Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/OoW69NyaRuUkvjlFFyqz4FEKUio.roa
File: OoW69NyaRuUkvjlFFyqz4FEKUio.roa (raw, json)
Hash identifier: olyZ5yEBAxKRaP8GbvLvmJbEW2bcXFbNyVengJRK17Q=
Subject key identifier: 3A:85:BA:F4:DC:9A:46:E5:24:BE:39:45:17:2A:B3:E0:51:0A:52:2A
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81FECD076F77F261D89A3B956C383EB2
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/OoW69NyaRuUkvjlFFyqz4FEKUio.roa
Signing time: Wed 07 Feb 2024 05:16:15 +0000
ROA not before: Wed 07 Feb 2024 05:16:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57110
IP address blocks: 2a0f:b241:12::/48 maxlen: 48
2a0f:b241:13::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:fe:cd:07:6f:77:f2:61:d8:9a:3b:95:6c:38:3e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:16:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a85baf4dc9a46e524be3945172ab3e0510a522a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:08:e9:c3:a3:e1:72:b3:60:4a:b4:33:28:41:
14:65:ed:f5:c6:a0:82:1c:82:96:65:82:9b:1c:b8:
2a:80:c9:a4:06:c4:6f:51:5e:1a:fb:dc:ab:25:e8:
ac:ed:56:f7:de:e7:f9:e2:80:93:62:2b:d8:f3:75:
48:87:d9:0d:a9:cb:aa:41:1d:b1:5c:ad:7d:70:22:
5f:61:81:76:5a:0b:4e:ec:6f:fd:8b:35:3a:81:b8:
29:62:96:43:6c:fd:f9:14:50:6f:43:7f:d7:cb:b1:
11:77:9b:9a:14:f6:ba:f9:7c:21:c3:37:33:37:87:
a2:4c:6e:a0:ff:2e:e7:1d:69:f4:ab:8f:69:22:a5:
41:64:f6:29:20:d0:b6:60:39:c0:5b:4d:33:9d:ab:
49:86:58:05:f0:58:f6:56:47:f2:d2:ea:9b:56:a5:
b9:9a:38:f5:7c:85:27:9a:8f:3f:ad:0c:6c:b1:f8:
81:a7:25:83:bc:fd:fe:fe:fb:4e:57:bf:8e:e0:f6:
fd:e3:d2:0f:8a:79:87:98:71:96:25:b3:fb:7c:36:
3a:33:fb:ab:a0:bd:c7:0a:b1:d6:0d:66:82:4e:b4:
3f:65:0e:65:2a:fa:19:e5:0b:e1:41:be:e1:da:61:
84:43:51:20:94:c6:a1:9c:6a:8e:e7:6b:01:08:b6:
cb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:85:BA:F4:DC:9A:46:E5:24:BE:39:45:17:2A:B3:E0:51:0A:52:2A
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/OoW69NyaRuUkvjlFFyqz4FEKUio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:12::/47
Signature Algorithm: sha256WithRSAEncryption
70:98:ba:e3:ec:df:95:a5:24:e0:19:c1:68:f8:7d:28:7f:9a:
73:ac:66:a5:09:47:16:ae:fa:29:f5:3a:53:62:6a:5f:aa:ff:
a7:dc:5a:1f:4d:ed:71:4c:de:ce:8c:cc:de:62:1d:20:e8:c1:
b6:c6:8e:51:ec:48:b3:67:01:3b:d9:c1:41:83:6e:2d:5c:7e:
1a:9d:75:fd:d9:f1:f9:a5:f1:a2:84:03:5d:3c:70:18:47:03:
e9:28:5a:8d:12:35:bb:63:84:7f:1a:0c:f8:aa:dd:a9:87:88:
c1:3b:8c:f7:cc:b4:99:29:aa:e2:1a:4a:47:68:d0:a2:df:01:
56:c8:42:45:e5:73:78:eb:18:fc:47:70:0a:66:0b:37:20:e2:
25:77:6c:b4:51:55:94:84:45:31:52:25:d0:97:6d:2c:64:06:
d4:42:50:8a:15:bb:36:29:a8:ff:21:46:02:99:51:19:c7:92:
62:1c:3c:e9:36:ec:34:81:10:50:a0:0f:a3:ce:d7:7b:da:53:
95:db:a6:13:de:21:38:c5:cd:2a:4c:2f:78:b1:4a:26:ad:0b:
a5:13:57:f6:91:c2:b7:6d:92:85:ba:c5:13:f3:f4:a9:59:59:
67:38:53:13:5f:6b:e4:b3:e5:92:90:19:1a:63:c2:23:69:59:
63:37:f8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:00:20 2024 by rpki-client on console-fra.rpki-client.org