Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/C6SZ6sx6DqKZyXUk0FyTcVkU28g.roa
File: C6SZ6sx6DqKZyXUk0FyTcVkU28g.roa (raw, json)
Hash identifier: 29omU0S1FzDixXTVjlH5LMOkvtB6uWxUWAQvxa0RxFY=
Subject key identifier: 0B:A4:99:EA:CC:7A:0E:A2:99:C9:75:24:D0:5C:93:71:59:14:DB:C8
Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Certificate serial: 018CC5DCFACDA89A81645ECE753068AD08BB
Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/C6SZ6sx6DqKZyXUk0FyTcVkU28g.roa
Signing time: Mon 01 Jan 2024 16:30:42 +0000
ROA not before: Mon 01 Jan 2024 16:30:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212331
IP address blocks: 2a0f:607:1057::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 01:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:fa:cd:a8:9a:81:64:5e:ce:75:30:68:ad:08:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Validity
Not Before: Jan 1 16:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ba499eacc7a0ea299c97524d05c93715914dbc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a0:65:e2:e5:15:7a:d2:51:ca:af:f4:eb:43:
b1:03:f2:9a:28:2f:47:50:8e:30:c0:fc:ea:76:26:
9f:9a:2f:e9:d3:e5:71:54:e1:f6:32:5d:03:91:65:
54:4f:96:20:b2:71:39:1f:88:a7:33:21:41:6a:24:
38:fa:bb:f3:70:02:bc:a7:95:21:ee:19:de:67:19:
d4:92:8e:3b:ce:76:3b:35:7b:dd:41:dd:33:96:dd:
af:a4:f9:02:c2:36:2d:bb:00:c0:a3:f6:3d:7f:25:
f3:0e:16:b3:71:17:82:0a:14:37:58:9b:d0:f9:07:
f5:16:5b:dc:1b:ca:66:e1:bd:06:8c:0b:ab:ae:66:
a8:03:3a:94:68:7f:d5:a0:20:5e:43:36:97:b6:21:
04:81:97:ed:0d:8d:10:0c:94:38:c5:c8:b5:af:61:
96:97:fd:28:03:e2:b9:9b:e9:01:0a:a6:93:31:61:
29:08:7e:7c:20:2c:99:19:99:0f:71:2c:ca:fb:82:
da:ea:ed:a3:12:b4:74:68:22:7a:3c:af:1d:4d:65:
6d:67:10:60:ed:cf:64:f0:70:44:2e:29:b1:2e:5f:
b5:98:14:cc:01:5c:42:f5:17:2b:82:e0:57:fc:0f:
4b:43:ab:4a:04:9e:9f:31:90:83:31:b8:59:1b:0d:
2d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A4:99:EA:CC:7A:0E:A2:99:C9:75:24:D0:5C:93:71:59:14:DB:C8
X509v3 Authority Key Identifier:
keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/C6SZ6sx6DqKZyXUk0FyTcVkU28g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:607:1057::/48
Signature Algorithm: sha256WithRSAEncryption
20:5c:47:d1:3b:b8:2c:c7:6a:c6:87:ad:cd:5a:d9:de:48:a5:
b5:de:b5:9a:08:4c:c8:fe:a2:69:37:75:62:20:1f:08:18:50:
61:b1:7d:76:f1:7c:1f:d4:45:a4:6e:0f:38:c6:57:1e:e0:ab:
43:2e:3f:87:06:08:02:e4:ef:5d:44:44:39:11:34:f0:f9:f0:
4a:bd:2c:f9:46:b7:13:b3:ea:57:32:3a:9c:07:4e:1e:0e:f2:
05:cc:42:f9:7e:3d:54:b8:ca:c1:14:c3:9b:56:79:97:f1:84:
9d:f7:b7:1a:a6:01:59:21:dc:85:66:04:65:2a:33:df:92:98:
71:9e:bd:5e:71:af:07:b3:77:70:9b:b6:78:1f:25:17:ac:c4:
7d:5a:dd:d0:03:e9:ee:8b:2a:c0:92:09:de:b1:4e:9f:73:b2:
0b:8f:56:27:e6:c3:ba:4f:28:0b:6a:2e:6e:a0:48:f8:92:7a:
8e:e2:ad:95:c9:52:9f:00:6a:78:9c:3a:74:6a:55:78:46:91:
70:81:bb:a2:df:21:b3:b5:e0:0b:5c:a4:09:75:54:07:8b:62:
cb:bb:ee:31:68:14:ba:74:3e:32:9b:4a:3f:71:e4:c2:ef:91:
c8:f0:4e:ae:13:e6:cf:68:57:7c:b0:1a:5d:0c:5c:ed:07:ef:
b9:aa:f4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:45:40 2024 by rpki-client on console-fra.rpki-client.org