Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/Cs6P27xxCiyJtUckU8wwd9TWvb8.roa
File: Cs6P27xxCiyJtUckU8wwd9TWvb8.roa (raw, json)
Hash identifier: /60SVYvSk8bJTmfYmZN4uJq4ksaFh00pRXB1ZKgpjUg=
Subject key identifier: 0A:CE:8F:DB:BC:71:0A:2C:89:B5:47:24:53:CC:30:77:D4:D6:BD:BF
Certificate issuer: /CN=bce75c43a41501d35417ae813be29f4227fb2dcf
Certificate serial: 018CC3496663B1B763F9BD53AB99BB3691DD
Authority key identifier: BC:E7:5C:43:A4:15:01:D3:54:17:AE:81:3B:E2:9F:42:27:FB:2D:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vOdcQ6QVAdNUF66BO-KfQif7Lc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/Cs6P27xxCiyJtUckU8wwd9TWvb8.roa
Signing time: Mon 01 Jan 2024 04:30:16 +0000
ROA not before: Mon 01 Jan 2024 04:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203785
IP address blocks: 2a13:4b80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vOdcQ6QVAdNUF66BO-KfQif7Lc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:66:63:b1:b7:63:f9:bd:53:ab:99:bb:36:91:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bce75c43a41501d35417ae813be29f4227fb2dcf
Validity
Not Before: Jan 1 04:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ace8fdbbc710a2c89b5472453cc3077d4d6bdbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f9:7e:7b:60:4c:59:61:e7:91:fe:9e:c8:83:
88:08:c1:d7:c5:10:cc:12:86:d8:32:cc:40:72:3c:
87:a9:7b:64:36:aa:30:77:3c:48:bf:e5:97:d3:d5:
09:f1:d3:df:46:36:e2:dc:71:37:7a:8b:7d:a3:46:
db:32:d9:54:fe:20:39:94:b7:eb:eb:1d:33:96:56:
b2:6b:0d:a8:a9:34:f9:c5:90:e7:93:3c:b6:23:89:
b7:2c:ed:1e:8f:7a:8a:7a:93:d6:ae:95:cd:fe:0d:
d3:82:b9:59:37:ef:e7:4b:3e:8c:91:3c:ef:e9:a9:
c4:6f:3c:3e:86:eb:93:c8:ae:60:a5:e3:83:37:06:
a0:09:5a:91:42:e6:b5:12:74:18:e6:72:d2:b9:50:
ef:f3:77:7b:e6:88:79:34:39:53:27:76:64:7c:1b:
61:8d:88:49:33:7b:e2:1d:e8:c7:75:33:e0:59:2b:
70:50:bd:6c:a5:3e:68:df:ba:d7:b5:4c:c4:62:87:
3c:01:0a:3d:3f:79:9e:8f:c8:b8:91:04:44:1e:7c:
6a:6c:65:e9:04:2e:c8:c3:c7:a6:4d:be:b0:07:6c:
06:c3:19:df:59:ce:71:fc:23:1f:c5:13:52:48:dc:
2c:e0:21:f5:2e:ae:9f:d3:81:de:b5:f5:16:21:67:
71:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CE:8F:DB:BC:71:0A:2C:89:B5:47:24:53:CC:30:77:D4:D6:BD:BF
X509v3 Authority Key Identifier:
keyid:BC:E7:5C:43:A4:15:01:D3:54:17:AE:81:3B:E2:9F:42:27:FB:2D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOdcQ6QVAdNUF66BO-KfQif7Lc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/Cs6P27xxCiyJtUckU8wwd9TWvb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:4b80::/29
Signature Algorithm: sha256WithRSAEncryption
7f:e8:98:9a:d7:63:32:85:0f:4c:90:bd:64:c8:15:81:fb:cd:
86:48:65:ef:9a:bb:7e:2e:09:49:82:59:42:99:71:c7:ac:2d:
84:98:8e:d4:c5:57:54:81:04:e1:85:2c:c5:63:35:2c:03:91:
29:ac:50:39:f3:57:c5:71:dd:10:0e:ea:45:65:b2:f9:45:7f:
3d:5d:c0:1e:cf:4c:80:52:ab:b9:88:c4:08:38:1f:00:db:05:
18:17:67:9d:65:53:38:e4:6f:87:96:cb:1a:6a:69:11:6c:ab:
b0:57:77:69:cc:08:4e:56:22:21:76:c3:98:50:03:ff:ee:fa:
84:2a:9d:3e:4a:05:9f:60:f1:83:7d:ad:bd:86:3f:be:dc:dc:
04:7c:b4:2c:19:6f:dc:35:c2:b9:6c:57:8c:90:ea:f9:e1:fa:
d4:bd:b7:f7:a8:03:c4:d1:85:8b:81:cd:80:32:b7:b4:60:df:
95:df:ae:08:75:a3:66:66:66:6b:45:df:20:bd:53:38:cf:34:
09:a2:73:9b:93:37:1a:66:60:ed:78:ef:d8:20:0f:9c:16:c1:
bf:77:56:f4:72:0a:f7:05:00:3f:64:6c:ab:6f:e5:d9:86:d1:
af:8b:8f:af:1e:29:78:9a:7b:22:bd:54:1a:30:31:12:0e:ca:
60:9a:2c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 21:40:52 2024 by rpki-client on console-ams.rpki-client.org