Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/mt2fZKCH-St1hK_aP1aDa8gP5Rg.roa
File: mt2fZKCH-St1hK_aP1aDa8gP5Rg.roa (raw, json)
Hash identifier: pTybiO/cOmmh9UXeZyoO0jQVV8Q6QUG38IjtQmN2GPk=
Subject key identifier: 9A:DD:9F:64:A0:87:F9:2B:75:84:AF:DA:3F:56:83:6B:C8:0F:E5:18
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F0A85DD58BEB00C5A9260DE2349963
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/mt2fZKCH-St1hK_aP1aDa8gP5Rg.roa
Signing time: Wed 07 Feb 2024 05:00:49 +0000
ROA not before: Wed 07 Feb 2024 05:00:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211562
IP address blocks: 2a0f:b241:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:a8:5d:d5:8b:eb:00:c5:a9:26:0d:e2:34:99:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9add9f64a087f92b7584afda3f56836bc80fe518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e4:62:a2:45:d4:f4:00:81:ea:1e:7e:a2:39:
4c:32:3e:e8:3c:ea:1b:0d:5c:2b:51:c2:ea:87:9a:
19:17:ca:fc:55:63:a6:0a:c2:e1:9a:10:e0:90:44:
a1:34:dc:ab:60:f6:65:a9:29:76:f2:28:ef:e8:35:
dd:eb:79:12:fa:19:65:95:8e:45:db:b7:54:07:6b:
13:02:d8:e1:92:38:a5:d8:09:9f:61:98:0e:5f:2c:
ff:bb:97:0f:fa:96:af:47:76:4a:e8:77:e2:6e:3c:
af:be:d7:fd:96:62:0b:95:b7:71:12:c2:8f:6d:c8:
91:c4:b0:74:48:07:b8:8f:70:3c:70:b9:70:65:56:
bf:c6:c8:68:0a:69:3b:7b:3a:4b:fc:4a:1d:08:97:
7a:33:77:b6:76:86:9d:5f:e5:a2:0e:9d:39:61:03:
72:9f:a3:ac:57:66:6e:15:6f:7f:9f:3c:6e:28:a0:
95:b6:8d:fe:b8:94:b6:10:88:df:87:80:75:6d:90:
84:a1:1f:46:64:28:61:37:3c:61:66:fa:b2:aa:0a:
1a:a6:46:56:59:3d:2b:ae:be:7b:9f:26:ec:2a:59:
75:a5:2f:58:3a:ea:07:87:4f:02:e0:49:75:10:75:
ba:1a:2c:a4:eb:46:6f:a8:71:1c:16:f5:9a:56:d9:
1d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:DD:9F:64:A0:87:F9:2B:75:84:AF:DA:3F:56:83:6B:C8:0F:E5:18
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/mt2fZKCH-St1hK_aP1aDa8gP5Rg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:4::/48
Signature Algorithm: sha256WithRSAEncryption
89:d8:cb:6d:d0:fb:b0:ce:c0:5c:d5:d9:87:99:02:21:77:e8:
66:c2:2a:d3:05:7b:f8:64:f0:67:01:7f:5b:fa:17:9a:d7:8b:
f6:19:e4:cb:a2:6b:3b:c1:1d:2f:a4:45:6a:c5:0a:14:9e:12:
9a:d3:33:03:30:f9:61:40:ac:7b:1e:52:c4:9b:13:70:a1:ef:
ac:ba:8c:c0:b8:2c:ad:78:93:2d:35:a2:91:26:79:c9:95:c4:
a7:86:53:02:21:e3:0c:e2:35:0b:3d:9d:75:54:cb:4f:28:03:
a1:5d:c3:b3:7d:81:38:48:c6:87:14:9e:c6:f0:f6:72:eb:8f:
46:00:d3:f9:43:e2:78:d4:fe:84:f0:c8:f4:cf:c5:fe:f8:35:
0c:18:44:b8:d5:e1:19:b4:12:0d:b6:c9:93:ce:e4:d7:4f:ed:
52:4c:05:c4:64:06:23:eb:11:91:d7:fe:6f:50:2a:ec:00:49:
18:7a:34:f8:60:4f:bc:c5:e9:bf:d2:60:36:00:f5:f5:cd:3c:
50:58:cd:90:a7:80:4a:5c:bd:11:ea:99:74:25:b3:09:50:e7:
47:88:6c:4c:09:18:4b:d8:81:54:b8:89:4a:23:3e:e4:10:c9:
d6:eb:90:ef:e0:de:2c:da:c5:b4:9a:30:be:92:e5:ff:b1:4b:
20:09:4a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:36:20 2024 by rpki-client on console-fra.rpki-client.org