Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/RO4zjeQkeheRbDBuYx0fcd6al8I.roa
File: RO4zjeQkeheRbDBuYx0fcd6al8I.roa (raw, json)
Hash identifier: jMMoQs9InoheM+pJMXFAOJkfiXLoeW+w5ZxWTOr3lZw=
Subject key identifier: 44:EE:33:8D:E4:24:7A:17:91:6C:30:6E:63:1D:1F:71:DE:9A:97:C2
Certificate issuer: /CN=c43c74022cbbf0b3cfff6031d6d2de0369c99e4e
Certificate serial: 018CC26CF51D3395C6B80B8634D947ACF245
Authority key identifier: C4:3C:74:02:2C:BB:F0:B3:CF:FF:60:31:D6:D2:DE:03:69:C9:9E:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/RO4zjeQkeheRbDBuYx0fcd6al8I.roa
Signing time: Mon 01 Jan 2024 00:29:29 +0000
ROA not before: Mon 01 Jan 2024 00:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207947
IP address blocks: 2001:67c:964::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:f5:1d:33:95:c6:b8:0b:86:34:d9:47:ac:f2:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43c74022cbbf0b3cfff6031d6d2de0369c99e4e
Validity
Not Before: Jan 1 00:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44ee338de4247a17916c306e631d1f71de9a97c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:39:38:85:cf:e4:d5:d7:19:23:26:3b:cc:65:
6f:da:32:4e:16:4b:d7:bb:63:3e:2e:a1:a0:36:51:
15:05:34:45:24:ff:24:86:1b:3c:d2:30:95:fa:bc:
49:f4:61:7b:36:83:c4:6c:20:e8:81:c5:89:a8:22:
42:3c:13:83:38:19:fd:d0:f6:25:6d:1c:9d:01:c4:
16:b9:79:13:b9:47:87:a5:ed:ba:d2:de:df:f9:09:
2d:2b:45:60:11:57:48:2a:e4:d4:87:aa:fc:dc:bb:
aa:c1:66:71:bb:88:92:ba:2e:95:20:67:b9:e0:ba:
77:98:96:d0:ee:5f:9a:1e:9a:c8:49:a7:7b:e1:da:
c3:db:f7:63:cd:66:7d:40:25:12:b3:c0:38:95:e2:
6f:4e:64:7c:8e:ff:cb:e7:d7:18:31:f9:db:ab:8b:
02:a8:29:3d:31:a6:4e:d4:52:3b:65:23:7a:2e:8c:
52:0f:e2:d3:7b:ae:06:ac:e5:52:b9:b2:18:3b:78:
47:e6:48:5c:0e:87:a1:ca:9a:52:24:ca:04:36:71:
51:45:83:bb:8d:e3:bb:8a:cb:e3:a6:2d:f9:8c:0e:
15:6d:2e:ef:b6:a8:55:a9:ab:c7:61:05:05:b3:67:
cb:b2:cc:83:60:90:dd:a0:9a:2a:0f:82:f8:93:21:
32:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EE:33:8D:E4:24:7A:17:91:6C:30:6E:63:1D:1F:71:DE:9A:97:C2
X509v3 Authority Key Identifier:
keyid:C4:3C:74:02:2C:BB:F0:B3:CF:FF:60:31:D6:D2:DE:03:69:C9:9E:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/RO4zjeQkeheRbDBuYx0fcd6al8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:964::/48
Signature Algorithm: sha256WithRSAEncryption
49:35:95:36:92:fb:32:54:94:5d:ea:cc:9d:1d:9d:1f:45:b1:
9b:a2:3d:74:eb:27:c2:21:1a:b3:a5:28:1f:f8:40:2e:d4:08:
f3:27:bc:9b:de:b7:78:17:df:f8:a5:bc:cd:5a:2d:12:49:8c:
81:c0:18:33:c4:3b:8c:d9:85:1d:9a:90:77:a5:e9:c6:3d:21:
92:15:46:a4:c6:e1:f4:8f:3b:13:32:fd:d2:02:89:f5:a2:68:
db:fd:6b:5a:c3:1a:92:fb:f9:a9:41:2a:5b:78:0b:cf:0f:11:
f5:0d:2a:18:94:3e:9a:e9:a1:0c:d4:8c:c1:30:32:8f:e0:82:
b4:ae:a4:f1:31:66:a4:be:d4:68:5f:80:e7:32:fe:d1:53:e1:
97:c4:2b:bc:81:fe:c2:df:0e:da:18:ca:32:69:00:8e:e5:9b:
aa:11:3f:96:1a:e1:15:db:6e:eb:a5:3b:59:50:2b:a0:55:b3:
5f:4e:81:cb:a1:bc:86:c4:a5:f2:ef:84:ba:a5:68:b9:65:05:
5b:af:00:a3:08:ef:ba:9c:fd:6a:10:07:81:c6:c1:64:1c:4d:
98:f1:f1:51:01:01:d4:8e:93:b0:e0:5b:ad:15:10:30:87:81:
95:fd:25:2b:3f:6d:5f:6f:94:8a:9c:b1:7c:85:07:81:f0:b4:
78:1c:47:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 10:29:00 2024 by rpki-client on console-fra.rpki-client.org