Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/56487e-4a38-43cb-bf64-ef1b3239396a/1/J60oSRVmRPDVtQbnLo9G9Y_PR10.roa
File: J60oSRVmRPDVtQbnLo9G9Y_PR10.roa (raw, json)
Hash identifier: +k7lTXXlz0vB92RaxqBvHBsAWUed0YiLY7VnChNn5ZA=
Subject key identifier: 27:AD:28:49:15:66:44:F0:D5:B5:06:E7:2E:8F:46:F5:8F:CF:47:5D
Certificate issuer: /CN=35a2b45fbed19b378a3038fe21adffab68d750c7
Certificate serial: 018CC9B9C7DF8E2DE8BE75DE6C605DD58C8B
Authority key identifier: 35:A2:B4:5F:BE:D1:9B:37:8A:30:38:FE:21:AD:FF:AB:68:D7:50:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaK0X77RmzeKMDj-Ia3_q2jXUMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/56487e-4a38-43cb-bf64-ef1b3239396a/1/J60oSRVmRPDVtQbnLo9G9Y_PR10.roa
Signing time: Tue 02 Jan 2024 10:30:44 +0000
ROA not before: Tue 02 Jan 2024 10:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216128
IP address blocks: 2001:67c:590::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/56487e-4a38-43cb-bf64-ef1b3239396a/1/NaK0X77RmzeKMDj-Ia3_q2jXUMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/56487e-4a38-43cb-bf64-ef1b3239396a/1/NaK0X77RmzeKMDj-Ia3_q2jXUMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NaK0X77RmzeKMDj-Ia3_q2jXUMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:b9:c7:df:8e:2d:e8:be:75:de:6c:60:5d:d5:8c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35a2b45fbed19b378a3038fe21adffab68d750c7
Validity
Not Before: Jan 2 10:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27ad2849156644f0d5b506e72e8f46f58fcf475d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e5:9e:17:26:50:9f:73:1b:42:91:59:81:48:
0b:57:d2:12:f7:c3:62:a1:e1:93:21:17:77:61:e2:
e1:d3:e3:7c:e0:75:3c:a9:df:e8:c7:29:8e:e4:6b:
51:e2:bd:09:25:33:52:1e:cb:13:06:65:bb:83:44:
80:1e:24:33:af:ce:41:9d:96:8d:49:93:a4:06:da:
36:0b:64:bc:bd:9c:2d:4e:3f:b8:5b:8c:b5:55:10:
56:67:2b:bd:b2:31:0c:ee:af:11:19:e2:b1:f0:90:
db:0e:93:1f:91:50:60:d1:3f:76:30:9d:1a:ea:2c:
f4:4f:0b:ac:c9:33:50:56:fb:cb:38:f2:d0:00:6e:
4b:f3:1d:64:f3:4a:6e:56:25:0d:08:28:79:5e:94:
7f:84:e5:c0:ec:50:7e:99:c2:47:40:4b:44:40:36:
23:4f:63:17:00:2d:18:dd:8f:f1:de:42:63:31:b2:
1c:e2:73:7f:a2:ff:8e:57:fb:a4:12:ae:d8:5d:4a:
18:10:38:cb:6f:0a:4d:41:11:78:62:b5:ba:2a:02:
dd:79:0a:35:d2:5b:98:a1:60:36:8b:b5:6c:f4:0e:
14:16:d7:6c:ad:00:cd:d6:cd:aa:56:2d:c1:8c:e7:
fc:0e:77:1d:50:1e:ec:db:0c:a3:4a:ed:40:e8:7a:
52:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AD:28:49:15:66:44:F0:D5:B5:06:E7:2E:8F:46:F5:8F:CF:47:5D
X509v3 Authority Key Identifier:
keyid:35:A2:B4:5F:BE:D1:9B:37:8A:30:38:FE:21:AD:FF:AB:68:D7:50:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaK0X77RmzeKMDj-Ia3_q2jXUMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/56487e-4a38-43cb-bf64-ef1b3239396a/1/J60oSRVmRPDVtQbnLo9G9Y_PR10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/56487e-4a38-43cb-bf64-ef1b3239396a/1/NaK0X77RmzeKMDj-Ia3_q2jXUMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:590::/48
Signature Algorithm: sha256WithRSAEncryption
1c:43:58:b6:22:f1:e0:1d:02:e3:c2:e8:0c:e1:d1:8f:5e:01:
ed:4d:fc:ec:97:31:4e:d1:51:9a:7c:79:52:66:ef:36:0f:e3:
20:be:20:7f:41:7f:eb:fb:c1:a0:05:f0:4e:13:9f:0f:d3:7c:
58:5b:37:51:6f:03:a2:a7:5c:99:da:cb:01:6d:89:a6:f8:86:
6c:b6:63:da:bc:6b:20:e7:b7:ec:eb:16:70:27:a0:40:5c:43:
e7:96:d2:34:ef:f3:0a:4e:f8:eb:dd:aa:f1:28:34:f6:05:e9:
78:a3:9f:12:75:12:4a:08:3b:73:aa:e7:5f:38:1c:a6:57:ae:
2a:5a:b9:82:03:92:6f:be:3e:c6:70:43:55:4f:a1:f1:71:68:
01:d1:d8:5e:38:70:18:8f:e3:fe:87:67:ff:14:1b:fe:fd:fc:
c4:71:33:b9:ea:c3:cc:ab:01:45:c8:b1:7a:12:6e:9b:3d:47:
ee:93:ea:55:44:f8:ec:a9:e0:76:77:27:6d:cd:b1:03:aa:f0:
c4:e1:32:c8:dd:99:ed:73:5d:38:2c:99:9d:73:43:88:90:20:
53:2b:8f:1d:54:40:76:b9:4e:08:9d:0d:d9:2d:5e:cd:5b:b9:
3f:52:79:78:04:f8:57:a8:13:1a:e6:69:c9:44:f4:d9:ee:f1:
df:0d:52:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 23:06:15 2024 by rpki-client on console-fra.rpki-client.org