Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/MOH6C-4smcCKpUtyWmkfr5xd8Ys.roa
File: MOH6C-4smcCKpUtyWmkfr5xd8Ys.roa (raw, json)
Hash identifier: 68lRyxacjm9kx2hLFoEr1Vl+extRAvCL1ScDQec3Yno=
Subject key identifier: 30:E1:FA:0B:EE:2C:99:C0:8A:A5:4B:72:5A:69:1F:AF:9C:5D:F1:8B
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 018F76E9339BD34405815D7EAAA73686E880
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/MOH6C-4smcCKpUtyWmkfr5xd8Ys.roa
Signing time: Tue 14 May 2024 11:42:25 +0000
ROA not before: Tue 14 May 2024 11:42:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43754
IP address blocks: 2a05:9080:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Jun 2024 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:76:e9:33:9b:d3:44:05:81:5d:7e:aa:a7:36:86:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: May 14 11:42:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30e1fa0bee2c99c08aa54b725a691faf9c5df18b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f1:82:18:fd:0d:59:81:d3:ca:5c:bf:59:38:
94:b4:79:e9:00:6c:53:ad:e1:3b:6b:68:ce:d9:89:
b1:65:4f:5d:f7:ea:68:ce:c0:17:a2:65:25:c2:d4:
f0:33:f0:1e:bd:ce:41:c9:b1:55:ad:9a:32:93:9a:
ea:39:e8:a7:b5:11:6c:d3:6d:c7:93:77:c3:4d:d8:
57:b9:4f:c4:a6:0c:f9:05:c1:c5:fe:1f:73:03:19:
9b:7f:da:f2:e6:7b:9f:2c:33:15:61:d4:84:de:b2:
49:6f:dc:37:d6:eb:83:dd:c4:0b:6d:b1:dc:c5:50:
89:86:8a:9f:82:70:6a:68:ef:c5:33:0c:02:8e:1d:
f1:90:b4:86:6e:f2:c5:97:0a:e5:ab:4a:5b:c4:6c:
e6:e3:b7:a2:84:bb:72:2c:c4:95:65:16:9a:50:a8:
f9:f2:2b:6c:f3:55:48:45:1a:01:5b:e3:ae:86:a3:
90:a9:0b:37:4e:f3:42:32:ef:72:5f:7d:01:1e:97:
26:80:29:21:13:10:bb:97:a3:3f:f2:38:d2:e4:11:
0e:ca:06:85:18:91:52:18:a9:a9:18:26:3f:eb:dd:
98:da:4e:98:8a:a6:0a:ba:ca:1f:a3:2f:18:43:a0:
56:5c:d5:28:d0:39:bf:ac:6e:bc:2a:50:0d:a2:92:
74:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E1:FA:0B:EE:2C:99:C0:8A:A5:4B:72:5A:69:1F:AF:9C:5D:F1:8B
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/MOH6C-4smcCKpUtyWmkfr5xd8Ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9080:2::/48
Signature Algorithm: sha256WithRSAEncryption
c6:3e:d6:f5:0f:97:5a:e2:2c:34:8f:db:cc:ba:ae:6f:43:b1:
44:5c:cd:3e:8a:a4:4b:38:83:89:37:2e:1b:db:21:84:39:6b:
3a:d6:14:d7:26:40:54:57:dd:72:f6:cc:92:e8:8d:b6:17:aa:
42:10:57:d5:e7:87:bb:20:6a:72:ac:08:35:4e:56:eb:1b:a1:
52:47:0e:81:6d:1c:3f:df:c9:2e:7b:99:70:2b:ff:49:f5:17:
4f:ea:d9:0a:84:90:6a:39:e3:26:51:ab:0d:7a:d0:9b:39:9b:
67:52:3f:d2:20:8a:25:d1:e8:92:45:d8:fd:e4:83:16:89:3a:
6b:87:64:b7:f1:d3:29:51:72:06:04:86:e2:45:d9:79:04:4c:
eb:0b:62:ff:a2:f4:7e:40:c0:71:39:6b:47:e1:c5:77:e1:e9:
cb:a6:19:f3:c9:e1:71:e5:8f:77:7a:fb:47:fc:94:06:b2:c5:
62:9f:4f:08:b7:c2:62:08:af:ea:c1:40:71:a2:3c:99:c6:22:
f6:9c:2b:97:ea:9e:66:1e:67:a6:e0:82:18:66:68:2d:41:ca:
c8:53:6f:b4:43:21:3c:a8:9c:13:e1:8f:4a:ab:5d:5c:51:f4:
10:28:99:21:4f:0b:7e:eb:8a:22:5f:27:10:0a:1d:82:29:8e:
06:e0:46:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 10:32:58 2024 by rpki-client on console-fra.rpki-client.org