Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/so3611zKNeWDC7xRB_gxQRKcfE0.roa
File: so3611zKNeWDC7xRB_gxQRKcfE0.roa (raw, json)
Hash identifier: 1I8I3fP+BXgxqvv4+VEimTztqZSIqwxgXnPKlgwP0KE=
Subject key identifier: B2:8D:FA:D7:5C:CA:35:E5:83:0B:BC:51:07:F8:31:41:12:9C:7C:4D
Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Certificate serial: 018CC5DCF2C8427B276080CA54581D46B1FB
Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/so3611zKNeWDC7xRB_gxQRKcfE0.roa
Signing time: Mon 01 Jan 2024 16:30:40 +0000
ROA not before: Mon 01 Jan 2024 16:30:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7480
IP address blocks: 2a0f:607:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:f2:c8:42:7b:27:60:80:ca:54:58:1d:46:b1:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Validity
Not Before: Jan 1 16:30:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b28dfad75cca35e5830bbc5107f83141129c7c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f3:c9:c5:4c:78:82:67:64:27:d3:de:40:58:
13:4f:33:91:4e:d6:2c:0b:a6:9f:6a:f3:f3:2f:e7:
52:8c:f9:07:dd:a3:8c:28:6d:9d:fa:12:8f:bd:3d:
9a:9a:b6:d2:e2:de:43:8e:3f:62:06:a6:9b:1c:2c:
eb:c1:5d:7c:8b:c3:b7:79:89:40:3e:99:61:ed:ad:
9c:8f:14:30:7f:b1:cb:22:b2:22:ae:77:93:67:84:
46:2f:33:f4:c3:31:f9:59:e7:e4:09:35:ee:b4:23:
8b:c6:93:23:17:9e:ec:07:ea:50:30:77:a3:86:0b:
2f:32:96:8d:0f:83:41:99:22:34:42:5d:2e:9f:65:
d1:e8:eb:a3:63:63:47:76:bf:95:ea:bb:c0:66:03:
c0:6d:b7:23:c4:c7:e2:d2:21:3a:02:af:7e:18:61:
9e:a0:38:0c:53:de:18:20:d0:36:b6:92:38:37:f8:
da:53:a9:2a:9c:a6:88:44:05:88:cb:6d:1e:ac:2b:
fe:04:06:9b:2f:18:41:73:6d:fd:de:3b:41:f3:21:
b8:a4:20:24:ab:f1:7b:87:23:b8:1c:71:9c:71:31:
97:51:a2:56:49:0c:e3:75:b5:2c:c7:e5:e9:60:cc:
a1:46:24:e0:0a:c6:8e:b9:cf:28:f3:16:b0:95:71:
a8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:8D:FA:D7:5C:CA:35:E5:83:0B:BC:51:07:F8:31:41:12:9C:7C:4D
X509v3 Authority Key Identifier:
keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/so3611zKNeWDC7xRB_gxQRKcfE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:607:1000::/40
Signature Algorithm: sha256WithRSAEncryption
0b:0f:c9:d8:96:42:39:86:40:ce:f8:b1:13:2c:7e:1e:64:04:
33:7c:48:ef:3a:5b:17:b9:9b:5b:f2:fe:73:59:84:ed:81:ca:
72:55:a4:25:cf:f2:29:f3:ac:70:22:5c:45:21:5b:9c:9f:69:
eb:e4:0a:a0:5c:86:9d:1c:2f:a5:02:32:ca:8f:15:e3:a9:51:
de:be:50:98:35:b5:ba:05:8d:fa:ab:55:26:d5:4d:90:de:96:
6f:6d:ad:4a:93:08:d3:05:d3:96:2e:2d:50:dd:33:5a:05:7c:
0d:a8:88:64:d3:53:d0:cb:72:40:c8:6d:ae:85:ea:dd:25:38:
0f:08:56:a7:ec:98:e5:e6:56:6b:6d:4d:db:bc:94:be:98:42:
56:0d:6b:88:8c:95:e3:58:62:82:66:b7:3b:e1:3c:ae:24:6e:
89:61:9a:0f:13:7b:97:18:73:d2:26:e2:ad:b5:25:44:ac:40:
30:64:5a:20:e2:42:22:f8:0a:60:c2:3b:5b:1a:ba:bd:f0:40:
01:79:7e:ed:58:b2:63:83:65:5f:97:c9:b7:08:ed:90:b2:46:
07:74:9e:ae:42:3c:53:ce:ea:9b:9a:2e:36:d1:cd:b0:e6:a1:
ee:dd:7b:61:41:61:fc:54:cd:4e:35:2a:35:3d:c9:c7:56:53:
28:2d:7b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 04:24:00 2024 by rpki-client on console-ams.rpki-client.org