Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/xzspfY1QWHE1JPH-taJyuAoGc-c.roa
File: xzspfY1QWHE1JPH-taJyuAoGc-c.roa (raw, json)
Hash identifier: AD/fxJjkgWm/d/W6hET6cPSEDrtngFcwUvDOW/a1S2Y=
Subject key identifier: C7:3B:29:7D:8D:50:58:71:35:24:F1:FE:B5:A2:72:B8:0A:06:73:E7
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F066B3A2AF307AFED384CA1ED316FE
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/xzspfY1QWHE1JPH-taJyuAoGc-c.roa
Signing time: Wed 07 Feb 2024 05:00:32 +0000
ROA not before: Wed 07 Feb 2024 05:00:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59678
IP address blocks: 2a0f:b241:15::/48 maxlen: 48
2a0f:b241:123::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:66:b3:a2:af:30:7a:fe:d3:84:ca:1e:d3:16:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c73b297d8d5058713524f1feb5a272b80a0673e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:31:16:06:de:db:3f:43:45:d0:0c:76:b1:17:
ce:72:24:36:3f:60:06:e3:71:7a:3d:09:c0:43:73:
60:aa:25:cc:c2:cb:eb:9b:ad:11:90:fe:4b:2a:d4:
03:5a:b9:55:71:e5:81:77:7a:d8:7d:b8:46:b5:9c:
ab:cd:ca:19:98:35:f2:5c:98:10:eb:c4:d2:95:7e:
6c:26:9d:20:fa:8e:30:7f:ca:a2:91:98:21:66:f3:
55:51:46:fc:72:23:46:fa:99:19:82:e5:35:b5:b1:
48:65:63:dd:6d:90:a7:a3:2a:50:90:78:ea:90:c0:
51:63:ae:35:0a:2d:3a:cb:c2:db:79:c7:fd:85:f0:
e1:5f:6f:05:a5:24:a3:57:91:9c:ec:cf:86:e3:7f:
35:1e:59:45:12:ad:15:49:af:c9:3f:33:e5:07:ad:
f5:38:48:11:d8:9b:ed:2e:44:3c:5f:5e:bb:83:ea:
66:da:db:73:b7:f9:14:c2:bc:9c:f7:e1:15:18:38:
b1:4c:98:27:e1:9e:1c:5e:71:7e:9a:f8:68:03:54:
84:5d:b5:d6:12:71:0c:4b:0d:b3:bd:f5:c7:49:b3:
5e:27:40:dd:ff:1c:c1:63:81:56:ed:e6:d9:66:7b:
ea:32:9b:2d:b5:41:1a:f0:b8:9b:91:47:bb:32:67:
8d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3B:29:7D:8D:50:58:71:35:24:F1:FE:B5:A2:72:B8:0A:06:73:E7
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/xzspfY1QWHE1JPH-taJyuAoGc-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:15::/48
2a0f:b241:123::/48
Signature Algorithm: sha256WithRSAEncryption
0f:f4:9f:cd:04:80:ba:ae:6f:dc:ff:2c:c4:e8:fa:fa:e4:e8:
cd:40:0d:c1:02:af:de:3b:64:7e:92:61:b4:00:e6:db:fc:9a:
9a:16:d3:0c:b2:37:04:aa:a8:d6:0b:7d:80:cc:63:81:f3:8c:
0a:3b:36:87:bf:03:33:ba:a8:47:66:e4:2e:a5:67:1e:54:3f:
35:5f:c4:aa:6f:44:ff:38:08:58:e2:8e:67:d2:fc:ea:78:af:
49:bd:b2:5b:e1:1d:31:49:f9:cd:e9:ff:62:52:07:fc:65:9c:
6d:23:16:c1:62:da:e2:88:b5:28:4f:c7:41:1f:55:ff:0d:f0:
61:40:0e:74:1a:fb:e2:8b:bf:21:66:48:3b:85:d4:f1:e4:ba:
8b:9b:19:db:90:f9:99:93:eb:65:97:1d:7f:af:d3:c5:6a:2c:
d5:4a:6c:c5:1e:e2:c1:75:7b:82:54:b5:30:55:62:fb:06:a7:
f6:a4:f8:ad:c5:c8:f6:c3:c4:1e:78:3e:1a:10:50:25:c0:2b:
d5:32:80:73:0f:51:29:1a:24:5e:bf:fb:0a:55:07:8b:a9:97:
9d:81:74:e3:06:7e:4b:a8:53:f6:d5:f9:ec:ba:63:8e:33:e1:
6b:72:4d:3c:47:1a:0e:50:5a:53:3a:0a:40:6a:f1:f9:2f:cf:
1d:6c:97:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:55:52 2024 by rpki-client on console-ams.rpki-client.org