Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/jcqX27pJIZaPH9Y7cvs4eeXcTp0.roa
File: jcqX27pJIZaPH9Y7cvs4eeXcTp0.roa (raw, json)
Hash identifier: UZL2jnmZuQItLIQ3pDLHF9od+P7g4Ek8HLfJpdeTC+Q=
Subject key identifier: 8D:CA:97:DB:BA:49:21:96:8F:1F:D6:3B:72:FB:38:79:E5:DC:4E:9D
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 018CC348F021C7BF1597741239FB16477B62
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/jcqX27pJIZaPH9Y7cvs4eeXcTp0.roa
Signing time: Mon 01 Jan 2024 04:29:46 +0000
ROA not before: Mon 01 Jan 2024 04:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2546
IP address blocks: 2001:648:2120::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:f0:21:c7:bf:15:97:74:12:39:fb:16:47:7b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 1 04:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8dca97dbba4921968f1fd63b72fb3879e5dc4e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f2:5b:9b:66:ee:5e:bb:e0:05:13:3a:91:74:
e0:b3:1e:f3:f0:2c:10:6a:4f:0a:fa:83:58:f9:45:
76:35:59:73:fb:af:b5:b0:2c:25:9b:62:33:80:ed:
b7:09:47:b6:48:14:11:1f:00:e3:9d:03:a8:01:cb:
d8:5c:6b:ae:87:6f:13:c8:c5:f9:03:5c:7b:25:fd:
7f:85:8c:ef:86:6b:6a:99:6e:23:4c:38:ca:ca:ea:
91:ba:8e:ab:bf:57:9c:06:0b:78:16:c0:ea:bc:75:
a8:8a:8b:06:5f:0d:0c:8d:da:e5:0f:d1:f7:6b:0b:
cb:90:a0:56:ac:4b:53:1e:a2:a6:76:ad:1e:8d:da:
b3:a8:0b:48:b5:48:97:00:84:09:e3:fe:45:34:4d:
27:38:dd:a2:7d:5b:ff:3d:b2:40:99:25:9e:df:55:
37:a2:e6:be:c2:d2:06:0b:cb:d9:3f:64:fa:25:86:
14:1f:22:5b:2b:4c:f9:ef:84:0f:55:49:95:59:f1:
8c:3c:d5:e8:7d:40:7e:aa:88:25:09:0b:9f:ea:32:
a5:8b:ad:11:27:61:69:56:88:89:a7:cc:75:a8:47:
ef:ac:e7:37:e4:70:02:12:b5:9d:07:a2:d1:0d:73:
90:05:f2:ff:c6:67:7a:08:96:9c:11:ad:2d:ae:af:
fd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:CA:97:DB:BA:49:21:96:8F:1F:D6:3B:72:FB:38:79:E5:DC:4E:9D
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/jcqX27pJIZaPH9Y7cvs4eeXcTp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:648:2120::/48
Signature Algorithm: sha256WithRSAEncryption
41:1e:d2:d1:0b:4f:97:4a:b4:66:b2:fd:d2:87:37:1b:60:ac:
2b:93:82:a5:ba:f3:a5:23:34:da:db:f6:d0:43:8f:b8:e1:da:
6c:03:8d:eb:ac:b1:5f:9f:84:7d:9a:23:2a:41:6a:94:89:0e:
c8:18:88:65:06:b6:71:c9:c2:fc:1b:3b:73:d1:95:4c:14:b1:
09:1d:85:f7:7d:78:9d:24:b5:38:b8:8e:13:01:53:d6:48:bd:
3c:83:f3:c0:d2:6d:69:54:93:e8:34:b3:ec:4c:47:9c:ff:45:
fd:fb:79:97:c9:9f:a0:d8:c2:9b:80:8a:cc:6c:0e:9e:6e:03:
34:c1:6b:88:bf:1d:83:f8:ef:5c:e1:a8:f8:0c:71:b1:16:95:
52:c8:38:fb:ef:67:d0:bc:27:e8:86:da:e0:cd:df:11:65:ec:
eb:f3:8a:0f:ad:51:ad:b4:80:d8:ae:c1:54:c7:74:51:df:0a:
ce:e2:79:ea:2d:a3:f3:e5:7f:59:e7:e2:b5:3a:7d:a4:a5:75:
c6:a1:6b:07:bc:fa:d1:66:3b:bb:e8:94:c8:4a:1e:23:76:b6:
7f:45:d4:45:db:9a:b7:63:27:0e:03:4f:ab:b5:9a:cb:00:e7:
54:90:31:16:f2:14:2d:b0:c8:4a:b8:7b:bd:03:77:94:2f:c8:
a4:83:4c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 11:33:26 2024 by rpki-client on console-fra.rpki-client.org