Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/0prO6k1FOkBfkBm5RFwAImgnFHM.roa
File: 0prO6k1FOkBfkBm5RFwAImgnFHM.roa (raw, json)
Hash identifier: ZsWIhgk9dnGggVTLXmWY1asPPUmd4CoLiU55eEkiiqc=
Subject key identifier: D2:9A:CE:EA:4D:45:3A:40:5F:90:19:B9:44:5C:00:22:68:27:14:73
Certificate issuer: /CN=162af3302f6a49f7eb691ac4959e1acf95db6ce7
Certificate serial: 018CC80152A1FD5DB064D57CED53296A7CFC
Authority key identifier: 16:2A:F3:30:2F:6A:49:F7:EB:69:1A:C4:95:9E:1A:CF:95:DB:6C:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/0prO6k1FOkBfkBm5RFwAImgnFHM.roa
Signing time: Tue 02 Jan 2024 02:29:39 +0000
ROA not before: Tue 02 Jan 2024 02:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48025
IP address blocks: 2001:678:c98::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 10:03:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:52:a1:fd:5d:b0:64:d5:7c:ed:53:29:6a:7c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=162af3302f6a49f7eb691ac4959e1acf95db6ce7
Validity
Not Before: Jan 2 02:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d29aceea4d453a405f9019b9445c002268271473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f8:88:3e:05:d4:fd:5b:0d:0f:b2:43:d7:ec:
15:09:c9:04:46:37:e0:ee:f8:0f:20:0f:10:cd:23:
4e:0c:c8:ff:48:8c:79:18:65:07:bb:e2:b4:0a:e1:
42:38:f1:a9:8e:0a:fc:f8:3b:78:da:ff:f6:1d:a5:
7d:69:11:07:05:a0:b2:e6:78:5e:00:7c:05:0d:5f:
79:72:de:3f:33:af:66:d0:73:1e:1c:7a:41:3b:c3:
78:f7:8d:30:3f:b1:29:2b:d8:c1:03:38:12:af:93:
ff:61:4c:a2:a8:d0:88:07:08:3a:0b:75:f3:c3:5e:
ff:e4:a7:2e:c6:e1:41:70:4f:8f:d4:30:ae:b5:10:
3d:1a:18:1b:98:be:3d:92:5f:2b:32:33:d5:6f:2a:
d9:05:ed:8b:1e:50:2b:1d:59:d2:9d:d1:70:84:4d:
8b:4c:fa:ca:ed:c6:cf:01:6c:76:5f:c0:26:c7:2a:
8e:57:5b:e5:cb:e5:16:90:1f:56:6d:52:cb:f9:53:
4f:a5:da:b2:94:92:d4:b5:cb:0a:f9:86:5c:7c:3d:
58:a8:6b:07:10:4b:74:ef:cc:f4:f1:2b:4c:01:ec:
13:4c:46:eb:41:9b:7e:bd:af:31:a7:26:02:80:36:
9d:55:40:6d:c2:3b:54:5a:40:26:7f:e4:66:1e:23:
42:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9A:CE:EA:4D:45:3A:40:5F:90:19:B9:44:5C:00:22:68:27:14:73
X509v3 Authority Key Identifier:
keyid:16:2A:F3:30:2F:6A:49:F7:EB:69:1A:C4:95:9E:1A:CF:95:DB:6C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/0prO6k1FOkBfkBm5RFwAImgnFHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:c98::/48
Signature Algorithm: sha256WithRSAEncryption
6e:ac:e2:1b:a1:62:50:15:2f:db:51:f4:14:b6:cc:cd:6c:53:
62:28:64:f1:89:97:78:f8:5e:1d:b9:cb:24:bd:ea:70:67:78:
15:32:df:cf:f2:e4:0c:69:e7:27:8d:f5:5a:6d:8b:0b:64:03:
84:83:f7:f8:0b:46:b7:c4:27:e8:2d:a3:e6:bb:98:3e:ef:31:
bd:ba:d0:20:6f:a5:3c:16:d9:ff:71:95:57:21:f8:20:2f:6d:
91:66:66:eb:65:9a:e4:f5:c2:6b:33:4e:39:13:da:27:a7:a4:
59:ff:53:c2:49:82:92:a3:68:19:3a:49:ce:cb:9a:cb:f3:ec:
d9:b8:55:22:08:f8:ac:3d:7e:0b:ef:6f:06:d4:76:a8:1f:58:
86:0c:fd:1f:8e:11:bf:42:7f:b9:e7:e2:e9:a3:98:c0:a8:fb:
d3:12:be:e0:25:a3:d0:d1:6d:fa:7d:56:bd:d3:7e:7b:96:12:
d8:ff:ec:60:ee:e5:5a:3f:97:fe:79:da:97:a9:a2:01:db:4d:
45:97:d1:78:32:38:52:3c:2a:cf:ef:9a:51:fc:e4:36:94:f3:
40:26:09:40:68:6a:18:35:38:d8:39:ef:74:dc:59:41:fa:20:
82:e3:49:2d:77:f8:23:0f:3b:96:8f:f4:84:27:82:ad:b1:e8:
18:0c:b3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 18:23:03 2024 by rpki-client on console-ams.rpki-client.org