Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/OeKoXcd26vyCg9h0RkAhdzBSnoo.roa
File: OeKoXcd26vyCg9h0RkAhdzBSnoo.roa (raw, json)
Hash identifier: 1lzGTe/X4eOGN99jeD4ND4SYrGHbTm9yHFyQfmgf0fE=
Subject key identifier: 39:E2:A8:5D:C7:76:EA:FC:82:83:D8:74:46:40:21:77:30:52:9E:8A
Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Certificate serial: 018CC5DCF5B63EDA44EDE14CC1709EFE66EC
Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/OeKoXcd26vyCg9h0RkAhdzBSnoo.roa
Signing time: Mon 01 Jan 2024 16:30:41 +0000
ROA not before: Mon 01 Jan 2024 16:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57429
IP address blocks: 2a0f:607:1024::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 01:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:f5:b6:3e:da:44:ed:e1:4c:c1:70:9e:fe:66:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Validity
Not Before: Jan 1 16:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39e2a85dc776eafc8283d8744640217730529e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:09:81:17:3d:9d:dc:35:be:f7:a5:86:ff:c4:
7b:d8:01:87:ed:05:6c:fb:05:51:53:76:24:05:4a:
0e:0e:81:ea:c4:45:09:0b:cd:70:64:88:bf:3e:98:
60:7e:8c:16:1b:52:2e:81:90:af:d2:19:c0:a3:ef:
c5:ab:ce:37:9a:8a:4f:70:79:48:d9:2d:52:ca:8f:
de:06:a6:73:c8:5c:b7:b0:f1:ac:0b:01:2d:6e:88:
2c:a2:e6:e9:ee:47:bc:a3:5b:26:ee:fc:f6:d8:9c:
bb:be:e3:28:4d:53:22:d1:de:fd:c7:47:d4:6e:92:
66:e6:5b:e5:f3:90:b2:fc:8d:83:b6:a8:12:a8:1c:
ea:a9:07:e8:b6:cd:c8:54:56:56:66:48:49:67:65:
bb:a6:cf:00:08:58:27:bf:aa:91:f8:e9:79:f5:d7:
a1:43:c9:7c:4d:9a:59:fe:97:90:62:42:0e:09:69:
eb:55:71:0a:0e:e8:9f:0c:a6:11:f9:d8:6e:5f:75:
27:5f:8f:4a:ea:72:25:ea:5b:d2:6b:fa:28:23:43:
48:53:3b:39:fe:80:77:15:85:9e:6d:07:b6:31:f8:
6e:2b:1a:99:8a:2c:6d:21:55:c9:3b:68:6f:5d:6d:
cf:84:79:4f:3c:c8:b6:c8:a8:91:bf:06:4f:3a:e4:
6f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E2:A8:5D:C7:76:EA:FC:82:83:D8:74:46:40:21:77:30:52:9E:8A
X509v3 Authority Key Identifier:
keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/OeKoXcd26vyCg9h0RkAhdzBSnoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:607:1024::/48
Signature Algorithm: sha256WithRSAEncryption
26:80:3d:66:4d:89:40:48:e3:40:df:cf:33:f9:6e:c6:f7:df:
07:15:e5:47:69:6e:44:92:c7:1e:41:a5:47:7a:ec:4f:89:5e:
aa:9f:44:43:e4:ba:66:7d:b1:dc:95:fe:11:6b:fb:bd:cf:2a:
4e:28:2f:3b:a7:79:2a:c1:73:62:b9:67:74:54:ae:3f:bb:53:
2b:8f:ee:80:58:46:fd:35:f9:36:e2:1e:73:3e:25:c6:0c:aa:
17:1a:3f:3a:62:45:7c:a7:af:f7:51:ce:b8:0f:05:64:4b:5f:
6a:e8:da:8b:92:d8:5f:5b:ce:2a:e7:a5:41:05:66:57:31:f2:
70:86:08:b2:84:a4:c0:ff:20:92:b4:96:75:45:9a:2f:17:77:
09:d5:b1:ce:08:c3:d4:3f:1a:3f:30:70:01:62:99:34:00:1f:
15:53:66:9e:db:7b:7a:ca:67:64:f0:e0:6c:fe:04:15:0b:1b:
e9:b3:03:0c:b2:2f:13:e7:c6:4a:ab:cc:65:2e:64:e8:85:8f:
e4:61:28:c8:4b:62:f9:5c:ba:31:47:ea:a0:6f:bd:96:fa:3f:
ed:3c:16:2e:d5:74:39:15:ab:ff:ce:10:0c:0b:6f:e5:73:94:
de:79:2b:20:23:ef:47:ce:77:c4:0b:5c:e0:22:59:fc:0e:f3:
cc:05:62:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 07:13:02 2024 by rpki-client on console-ams.rpki-client.org