Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b49460-c42f-4186-a556-b2426736c1e5/1/aVhvh8nOxUteryHLBGXv9ZJjT9o.roa
File: aVhvh8nOxUteryHLBGXv9ZJjT9o.roa (raw, json)
Hash identifier: KPhlDtt412fTLo/HDpy1qG2Y7e+hjTp1F5+vQgOeS2I=
Subject key identifier: 69:58:6F:87:C9:CE:C5:4B:5E:AF:21:CB:04:65:EF:F5:92:63:4F:DA
Certificate issuer: /CN=c3a3c2bd16f8318bdd9c3eb20a8a8a701f3e27c7
Certificate serial: 018D529F2C05C90E21F97AD3E0A9C43C6E57
Authority key identifier: C3:A3:C2:BD:16:F8:31:8B:DD:9C:3E:B2:0A:8A:8A:70:1F:3E:27:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6PCvRb4MYvdnD6yCoqKcB8-J8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b49460-c42f-4186-a556-b2426736c1e5/1/aVhvh8nOxUteryHLBGXv9ZJjT9o.roa
Signing time: Mon 29 Jan 2024 00:29:39 +0000
ROA not before: Mon 29 Jan 2024 00:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205441
IP address blocks: 2001:67c:9d8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b49460-c42f-4186-a556-b2426736c1e5/1/w6PCvRb4MYvdnD6yCoqKcB8-J8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b49460-c42f-4186-a556-b2426736c1e5/1/w6PCvRb4MYvdnD6yCoqKcB8-J8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/w6PCvRb4MYvdnD6yCoqKcB8-J8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:52:9f:2c:05:c9:0e:21:f9:7a:d3:e0:a9:c4:3c:6e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a3c2bd16f8318bdd9c3eb20a8a8a701f3e27c7
Validity
Not Before: Jan 29 00:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69586f87c9cec54b5eaf21cb0465eff592634fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:23:38:1c:c6:69:fb:40:e1:d6:1b:cb:28:8f:
84:99:e3:b0:05:1b:f0:b4:bc:bf:a0:a8:45:55:65:
ad:34:53:b9:5a:2c:04:8f:6d:06:1f:7e:c8:d0:97:
1d:ec:31:cb:bb:6f:22:29:9a:c7:7b:cd:80:fe:14:
c7:25:37:3e:51:f7:45:22:9d:4f:55:03:2f:2f:12:
60:86:02:02:f5:05:82:2d:59:b7:7d:48:91:51:7e:
3b:ee:e7:8c:51:77:69:31:c8:0a:c2:86:64:1e:28:
ec:96:79:db:c6:c3:a8:73:bf:dc:58:b1:43:da:87:
4c:12:e6:f4:48:48:55:75:bb:ca:5b:d8:0f:1b:76:
33:d5:c6:be:5c:35:95:00:3e:68:58:90:b9:0a:d8:
73:19:f2:44:76:66:67:0f:5e:46:da:25:6b:cb:60:
97:f3:6c:09:ba:04:f6:d9:d3:b7:cd:b7:3d:1f:0e:
90:28:0a:4e:cf:4f:4b:98:58:c0:f3:fb:ef:b4:6a:
cb:c2:e4:73:94:78:6e:56:1e:42:eb:52:cb:3b:ce:
89:67:bf:3d:84:42:ed:bd:b3:95:c2:d9:62:47:b4:
08:9d:3c:66:fa:00:33:4c:f1:f5:cc:3f:93:98:71:
d2:e6:d4:d7:a9:54:37:30:39:2e:4b:9c:91:bb:48:
3b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:58:6F:87:C9:CE:C5:4B:5E:AF:21:CB:04:65:EF:F5:92:63:4F:DA
X509v3 Authority Key Identifier:
keyid:C3:A3:C2:BD:16:F8:31:8B:DD:9C:3E:B2:0A:8A:8A:70:1F:3E:27:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6PCvRb4MYvdnD6yCoqKcB8-J8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b49460-c42f-4186-a556-b2426736c1e5/1/aVhvh8nOxUteryHLBGXv9ZJjT9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b49460-c42f-4186-a556-b2426736c1e5/1/w6PCvRb4MYvdnD6yCoqKcB8-J8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:9d8::/48
Signature Algorithm: sha256WithRSAEncryption
30:f0:6c:36:b3:8f:fa:4f:63:c5:36:d7:59:7a:43:7a:65:0d:
f0:e6:61:0d:86:77:8c:1d:91:5f:e5:15:6d:98:77:78:0a:4b:
bc:b4:32:9d:00:92:ee:2d:c1:b7:90:d9:5c:61:36:0e:66:c5:
99:bc:70:e8:af:50:f6:7a:68:25:b6:77:9b:b4:da:b1:24:09:
4a:55:b2:5f:99:54:cc:bd:9b:b6:50:1d:c9:11:5b:14:6d:f9:
94:6a:d1:56:09:5b:90:69:d9:e8:cd:f5:4a:e5:c5:97:c2:db:
01:07:a4:b5:2c:b7:db:8a:16:fc:5b:d8:29:15:1f:12:c1:46:
bb:9b:10:d7:9e:c9:9a:b3:c4:6b:a7:c2:17:75:00:0b:a7:bf:
e4:32:71:0b:ea:75:38:54:91:bf:b5:95:c4:a6:f7:48:14:57:
13:80:f3:ec:08:3d:24:17:31:d8:ca:79:e2:0a:26:bc:ea:0d:
ec:87:4f:d5:24:6d:74:86:0c:ab:3f:e0:43:8c:0b:70:13:6d:
eb:ea:42:34:cd:ba:56:fe:c4:db:8a:fb:b8:12:ba:dd:e1:04:
6a:fa:42:bb:f8:2c:5d:82:f1:55:10:52:26:05:65:42:7d:b3:
3e:a5:10:1a:c0:7f:cb:2d:01:8a:79:b4:0e:02:0d:15:99:92:
9e:94:d3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:49:48 2024 by rpki-client on console-fra.rpki-client.org