Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/DPQ4lobYeO0VP08NT9GHfgxOhSY.roa
File: DPQ4lobYeO0VP08NT9GHfgxOhSY.roa (raw, json)
Hash identifier: 2RKoD6fwgQ1seMh+yQ3jt5FfnFXmWPkDu+JFGWwpf6c=
Subject key identifier: 0C:F4:38:96:86:D8:78:ED:15:3F:4F:0D:4F:D1:87:7E:0C:4E:85:26
Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial: 018CC2DB5E1F0F61EAB9117A661324004301
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/DPQ4lobYeO0VP08NT9GHfgxOhSY.roa
Signing time: Mon 01 Jan 2024 02:30:05 +0000
ROA not before: Mon 01 Jan 2024 02:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208386
IP address blocks: 2a0f:9700::/29 maxlen: 29
2a0e:c640::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:5e:1f:0f:61:ea:b9:11:7a:66:13:24:00:43:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Validity
Not Before: Jan 1 02:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0cf4389686d878ed153f4f0d4fd1877e0c4e8526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d6:b6:3b:06:cf:e0:69:3a:a3:41:67:5b:1c:
6a:a6:8f:b2:a2:5f:8c:a2:d5:c3:b2:a8:11:b4:01:
f3:b0:24:da:54:4f:28:11:18:c6:87:e3:ac:d3:4b:
be:ce:8f:aa:1d:00:49:75:78:ad:84:38:7d:6d:79:
8e:6c:86:ae:e1:be:95:ac:7c:e1:38:76:5e:f3:4e:
d9:11:2a:a7:a8:0b:ee:5a:75:ac:4a:c9:d9:9d:4c:
bc:7a:82:95:3c:69:b8:43:87:40:af:81:f9:af:11:
36:32:8c:0b:46:80:af:a2:11:81:c4:1c:aa:ba:0e:
60:1a:70:13:77:03:1a:e5:60:a9:8c:46:7f:1a:55:
fd:6b:4d:2b:eb:a5:12:2c:d2:74:70:aa:b9:75:3b:
38:31:9b:02:21:f1:08:bc:fc:cd:3c:ec:a4:40:91:
50:a5:2a:f5:2f:a7:b3:54:5a:fe:4d:df:87:a1:ad:
4c:b9:6a:07:8f:d8:20:f6:54:98:2e:14:3e:02:ed:
67:31:f6:b8:d9:45:c2:75:26:f2:d2:c0:db:3f:9f:
a7:cb:65:83:d1:49:e1:e8:8f:22:8d:6b:fe:0f:ca:
67:e3:b5:2a:3f:6a:ac:99:66:3a:64:7a:f0:58:0c:
0a:db:e6:38:1f:de:64:c5:6d:50:c5:a9:38:9b:7e:
34:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F4:38:96:86:D8:78:ED:15:3F:4F:0D:4F:D1:87:7E:0C:4E:85:26
X509v3 Authority Key Identifier:
keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/DPQ4lobYeO0VP08NT9GHfgxOhSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:c640::/29
2a0f:9700::/29
Signature Algorithm: sha256WithRSAEncryption
45:88:9c:af:00:7f:19:be:10:fe:ed:b0:30:9f:c1:f9:97:4e:
a4:5b:7c:5e:09:f4:74:96:59:d9:e1:a7:53:3e:cd:86:ae:13:
c4:50:c1:4c:32:79:f2:8f:0b:d5:b7:ce:ec:52:28:d2:1e:81:
91:78:9d:0e:e0:c8:1b:e2:56:0d:6c:29:88:1c:3a:14:33:35:
72:96:aa:7a:bd:f5:56:fb:0e:29:e9:b3:21:57:64:9e:1b:61:
21:2b:60:a9:30:cb:e9:f0:06:6c:28:7f:9c:bd:5c:dd:06:4c:
0d:5b:df:31:e1:72:9b:1d:7e:c7:a7:4c:e0:7e:ed:f5:70:80:
28:a6:7e:70:0a:67:39:bc:96:9a:34:b1:ed:63:7c:af:e3:31:
15:cf:24:63:ba:52:dc:6f:3b:57:7b:a0:41:64:e3:f0:05:d1:
53:c2:b0:ed:e5:d5:73:8b:b1:ba:48:6b:3f:ce:d2:15:bd:e5:
81:01:28:f3:c5:38:9f:56:7b:e3:ef:a0:d4:07:3a:9f:b2:09:
42:6a:29:e3:71:1a:68:2e:dd:c8:55:de:8c:83:6f:96:84:5e:
42:ea:8d:76:08:d5:88:33:98:50:21:d0:90:23:41:30:8f:e8:
f4:42:00:70:66:d7:74:3c:c5:0c:a8:43:1e:77:e9:5b:4e:e6:
26:1b:02:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 10:15:04 2024 by rpki-client on console-fra.rpki-client.org