Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/uk60UIfQKHRWAmxHgHZj38D-A18.roa
File: uk60UIfQKHRWAmxHgHZj38D-A18.roa (raw, json)
Hash identifier: RCnDAOA6pGgRtR0bwNAk8l08UB7QHOshd1sM7yfTFOI=
Subject key identifier: BA:4E:B4:50:87:D0:28:74:56:02:6C:47:80:76:63:DF:C0:FE:03:5F
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 0192FB986570D0A997F5C4BD36FA7DF99790
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/uk60UIfQKHRWAmxHgHZj38D-A18.roa
Signing time: Tue 05 Nov 2024 09:12:01 +0000
ROA not before: Tue 05 Nov 2024 09:12:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214610
IP address blocks: 2a0f:7803:f680::/44 maxlen: 48
2a0f:7803:f690::/44 maxlen: 48
2a0f:7803:f6a0::/44 maxlen: 48
2a0f:7803:f7c0::/44 maxlen: 48
2a0f:7803:f7d0::/44 maxlen: 48
2a0f:7803:f7e0::/44 maxlen: 48
2a0f:7803:f7f0::/44 maxlen: 48
2a0f:7803:f800::/44 maxlen: 48
2a0f:7803:f810::/44 maxlen: 48
2a0f:7803:f840::/44 maxlen: 48
2a0f:7803:f860::/44 maxlen: 48
2a0f:7803:f8b0::/44 maxlen: 48
2a0f:7803:f970::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 08:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:fb:98:65:70:d0:a9:97:f5:c4:bd:36:fa:7d:f9:97:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Nov 5 09:12:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba4eb45087d0287456026c47807663dfc0fe035f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ce:74:b2:55:04:98:6d:a6:78:d9:8b:e9:b3:
58:88:15:c7:e9:f7:e7:69:b5:9a:92:a4:53:9e:6f:
13:28:ea:e2:ca:6a:5e:a5:ae:c8:92:10:3c:75:8a:
9f:40:78:a9:94:fb:52:3c:70:a0:ef:13:01:94:6f:
42:37:51:fb:ad:9d:0e:62:e7:a4:60:ba:ec:ed:1c:
68:72:fa:53:3e:02:77:81:70:6a:d3:ad:96:36:bd:
4c:c3:89:2c:b6:6a:84:f0:50:d8:26:6a:0d:a5:c2:
77:55:7e:58:47:3d:c9:21:4a:84:29:e5:12:af:96:
e8:19:1c:13:82:a9:0f:0a:0f:32:9d:30:13:66:fc:
91:ef:e0:08:df:cc:27:8c:ac:22:fe:c5:97:b0:0d:
e6:e1:ab:e9:f2:53:38:05:31:f4:74:db:fb:0c:19:
33:1d:32:3d:43:fa:5d:46:b4:7a:9c:ac:2c:f7:92:
d0:25:d6:5b:46:6a:77:cd:a9:b5:4f:96:b0:54:b9:
0b:46:86:72:4f:41:76:1a:01:3c:e0:a1:fc:b1:ef:
c8:26:b7:98:2a:8e:ec:c3:57:79:ab:04:18:e7:20:
86:ad:ca:03:9e:84:19:42:14:23:cb:e6:4d:3b:b1:
cd:af:aa:98:f2:9c:40:1c:22:73:c1:aa:d7:fd:65:
22:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4E:B4:50:87:D0:28:74:56:02:6C:47:80:76:63:DF:C0:FE:03:5F
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/uk60UIfQKHRWAmxHgHZj38D-A18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:f680::-2a0f:7803:f6af:ffff:ffff:ffff:ffff:ffff
2a0f:7803:f7c0::-2a0f:7803:f81f:ffff:ffff:ffff:ffff:ffff
2a0f:7803:f840::/44
2a0f:7803:f860::/44
2a0f:7803:f8b0::/44
2a0f:7803:f970::/44
Signature Algorithm: sha256WithRSAEncryption
8f:0d:1e:9d:88:22:b7:72:69:80:7c:25:1f:11:f7:43:28:4c:
d5:d8:c2:b1:de:58:fd:98:8e:37:34:71:6f:5d:de:bc:d2:89:
67:f6:cf:8d:db:d9:2b:f6:a7:ec:a1:04:85:d7:2f:a0:d4:b5:
dc:91:40:7b:bf:fb:9a:75:bb:61:f2:b1:b0:a4:65:ef:b8:dd:
a0:03:df:ec:98:61:60:0e:5d:8b:ba:a4:49:38:17:00:0f:12:
87:24:16:80:d1:0a:b8:7e:6f:e0:5b:2c:ac:41:96:14:a7:31:
4e:20:59:19:99:b4:be:04:1c:62:37:29:b8:3a:83:fe:1a:15:
fb:2e:69:64:3f:f9:70:c1:8b:78:ed:db:86:dc:24:ad:f8:61:
e7:58:5a:fc:e2:bd:93:9b:5c:88:31:9b:6a:f8:ed:41:9d:c0:
ec:f8:2f:80:97:4d:8d:ae:2d:c6:f6:66:7f:d3:22:a8:e8:55:
3d:eb:aa:7a:b6:b0:29:e3:08:ce:1a:c0:b2:08:f7:57:92:2c:
7d:c0:36:de:f7:b9:6b:49:8e:7d:6b:fd:6d:79:c6:cb:7f:25:
dd:4b:1d:bf:d1:a7:eb:4c:05:ee:47:cc:f2:ce:2f:d6:88:08:
7c:04:de:be:5b:91:1c:f4:cb:9a:22:a6:fb:47:34:5b:61:cf:
74:eb:cb:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 14:11:22 2024 by rpki-client on console-fra.rpki-client.org