Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ArPmiaL9wsmukOM_54-ofrq479o.roa
File: ArPmiaL9wsmukOM_54-ofrq479o.roa (raw, json)
Hash identifier: b1wf9M4SCu+LqCw0+A+FEUJKjcrs0KQ8XivK3bkOi9U=
Subject key identifier: 02:B3:E6:89:A2:FD:C2:C9:AE:90:E3:3F:E7:8F:A8:7E:BA:B8:EF:DA
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F0B437CD9C6B03F5877F6840225990
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ArPmiaL9wsmukOM_54-ofrq479o.roa
Signing time: Wed 07 Feb 2024 05:00:52 +0000
ROA not before: Wed 07 Feb 2024 05:00:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215665
IP address blocks: 2a0f:b241:25::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:b4:37:cd:9c:6b:03:f5:87:7f:68:40:22:59:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02b3e689a2fdc2c9ae90e33fe78fa87ebab8efda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3f:5d:1c:b0:a3:d4:57:6d:c7:7f:54:7d:62:
56:3d:61:28:4a:38:1a:32:72:ae:90:0c:56:4a:8f:
6c:03:2a:e0:cb:0d:5f:a8:cf:0f:4f:4f:ec:26:5d:
53:44:c3:c3:d9:cd:05:20:67:d2:97:1b:3b:cd:d2:
6b:fd:09:54:13:bd:e8:ac:0c:4a:35:cb:b0:cd:60:
91:48:f9:56:da:3c:c5:0a:da:e0:cd:15:06:fe:68:
05:40:cd:6f:65:0c:c8:f2:90:82:49:ca:a6:e8:38:
b6:ad:3b:5b:6e:53:6f:ce:bb:f7:f5:cc:bf:f6:81:
e9:58:f5:56:ec:ab:c2:7f:9d:9b:23:cb:5f:83:db:
a3:c4:f1:25:7f:06:86:dd:ec:b1:ac:f5:46:85:88:
3e:d1:37:5f:9d:45:64:c9:a0:fc:9c:d9:ce:f3:eb:
e0:b8:3e:6f:3b:6a:34:58:6b:a3:05:b0:db:e4:d8:
34:38:c2:13:68:3a:01:6c:f3:f9:0d:e1:d3:87:19:
d1:5d:b7:7f:5b:71:e0:4a:76:8c:75:77:a9:08:d4:
44:ff:a1:92:43:ff:89:6e:cd:e3:bb:58:2b:ef:34:
0e:9f:e8:02:44:13:35:61:cb:33:d7:cf:fd:91:b3:
ec:fc:48:29:6c:63:b5:8a:81:7c:30:58:4a:b5:0a:
04:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B3:E6:89:A2:FD:C2:C9:AE:90:E3:3F:E7:8F:A8:7E:BA:B8:EF:DA
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ArPmiaL9wsmukOM_54-ofrq479o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:25::/48
Signature Algorithm: sha256WithRSAEncryption
14:50:1b:49:4c:11:9a:8c:a3:28:5d:46:01:63:dc:87:ca:bb:
73:0d:19:f9:6c:29:38:13:88:d8:42:3e:b2:88:b4:46:e8:d9:
72:bc:a2:04:a5:79:1c:f3:e6:0f:f2:33:8d:bf:86:ce:6b:c9:
7f:e8:97:8b:98:7a:68:d9:5d:67:e3:db:bb:35:f5:bd:56:6e:
24:01:69:e9:45:43:4b:17:07:48:2f:03:ad:d9:5a:65:df:d0:
66:34:2c:32:63:42:1f:49:7d:dc:2f:d6:d1:07:e2:11:f5:66:
d3:6f:35:e5:e6:ae:89:e3:47:31:9e:47:5d:37:f0:bc:58:57:
b6:2e:e4:ee:8a:8b:c5:dc:7d:14:86:4d:a9:5e:00:9f:56:ad:
41:a7:08:82:01:12:5a:2e:5b:52:fd:99:bf:96:83:1f:05:f3:
a1:06:22:74:2f:4d:71:1a:fd:e3:22:49:e4:e3:64:8a:d2:ba:
f1:a7:2c:53:3f:a0:a0:c7:92:e1:9c:36:16:5c:ae:15:8b:2a:
44:48:9c:a6:03:77:4d:ca:dc:d7:5e:98:c7:01:52:74:ca:49:
55:c3:5e:00:f9:94:e4:f8:b4:67:20:f1:f4:b9:2a:ee:70:27:
d8:64:68:1a:b8:b3:16:c2:16:a9:ec:63:64:c8:40:5b:d9:a4:
31:7f:af:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:36:20 2024 by rpki-client on console-fra.rpki-client.org