:fd:6e:05:29:02:91:cf:46:41:
02:3d:66:70:2e:7b:1e:4b:78:88:09:84:01:12:a1:
66:2c:a7:98:47:bc:44:e4:64:01:69:f1:61:00:69:
e0:2b:f0:06:52:5d:42:eb:a7:ae:42:8d:5e:b1:97:
66:84:05:09:18:ed:b8:78:29:68:8c:25:c5:f6:d5:
82:ee:90:53:16:05:70:94:e6:6f:8f:57:de:3f:0f:
25:d5:08:31:6e:f7:84:9f:04:2a:80:ce:24:eb:13:
a9:9c:87:82:5a:ad:73:5f:80:e1:1f:ba:32:fd:f9:
e6:6e:3f:84:bc:df:af:1c:c6:7a:d7:21:18:72:b4:
a5:ff:8f:2d:5b:fb:9b:45:f6:87:df:01:95:42:8e:
d9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0F:A8:A1:08:C0:51:D1:5A:E9:6F:3A:39:31:13:84:B6:B2:79:18
X509v3 Authority Key Identifier:
keyid:EB:3D:6F:E7:87:C5:05:53:B0:73:17:11:2E:19:E6:5B:4F:67:59:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6z1v54fFBVOwcxcRLhnmW09nWTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/0Q-ooQjAUdFa6W86OTEThLayeRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/07ce7e-4641-4985-9845-1a007157d59a/1/6z1v54fFBVOwcxcRLhnmW09nWTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:cf8::/48
2001:67c:1708::/48
Signature Algorithm: sha256WithRSAEncryption
02:2e:04:a6:ec:6e:53:cc:90:8c:26:9e:da:be:3e:45:5d:1c:
c9:6c:bc:a7:84:ac:d1:25:66:bf:ec:ab:54:b0:06:3e:00:35:
b5:37:c8:bc:80:55:6a:82:fa:ff:15:37:3a:ac:9e:20:91:ac:
58:52:e7:fc:79:67:ba:b6:48:af:af:06:b7:50:92:f7:41:44:
1d:ef:90:d9:7f:03:64:51:f0:5a:39:16:19:11:c3:82:0e:75:
44:02:a0:27:db:53:2c:83:6a:22:2a:b4:43:39:f6:0e:e1:ad:
6d:1b:28:32:1c:32:8b:f3:dc:97:b2:36:f2:6b:93:12:e7:77:
c0:7a:9b:ba:c1:74:72:8e:a2:b6:6f:7c:bd:c4:ad:44:2a:03:
b7:9b:54:fd:6a:77:56:25:32:10:9e:6a:2f:55:84:25:c2:dd:
fe:6a:af:47:30:64:67:ac:60:7d:4a:d2:ac:87:53:a8:d5:05:
da:f7:be:7b:ed:7c:08:98:8c:84:47:b9:02:1b:f4:b6:a1:39:
74:66:e9:dc:d3:72:86:a0:52:12:74:2d:74:ea:07:6b:be:97:
79:21:a9:68:c4:d8:1b:66:d5:0c:97:ad:07:dc:9f:ff:83:cc:
39:35:33:fa:83:f7:5b:ec:81:87:cb:65:ac:0e:6c:75:9c:82:
a0:0d:8f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 08:30:12 2024 by rpki-client on console-fra.rpki-client.org