Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/UuTk81cwbdVYjYy_4YXcoj4dp18.roa
File: UuTk81cwbdVYjYy_4YXcoj4dp18.roa (raw, json)
Hash identifier: 4V5a0IyhmOBIDqGJZp0/M2SV33ZDlfbi9n3TR7tX5zM=
Subject key identifier: 52:E4:E4:F3:57:30:6D:D5:58:8D:8C:BF:E1:85:DC:A2:3E:1D:A7:5F
Certificate issuer: /CN=9b86bd882e476e4698318f370712f71c2bf50dfc
Certificate serial: 018CC6B7C1E9B3A1B7D4A799C4606EBA1506
Authority key identifier: 9B:86:BD:88:2E:47:6E:46:98:31:8F:37:07:12:F7:1C:2B:F5:0D:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/UuTk81cwbdVYjYy_4YXcoj4dp18.roa
Signing time: Mon 01 Jan 2024 20:29:40 +0000
ROA not before: Mon 01 Jan 2024 20:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207021
IP address blocks: 2001:67c:10e0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:c1:e9:b3:a1:b7:d4:a7:99:c4:60:6e:ba:15:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b86bd882e476e4698318f370712f71c2bf50dfc
Validity
Not Before: Jan 1 20:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52e4e4f357306dd5588d8cbfe185dca23e1da75f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c5:0c:0b:a2:f3:ef:ea:93:9e:c2:cf:1f:8a:
ed:75:45:3b:e0:39:c2:2f:21:06:b9:56:5c:0d:fd:
01:36:49:83:12:78:71:cc:6f:6b:cd:85:13:12:6f:
1c:72:dc:52:94:8a:4c:41:fb:ae:51:f8:b4:d2:77:
7a:d1:fc:ab:54:9b:17:11:1d:49:fc:60:54:43:69:
a7:83:87:34:37:30:e9:75:d8:ce:ae:a0:7a:c0:0d:
5b:6d:7c:a5:4d:00:d7:50:50:67:52:73:e2:42:d0:
9f:f9:7e:c0:77:33:a0:d2:ab:c5:70:88:36:84:d2:
7a:72:9e:94:42:c8:87:81:49:fc:19:64:e9:0d:32:
e2:8f:d4:88:e5:01:87:6b:86:ed:a1:5a:3f:f8:5c:
b4:12:9b:ab:23:32:03:9e:fd:7f:81:08:91:ca:f0:
dc:53:cb:30:ce:90:34:67:e9:b6:94:31:41:e2:1d:
22:78:41:ee:1e:14:f1:75:05:bf:c0:f2:f0:57:56:
eb:e0:f4:c1:48:cd:02:db:c6:d2:ce:88:26:4a:5b:
4d:e4:60:00:9a:cf:42:e7:70:e4:5d:7e:59:93:fd:
3f:a1:9d:82:2d:76:0b:9e:c2:1e:d4:2a:c2:f0:45:
b8:dd:b2:84:0e:cf:1c:eb:de:a1:51:a9:5d:00:94:
49:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E4:E4:F3:57:30:6D:D5:58:8D:8C:BF:E1:85:DC:A2:3E:1D:A7:5F
X509v3 Authority Key Identifier:
keyid:9B:86:BD:88:2E:47:6E:46:98:31:8F:37:07:12:F7:1C:2B:F5:0D:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/UuTk81cwbdVYjYy_4YXcoj4dp18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:10e0::/48
Signature Algorithm: sha256WithRSAEncryption
5b:1f:34:fc:00:af:a2:83:b7:de:47:6b:93:6e:ee:a6:e7:7f:
58:de:d7:a1:59:11:cc:4e:7e:2e:f2:64:bf:5d:0c:84:c5:33:
88:4a:7c:a0:e9:ed:6f:b2:7a:81:ed:79:a0:0f:e1:34:52:62:
32:96:c6:02:32:a6:a4:ef:6a:49:d9:be:bf:4d:a2:df:c1:6e:
2f:1e:51:fb:d7:a9:92:f2:fa:e1:e3:42:b2:a7:e2:19:86:d3:
d8:07:0a:2e:02:9d:67:f1:be:c9:26:ad:be:bc:15:36:4e:75:
14:68:1a:9d:51:6c:eb:a3:b4:37:25:c7:82:9a:03:b4:a2:ab:
75:a8:d5:5f:8c:b4:57:3d:1c:1d:d6:eb:96:97:bf:7f:c7:21:
32:4c:a6:a9:c2:25:47:42:e2:10:d1:e1:5e:99:21:b3:dc:31:
de:6d:38:6b:71:81:72:ae:39:97:4b:ec:60:ca:35:6a:a7:a4:
ba:95:36:70:3d:5c:35:47:a0:88:37:71:52:75:c2:79:c3:9c:
0b:2e:ae:b5:cb:b9:b7:32:b1:3e:3b:3c:3f:b3:fe:80:99:c9:
cc:fa:29:6a:31:11:d6:48:09:80:45:79:a1:1e:51:53:e1:cc:
e9:ef:9d:87:e8:c0:55:17:66:6e:cd:0d:6b:b8:b8:0c:07:32:
68:49:c3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:07:33 2024 by rpki-client on console-ams.rpki-client.org