Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/jSqJZceXGV_eqRDDbngqfHengEs.roa
File: jSqJZceXGV_eqRDDbngqfHengEs.roa (raw, json)
Hash identifier: X1MsDU3SsuJ0VSvq5fRoGO9es0n8R5J6feZwPO89y2M=
Subject key identifier: 8D:2A:89:65:C7:97:19:5F:DE:A9:10:C3:6E:78:2A:7C:77:A7:80:4B
Certificate issuer: /CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149
Certificate serial: 018CC6B91EAA98D6854B8126F0F34793E1D3
Authority key identifier: DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/jSqJZceXGV_eqRDDbngqfHengEs.roa
Signing time: Mon 01 Jan 2024 20:31:09 +0000
ROA not before: Mon 01 Jan 2024 20:31:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51219
IP address blocks: 2a0a:2b00::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Jun 2024 01:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:1e:aa:98:d6:85:4b:81:26:f0:f3:47:93:e1:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149
Validity
Not Before: Jan 1 20:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d2a8965c797195fdea910c36e782a7c77a7804b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:07:be:1b:38:d5:46:d3:b7:ff:4b:07:1a:22:
0c:d3:2d:e7:6f:38:6e:1e:00:8b:77:73:d7:d5:60:
28:f0:1d:b0:b1:db:66:df:a1:97:0e:29:4d:84:d3:
e4:2b:07:26:c5:04:2f:ab:fb:5d:c0:4a:53:11:ce:
72:1b:84:6e:69:dc:a7:a8:73:43:1e:3e:e1:71:4d:
77:2e:ff:0f:a3:e6:55:aa:3f:05:c5:bf:05:32:0b:
cf:9a:f1:fa:98:44:d6:e4:c5:16:f0:99:5d:44:37:
23:6e:04:b7:27:dd:0a:b2:cf:81:cf:a2:63:af:c3:
b4:3e:6a:a2:37:14:2e:e2:8c:7c:85:f6:e9:83:f6:
1f:d0:ae:69:c0:2a:a4:b1:af:8b:a2:4b:48:7e:b0:
0c:9a:8e:bb:e4:33:ba:09:37:77:55:28:4f:b0:9b:
84:a4:aa:99:ed:c0:68:eb:4b:1a:f4:12:64:0c:64:
e4:e3:40:2e:0f:6c:27:60:30:ea:ca:f4:b2:a9:0f:
f9:08:2e:61:6d:23:f1:0f:94:6f:cb:aa:02:b8:ef:
46:35:5c:16:5a:c4:d0:d5:f6:52:7c:9f:e4:b1:df:
56:94:d9:3e:a6:fc:5f:8c:84:d5:13:e2:49:d0:4f:
96:d5:00:2e:c2:6f:1e:e8:97:f8:7e:04:e3:c6:2e:
a4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2A:89:65:C7:97:19:5F:DE:A9:10:C3:6E:78:2A:7C:77:A7:80:4B
X509v3 Authority Key Identifier:
keyid:DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/jSqJZceXGV_eqRDDbngqfHengEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2b00::/32
Signature Algorithm: sha256WithRSAEncryption
81:76:86:73:1d:10:2e:76:10:81:62:29:44:36:d0:c3:9d:cd:
ab:6e:c4:97:6c:b4:c6:ab:8e:7c:9a:00:4a:2b:28:6c:86:44:
b5:8c:99:8a:13:9f:6a:af:bf:e3:8d:54:46:9e:9d:5c:b2:58:
ac:ff:73:ee:5b:fa:02:77:65:c4:ae:43:05:b7:09:64:cb:c4:
90:2c:02:d5:75:19:2c:8a:36:19:c0:05:49:2d:b3:f9:8b:8d:
69:2d:48:61:18:98:3c:f2:06:55:ef:7d:c5:dc:eb:35:50:ca:
cc:d4:c3:43:ab:fc:40:d8:df:9d:a2:7a:70:1d:97:34:d4:d4:
33:fe:d1:95:00:60:5b:cc:96:42:a7:71:99:10:aa:c8:31:87:
d4:35:cd:77:ab:7c:e2:1e:62:98:88:74:fd:2b:1b:b6:43:17:
6e:de:65:4f:a6:3f:5a:6f:e6:cd:06:49:ae:21:35:b2:88:d7:
f6:22:7b:2b:f0:ce:f2:2d:38:31:c8:63:5d:36:9b:a9:99:a4:
ae:13:5b:de:d3:0f:14:4a:61:8f:ce:60:4c:57:73:df:36:96:
da:ce:cf:a0:10:fa:41:fc:7d:46:5c:66:56:7b:f7:d3:53:f5:
6c:87:91:1d:fd:f1:dc:2e:58:0b:8b:9b:10:bd:cf:f1:83:6c:
6b:a3:eb:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 07:15:27 2024 by rpki-client on console-fra.rpki-client.org