Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7d5480-60a7-4193-bf34-bd849b04d10a/1/1-duFh68dDig8GEl9nYLjlPGAjdk.roa
File: 1-duFh68dDig8GEl9nYLjlPGAjdk.roa (raw, json)
Hash identifier: +EgSnl+KCmq/0myvawxq59lteBiwUkknDnyfA8iQ/qM=
Subject key identifier: F9:DB:85:87:AF:1D:0E:28:3C:18:49:7D:9D:82:E3:94:F1:80:8D:D9
Certificate issuer: /CN=59bff5f16ecb268b1597da1b3ad30af40fce7717
Certificate serial: 018CC6B7B9E3FC86E786DE438F64DE8000D3
Authority key identifier: 59:BF:F5:F1:6E:CB:26:8B:15:97:DA:1B:3A:D3:0A:F4:0F:CE:77:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wb_18W7LJosVl9obOtMK9A_Odxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7d5480-60a7-4193-bf34-bd849b04d10a/1/1-duFh68dDig8GEl9nYLjlPGAjdk.roa
Signing time: Mon 01 Jan 2024 20:29:38 +0000
ROA not before: Mon 01 Jan 2024 20:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36459
IP address blocks: 2a0a:a440::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7d5480-60a7-4193-bf34-bd849b04d10a/1/Wb_18W7LJosVl9obOtMK9A_Odxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7d5480-60a7-4193-bf34-bd849b04d10a/1/Wb_18W7LJosVl9obOtMK9A_Odxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wb_18W7LJosVl9obOtMK9A_Odxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:b9:e3:fc:86:e7:86:de:43:8f:64:de:80:00:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59bff5f16ecb268b1597da1b3ad30af40fce7717
Validity
Not Before: Jan 1 20:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f9db8587af1d0e283c18497d9d82e394f1808dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a8:fd:fe:ae:98:62:fa:6b:20:fc:2d:61:e7:
b7:a7:d7:3a:7c:a5:2f:76:f1:78:de:d9:57:92:87:
02:85:a9:40:55:42:6d:1c:87:b1:1d:6a:ef:74:15:
fd:2c:52:43:7b:56:3e:da:1e:7a:5c:b7:a4:7c:4f:
f3:ab:ed:c7:71:99:bc:02:2a:89:fa:55:5d:d2:22:
f3:5d:41:02:28:14:b0:97:7e:05:b0:7f:87:30:85:
20:2c:97:d6:60:84:00:77:9e:de:c2:ba:3e:f4:87:
17:66:0a:84:5a:00:d9:3a:24:d7:33:82:b0:a9:a4:
8d:6b:f0:97:31:f6:f5:f2:6a:f2:1e:2f:b1:41:7e:
dd:f4:51:ec:79:a5:ee:37:28:c2:01:cc:36:fc:a5:
5c:b8:43:79:fb:27:b0:a2:47:5b:9e:a6:6f:16:65:
38:34:60:1b:48:52:2d:4f:69:d7:20:75:f6:a4:13:
20:bb:99:44:03:30:c6:f2:bc:f5:72:82:b6:78:a1:
7d:1c:c2:69:dd:bf:df:c3:23:6e:5c:5c:d4:0e:59:
66:b2:3c:7f:ef:6b:2b:20:83:78:ef:a1:3d:0e:fd:
5d:f9:db:56:58:6f:33:06:f8:55:16:74:74:95:49:
71:04:c4:5f:56:ba:1e:8d:fe:97:1b:ce:49:ff:da:
30:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DB:85:87:AF:1D:0E:28:3C:18:49:7D:9D:82:E3:94:F1:80:8D:D9
X509v3 Authority Key Identifier:
keyid:59:BF:F5:F1:6E:CB:26:8B:15:97:DA:1B:3A:D3:0A:F4:0F:CE:77:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wb_18W7LJosVl9obOtMK9A_Odxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d5480-60a7-4193-bf34-bd849b04d10a/1/1-duFh68dDig8GEl9nYLjlPGAjdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d5480-60a7-4193-bf34-bd849b04d10a/1/Wb_18W7LJosVl9obOtMK9A_Odxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:a440::/29
Signature Algorithm: sha256WithRSAEncryption
32:1c:84:61:b6:0f:7b:37:12:73:49:eb:cb:89:24:d3:cf:14:
c9:d9:45:65:cc:33:d8:78:98:d7:44:07:05:5d:3a:82:88:e5:
2f:1c:74:03:8c:5e:82:30:db:54:71:7a:af:62:58:1c:33:50:
b1:72:90:59:a4:5c:a5:3a:72:9f:6b:4b:bc:d8:8c:bf:89:66:
fa:2f:35:36:a1:47:26:66:77:c7:8d:32:45:38:cd:7b:b3:6c:
2d:96:a5:68:c0:31:06:a2:51:6e:72:53:55:11:a9:ab:f2:28:
92:6a:5c:09:48:34:4d:3a:ba:14:0f:ba:2d:a4:08:a6:4b:85:
e9:78:12:f9:ed:3f:24:7f:6e:2d:01:23:59:a2:49:ca:94:77:
78:ec:c9:b8:87:f8:5a:6e:65:93:24:6e:f1:f7:a8:14:5f:9b:
89:42:65:56:66:9d:06:9c:98:f7:a5:5a:a5:db:86:97:d3:31:
3e:4f:a3:de:0f:9d:69:c5:05:2e:94:dd:16:4a:3b:37:54:b5:
f4:6b:55:ba:b6:88:c0:3e:93:d7:11:5a:21:63:a1:7c:9b:70:
a1:f1:d0:64:c6:2f:2f:ae:93:f9:39:4b:53:17:98:a7:51:db:
ee:11:fc:1e:5a:c0:4c:f9:5f:18:de:6c:4f:43:0a:ac:9d:1e:
a0:37:64:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 08:32:56 2024 by rpki-client on console-fra.rpki-client.org