Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/oDFrn-CFTzzRBAP-216O3A3lq_k.roa
File: oDFrn-CFTzzRBAP-216O3A3lq_k.roa (raw, json)
Hash identifier: W96OJAVsIFcAHZZdYOXv3QUF+P2Ivu+eSjEVzaww7wE=
Subject key identifier: A0:31:6B:9F:E0:85:4F:3C:D1:04:03:FE:DB:5E:8E:DC:0D:E5:AB:F9
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F0787C04BB8022F3F920CD120759E7
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/oDFrn-CFTzzRBAP-216O3A3lq_k.roa
Signing time: Wed 07 Feb 2024 05:00:36 +0000
ROA not before: Wed 07 Feb 2024 05:00:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199518
IP address blocks: 2a0f:b241:85::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:78:7c:04:bb:80:22:f3:f9:20:cd:12:07:59:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0316b9fe0854f3cd10403fedb5e8edc0de5abf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:27:56:cd:59:e6:96:65:16:b5:00:e6:59:62:
96:02:08:55:22:9a:e1:3b:5e:75:bd:3b:55:d7:07:
79:b2:5a:c5:b7:85:78:10:d7:22:fc:74:c6:74:8b:
9d:80:23:f9:1c:43:05:71:55:be:b3:60:23:4f:0c:
5a:e4:05:d9:96:44:83:a3:d4:49:27:47:1c:6c:9d:
ab:73:7e:65:fa:d9:55:86:a4:43:2e:c7:d5:57:7c:
52:dd:9f:e2:38:4c:77:3c:d9:53:5e:2b:79:f5:28:
50:e3:3e:63:d5:17:e3:24:32:b7:72:f6:db:56:ff:
88:b4:65:ad:6d:21:4b:23:b5:b8:6f:c9:c1:c8:40:
03:df:f3:07:a3:c4:41:c7:5b:a7:2c:5d:9d:0e:de:
01:3a:23:7b:3a:ce:56:da:07:2c:98:d2:db:1f:0f:
16:bd:e6:48:d8:8c:35:8a:ac:71:0b:a3:16:4e:16:
c5:f8:db:ff:21:a1:73:34:a1:df:52:64:57:6b:09:
c0:3a:34:52:44:54:01:a3:20:4a:9e:07:48:14:bc:
13:1b:01:98:b7:0b:68:6b:6f:1c:b8:10:d7:80:e9:
23:e2:10:8d:8a:49:f5:9f:d5:7e:5a:4f:07:42:45:
ce:06:e6:ec:5d:4e:e1:66:98:5f:b0:c8:63:ed:3b:
96:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:31:6B:9F:E0:85:4F:3C:D1:04:03:FE:DB:5E:8E:DC:0D:E5:AB:F9
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/oDFrn-CFTzzRBAP-216O3A3lq_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:85::/48
Signature Algorithm: sha256WithRSAEncryption
12:e2:20:93:51:0d:cf:f8:1a:d3:41:9c:e3:16:c1:73:a2:69:
97:11:54:03:6c:99:02:9e:9a:79:73:75:90:18:83:06:de:d6:
c7:65:f6:b1:df:0a:61:08:9b:20:3a:85:90:8e:60:34:1b:7f:
5a:ab:64:6d:fb:89:aa:39:57:06:92:a5:94:71:dd:3e:13:77:
bd:d5:06:a7:93:2e:96:28:1e:dd:9d:ce:03:e1:16:b6:a3:40:
a8:05:8a:56:34:77:05:43:4e:0d:a6:82:09:bb:5f:c9:a0:33:
86:07:cf:6b:55:a5:02:ec:ed:3c:62:6a:22:08:25:24:2d:c3:
1a:3c:95:0d:16:5a:84:7b:c3:22:9d:52:eb:52:f4:04:36:00:
8e:db:df:13:08:64:dc:f3:4f:6b:62:46:1c:9e:c7:82:87:25:
0a:e8:02:58:e0:2e:57:cc:53:7f:0e:d0:73:1b:46:2f:0b:34:
f7:71:5c:f5:16:cb:42:b6:97:69:12:c6:b5:88:29:21:7d:ae:
11:c1:2a:27:d3:ab:09:8e:fa:cf:02:04:51:82:d0:2d:d4:fb:
8a:2f:48:62:83:d3:3b:81:a4:47:ad:c5:20:64:56:9c:98:e1:
f4:03:b2:7f:fb:0d:64:13:d0:01:40:ac:4b:eb:24:0d:46:c5:
03:d3:54:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:27:52 2024 by rpki-client on console-ams.rpki-client.org