Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/7HY99KteH4PfsTqRBO5b4Tfv1kI.roa
File: 7HY99KteH4PfsTqRBO5b4Tfv1kI.roa (raw, json)
Hash identifier: JoZ7RhkQaIIZtfLsVIMcq22Cc37XizQ7wSXpCUfyUAM=
Subject key identifier: EC:76:3D:F4:AB:5E:1F:83:DF:B1:3A:91:04:EE:5B:E1:37:EF:D6:42
Certificate issuer: /CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf
Certificate serial: 018CC6B7B38C651E6A2A38179D3C9A38CE2D
Authority key identifier: 38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/7HY99KteH4PfsTqRBO5b4Tfv1kI.roa
Signing time: Mon 01 Jan 2024 20:29:36 +0000
ROA not before: Mon 01 Jan 2024 20:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62350
IP address blocks: 2001:678:f50::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Jun 2024 19:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:b3:8c:65:1e:6a:2a:38:17:9d:3c:9a:38:ce:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf
Validity
Not Before: Jan 1 20:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec763df4ab5e1f83dfb13a9104ee5be137efd642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1f:3e:37:da:60:e4:65:9f:15:d4:bb:ac:aa:
6b:87:4a:f8:2c:4c:9c:21:a6:d3:5c:b9:e9:85:b1:
b0:66:c1:2e:ba:64:dc:3f:3d:ef:b1:f3:a2:bf:b7:
72:3e:fc:ea:31:8c:39:47:72:61:89:5f:4c:9c:0f:
96:eb:b9:56:21:9e:21:b1:35:0d:c3:6b:ee:0e:21:
96:26:a8:d9:fa:29:49:ee:5a:36:d4:57:a5:d3:04:
6c:61:c4:9d:2c:94:ef:0f:cf:03:3a:c2:31:b8:8a:
86:18:96:5d:cc:d3:08:06:1b:9d:18:09:b2:0d:dc:
90:42:82:c9:29:bc:96:5b:a9:d6:61:ab:23:c0:8e:
83:f9:d4:f1:0a:c1:5c:0e:44:4c:fe:9c:7d:7b:01:
c7:b3:c3:1e:f4:0d:fe:33:b4:15:d7:7a:89:04:04:
b0:d1:81:b4:2f:43:ee:0d:cf:ed:99:f4:37:b2:a5:
15:d1:14:07:eb:e5:b5:2c:94:01:e9:b9:21:f3:c2:
e5:a0:8f:e9:10:44:1f:79:44:60:ea:5a:1c:c6:73:
d6:59:3c:08:40:f8:a6:cd:79:88:96:23:ff:a1:bd:
de:20:21:1f:a6:3d:a8:f1:98:b3:e4:d5:14:8f:43:
e6:65:2a:d7:d7:9c:b5:d5:9e:0f:35:5d:ce:59:63:
b5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:76:3D:F4:AB:5E:1F:83:DF:B1:3A:91:04:EE:5B:E1:37:EF:D6:42
X509v3 Authority Key Identifier:
keyid:38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/7HY99KteH4PfsTqRBO5b4Tfv1kI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:f50::/48
Signature Algorithm: sha256WithRSAEncryption
00:3d:95:fc:ca:22:88:18:64:74:ae:ac:fa:55:09:ee:9a:95:
55:6e:04:42:ac:b7:53:0a:5f:50:fe:13:9c:fe:09:ee:11:d9:
de:18:38:6f:e7:3f:17:64:32:eb:4c:c6:3a:8e:a8:43:f0:8e:
90:2d:af:f1:af:8b:99:5a:1e:0f:7f:ad:d6:80:56:14:8b:00:
be:e6:a0:f9:85:de:cb:72:6f:3f:58:e6:fd:6e:95:21:ce:d7:
85:ab:88:53:d9:b3:04:60:9e:60:69:c3:5f:44:36:c7:2a:1d:
ea:7a:53:91:af:46:f4:e5:26:bb:17:75:6a:9c:5f:42:ec:4e:
8b:24:c0:a9:75:8d:d5:d3:af:96:5c:3d:c4:a3:31:87:b3:aa:
5a:76:f1:5c:d9:4d:d5:cc:bd:95:78:cb:d0:21:6a:5a:dc:0f:
18:86:f6:27:45:d0:d8:83:ef:b9:f4:ce:5c:2b:ae:0a:06:6d:
8e:3d:b2:ea:39:96:4d:45:3d:86:51:9f:8a:ae:04:d6:34:31:
bc:82:af:d3:79:25:99:c2:65:2c:8e:74:7b:76:77:12:f8:62:
2b:1c:1f:08:de:3f:cc:c0:78:10:70:39:d6:e8:15:14:16:ce:
c6:d3:18:28:81:a9:0a:6f:5b:0b:74:f5:6f:8b:cc:d1:0a:75:
bc:1b:2e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 00:50:35 2024 by rpki-client on console-ams.rpki-client.org