Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5b5b3e-b043-4933-a096-503c766b78b3/1/n1q6uicQ3W4zgAvMOOJWdzNLQ0c.roa
File: n1q6uicQ3W4zgAvMOOJWdzNLQ0c.roa (raw, json)
Hash identifier: dNczGVG7XwdZpxOvRqtaldb8Jauq2iAvI/lFAVl/Kc4=
Subject key identifier: 9F:5A:BA:BA:27:10:DD:6E:33:80:0B:CC:38:E2:56:77:33:4B:43:47
Certificate issuer: /CN=6615e50f43013c356da097e34d465f2abc494e9d
Certificate serial: 018CC2DB15B49B73BE493272655DEF38E76D
Authority key identifier: 66:15:E5:0F:43:01:3C:35:6D:A0:97:E3:4D:46:5F:2A:BC:49:4E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhXlD0MBPDVtoJfjTUZfKrxJTp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5b5b3e-b043-4933-a096-503c766b78b3/1/n1q6uicQ3W4zgAvMOOJWdzNLQ0c.roa
Signing time: Mon 01 Jan 2024 02:29:46 +0000
ROA not before: Mon 01 Jan 2024 02:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43451
IP address blocks: 2001:67c:2b5c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5b5b3e-b043-4933-a096-503c766b78b3/1/ZhXlD0MBPDVtoJfjTUZfKrxJTp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/5b5b3e-b043-4933-a096-503c766b78b3/1/ZhXlD0MBPDVtoJfjTUZfKrxJTp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhXlD0MBPDVtoJfjTUZfKrxJTp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:15:b4:9b:73:be:49:32:72:65:5d:ef:38:e7:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6615e50f43013c356da097e34d465f2abc494e9d
Validity
Not Before: Jan 1 02:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f5ababa2710dd6e33800bcc38e25677334b4347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f7:03:98:19:81:25:e5:3b:bd:ae:cf:30:a7:
7b:cb:04:a6:b7:be:c3:17:1d:23:55:15:56:36:26:
4b:e1:f4:b2:b3:d2:45:20:1f:d7:8a:81:df:53:fd:
98:a9:84:d8:9b:2f:29:d6:4d:67:50:39:c9:35:74:
7d:36:38:30:bd:b1:55:e5:f8:28:c6:71:e2:24:21:
3a:86:f5:8e:b6:aa:08:7c:11:fc:6c:3c:0c:54:6d:
c5:fc:8d:9d:6c:90:e0:04:27:0a:56:f9:55:c9:dd:
8e:df:22:31:1f:90:91:32:d7:1a:7c:c2:49:1b:5a:
e9:32:1f:13:b1:78:e5:4b:9c:b7:25:a9:e7:43:94:
0c:1d:44:70:67:50:99:f2:76:de:fb:33:6b:35:c2:
f2:bd:2a:bd:94:ae:a9:06:d7:f5:85:5d:2f:38:1c:
98:d2:2a:43:ca:13:75:f8:d0:1b:91:08:73:ff:f2:
f7:cb:6e:2c:d3:71:28:33:bc:74:ba:e8:ec:7a:36:
a5:b6:60:9e:ae:b6:bd:6b:e9:bc:c3:9b:89:76:8a:
98:c1:72:a1:3b:04:05:30:58:1e:e5:bd:bd:30:d3:
0c:62:90:ef:41:69:4d:ef:2f:5c:b4:6c:ca:a0:d7:
8e:6e:d3:21:11:a0:74:04:d6:3b:f2:8f:73:dd:04:
a3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5A:BA:BA:27:10:DD:6E:33:80:0B:CC:38:E2:56:77:33:4B:43:47
X509v3 Authority Key Identifier:
keyid:66:15:E5:0F:43:01:3C:35:6D:A0:97:E3:4D:46:5F:2A:BC:49:4E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhXlD0MBPDVtoJfjTUZfKrxJTp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5b5b3e-b043-4933-a096-503c766b78b3/1/n1q6uicQ3W4zgAvMOOJWdzNLQ0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5b5b3e-b043-4933-a096-503c766b78b3/1/ZhXlD0MBPDVtoJfjTUZfKrxJTp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2b5c::/48
Signature Algorithm: sha256WithRSAEncryption
5a:8a:bd:0a:e2:39:f8:e3:01:4a:e6:9b:1a:2a:cf:48:bd:4f:
6d:4d:16:00:90:db:b0:b4:d2:7d:14:a7:33:4c:82:39:b9:b9:
3f:9b:43:63:b5:bb:b9:36:65:e2:b2:5b:3d:66:0f:d6:f8:7f:
b6:f0:fa:23:cc:1b:bb:9a:31:44:54:78:c0:c4:de:0a:c2:d6:
1a:ca:6d:be:e1:68:a2:3e:a8:95:0b:44:1c:5f:82:7e:94:9c:
63:15:80:ad:2e:53:83:0f:c8:99:de:4e:2e:d7:23:6b:a1:e2:
d0:32:2e:f2:fb:73:b2:82:bd:b2:7e:c9:aa:68:0e:0a:14:fd:
62:42:79:6d:15:b1:2f:4c:fc:8a:c5:c9:b1:82:18:d5:c3:46:
e5:5d:4e:2d:af:71:6a:20:84:b2:e4:38:ad:db:18:93:b1:45:
6a:3f:0c:64:7b:40:64:6c:ab:6b:51:57:6a:ae:6d:b2:99:97:
68:e3:66:88:6c:e2:22:02:43:25:23:18:22:b8:e6:0c:ff:91:
74:2d:1b:74:33:6b:9b:33:7e:f2:dc:ba:e1:f6:3f:50:b5:05:
d4:b8:3b:36:69:b9:be:a4:69:65:39:87:47:d9:0b:1a:5b:4a:
80:1b:e6:45:fc:f1:30:4d:cb:1b:ac:87:9e:da:e4:c0:4e:57:
04:e9:68:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 00:17:56 2024 by rpki-client on console-fra.rpki-client.org