Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/XgFgH_9RQY6v5e1k8toTXe3dGdA.roa
File: XgFgH_9RQY6v5e1k8toTXe3dGdA.roa (raw, json)
Hash identifier: mjUBb0W676jXnwpAo0EqjPP4mAvi+5/TfeXi0bh4ZJI=
Subject key identifier: 5E:01:60:1F:FF:51:41:8E:AF:E5:ED:64:F2:DA:13:5D:ED:DD:19:D0
Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Certificate serial: 018CC5DCF76A2A41BA5356EAF71786BC485F
Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/XgFgH_9RQY6v5e1k8toTXe3dGdA.roa
Signing time: Mon 01 Jan 2024 16:30:41 +0000
ROA not before: Mon 01 Jan 2024 16:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207469
IP address blocks: 2a0f:607:1053::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:f7:6a:2a:41:ba:53:56:ea:f7:17:86:bc:48:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Validity
Not Before: Jan 1 16:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e01601fff51418eafe5ed64f2da135deddd19d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:85:b5:c9:7c:78:49:ea:0f:70:e8:00:e2:2d:
40:f7:64:2c:52:6a:0b:f2:a9:51:31:c0:9b:37:35:
ba:3a:d7:77:bd:96:79:fb:8f:a8:c7:f0:c5:4b:0e:
ed:94:50:a7:a4:28:bc:a1:cb:94:54:ff:4e:6d:37:
68:6b:2e:60:d7:a4:b3:9a:69:22:e5:ea:0c:a9:a4:
e7:ef:fe:93:1e:21:71:92:41:9d:4f:4e:d4:75:6e:
8c:07:8c:27:2e:51:70:fb:df:69:b1:66:59:22:ac:
f6:78:0a:16:56:cc:b9:cd:c4:d4:ef:25:59:8d:ff:
7b:6c:e4:2d:e8:fd:f9:6d:1d:06:d4:c1:2e:99:23:
e7:79:56:66:37:e1:af:e1:af:e2:21:39:7f:e4:e7:
d0:e8:eb:0d:f4:dd:eb:9c:e3:7b:7f:9e:4d:76:11:
83:c0:1f:a8:4c:65:ed:8d:a1:11:c3:6f:06:f4:44:
48:0c:d6:4d:81:b3:8b:f4:a1:f8:07:1a:54:ae:fd:
dd:46:0b:c1:2b:08:8d:9e:d3:44:43:ec:38:19:24:
fc:4c:bb:2a:c6:fd:81:bb:62:17:19:0e:80:bb:cc:
14:ec:d1:a7:ea:e0:f4:75:bd:2c:16:75:02:57:41:
f8:73:7f:3f:4a:ce:47:1b:96:53:6b:6b:cc:b6:f2:
bd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:01:60:1F:FF:51:41:8E:AF:E5:ED:64:F2:DA:13:5D:ED:DD:19:D0
X509v3 Authority Key Identifier:
keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/XgFgH_9RQY6v5e1k8toTXe3dGdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:607:1053::/48
Signature Algorithm: sha256WithRSAEncryption
2e:4a:78:7f:49:a4:e9:bb:d6:21:0c:cb:76:6b:55:a6:95:63:
87:6d:0b:48:57:2e:b2:f6:e5:99:32:bc:5a:d3:6c:be:b1:86:
95:6e:85:31:ee:7f:04:d8:64:28:4b:b8:7b:57:9e:c8:6c:b4:
28:4d:5e:a2:e0:dd:8c:a4:4e:d0:26:82:ca:f5:19:d5:b2:bc:
26:90:5a:57:46:16:2c:36:75:d0:2b:ed:5c:38:70:fc:d4:4b:
6d:a6:38:03:77:25:8d:18:ff:c7:47:04:8f:ba:f1:1b:23:db:
62:e8:2d:d4:df:f1:c8:34:64:cb:25:6b:27:6d:82:cb:c3:66:
8d:f3:7b:fc:18:cd:47:38:c3:76:d0:0b:76:8e:21:51:0c:2e:
86:13:67:54:5e:2b:78:1e:bb:32:88:eb:9a:2d:6e:51:36:4d:
ff:df:d9:4a:d9:3c:87:e5:02:2a:47:5a:83:27:01:ec:3e:8c:
c9:41:63:db:a8:d0:98:c6:27:a8:ae:c0:47:38:1d:61:2e:5a:
9f:57:f5:62:2e:5d:43:ed:a7:f4:4c:6d:87:fc:a5:7a:d7:97:
be:c6:a5:64:00:2f:c1:0d:41:87:28:e1:9a:cf:c0:68:61:38:
b4:32:1e:ed:83:e3:8a:1f:f7:31:90:56:2e:de:36:09:de:d6:
d4:c3:2b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 10:58:28 2024 by rpki-client on console-fra.rpki-client.org