Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/u61WNtDjxE-OnfrEYLG7XoEW3Pc.roa
File: u61WNtDjxE-OnfrEYLG7XoEW3Pc.roa (raw, json)
Hash identifier: 7IrTNWnrApPejSKGQbOzSMDTe0roBwEQ9DXpKBDTc6s=
Subject key identifier: BB:AD:56:36:D0:E3:C4:4F:8E:9D:FA:C4:60:B1:BB:5E:81:16:DC:F7
Certificate issuer: /CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71
Certificate serial: 018F3FBCEB29030B008E98D3567C57A8990F
Authority key identifier: 68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/u61WNtDjxE-OnfrEYLG7XoEW3Pc.roa
Signing time: Fri 03 May 2024 18:34:56 +0000
ROA not before: Fri 03 May 2024 18:34:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216074
IP address blocks: 2a14:600::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Oct 2024 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3f:bc:eb:29:03:0b:00:8e:98:d3:56:7c:57:a8:99:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71
Validity
Not Before: May 3 18:34:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bbad5636d0e3c44f8e9dfac460b1bb5e8116dcf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c6:80:15:e7:cc:42:d1:9c:88:64:68:57:e7:
bc:1d:52:1b:99:82:c9:68:df:70:a8:02:fb:4b:e2:
83:23:33:19:8c:44:23:3d:53:59:51:57:24:a5:79:
06:ea:03:59:5b:f5:18:bc:be:0a:e5:b8:f0:7f:23:
9e:37:11:92:63:e1:bc:21:a0:da:0c:1e:f6:ec:04:
d1:79:eb:4b:3e:3b:d1:2b:00:d2:d0:28:e5:55:c8:
a8:64:5c:35:4e:03:e2:49:6f:e8:82:eb:52:27:84:
2f:41:04:bc:76:ec:02:4b:8c:09:95:cf:98:83:5c:
7b:89:51:0f:18:f2:f2:b8:4a:dc:4f:76:46:ce:0c:
9b:81:44:c8:97:26:23:45:bc:c8:a5:06:c6:6b:2a:
58:45:54:02:31:7b:8d:e8:33:f5:d2:6b:81:fa:1c:
c6:35:f8:13:51:b6:03:bd:ce:af:07:2f:40:63:f4:
56:2f:76:eb:ab:cb:37:24:45:fd:cc:d2:e5:66:14:
fc:b6:39:f2:54:f6:58:d3:44:75:96:13:cd:93:03:
ea:4b:3c:c0:09:73:6a:45:93:83:7b:89:25:74:25:
7f:5b:ab:c7:5d:1e:91:ea:05:aa:9f:16:d2:fa:58:
5a:d1:11:94:b6:d2:1d:57:e3:7c:d8:ff:6a:5c:44:
80:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AD:56:36:D0:E3:C4:4F:8E:9D:FA:C4:60:B1:BB:5E:81:16:DC:F7
X509v3 Authority Key Identifier:
keyid:68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/u61WNtDjxE-OnfrEYLG7XoEW3Pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:600::/29
Signature Algorithm: sha256WithRSAEncryption
6b:f8:fa:e2:28:f6:51:99:c8:dd:60:55:2c:68:86:61:f9:28:
ce:79:af:92:f9:46:6c:78:3f:d5:29:5e:6e:32:80:4c:df:db:
c3:c4:6a:94:b0:68:8a:c6:db:49:4d:bd:07:84:18:19:ef:60:
58:29:2a:78:9c:5f:89:17:60:0a:05:e0:4e:5f:d5:f7:53:de:
02:9e:33:e3:1e:bc:23:58:59:6e:5f:b1:aa:a9:79:23:5d:35:
fa:19:fb:73:41:bd:a6:4f:e3:f0:f6:8f:67:4d:1a:98:4b:36:
1a:93:ce:68:cd:4f:21:0f:ee:6e:f1:df:f5:bb:9f:55:7c:c2:
7b:c1:f4:9e:4c:04:4d:18:d0:c4:af:80:0a:bd:7c:de:1f:83:
bf:8c:17:49:94:e8:4d:6c:17:04:fa:fa:7c:60:ad:d6:b8:0d:
15:f2:3a:04:74:9f:a3:d0:23:ad:40:ed:7d:59:8c:36:26:c3:
e9:7e:4b:1b:e9:95:79:e0:36:bc:db:28:c0:10:e7:9b:f7:76:
56:69:d9:2f:15:90:5e:7d:38:67:e6:ec:fe:45:08:8f:f3:17:
b8:09:a1:bc:c5:d0:b9:cd:7c:aa:ce:91:08:12:dd:6d:c2:19:
92:41:3d:13:04:2c:ec:18:c3:8a:8d:eb:cd:93:c5:34:e5:32:
05:97:05:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 6 21:25:20 2024 by rpki-client on console-fra.rpki-client.org