Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/kl7YF7lFxqHZgc5DgRoaaHS4Btg.roa
File: kl7YF7lFxqHZgc5DgRoaaHS4Btg.roa (raw, json)
Hash identifier: Yy9WV/gkOcTYumEPl3ycptzZpa0aUFXNBnWU40WN5ko=
Subject key identifier: 92:5E:D8:17:B9:45:C6:A1:D9:81:CE:43:81:1A:1A:68:74:B8:06:D8
Certificate issuer: /CN=ed900a55518b679edc78faa9883ec6e6035ae71c
Certificate serial: 019111E71DA511AF14432A042FA04D85A08A
Authority key identifier: ED:90:0A:55:51:8B:67:9E:DC:78:FA:A9:88:3E:C6:E6:03:5A:E7:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/kl7YF7lFxqHZgc5DgRoaaHS4Btg.roa
Signing time: Fri 02 Aug 2024 07:04:04 +0000
ROA not before: Fri 02 Aug 2024 07:04:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215472
IP address blocks: 2001:678:b74::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:11:e7:1d:a5:11:af:14:43:2a:04:2f:a0:4d:85:a0:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed900a55518b679edc78faa9883ec6e6035ae71c
Validity
Not Before: Aug 2 07:04:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=925ed817b945c6a1d981ce43811a1a6874b806d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6f:ad:48:fd:42:59:12:52:ba:83:73:a1:bf:
2f:14:ae:4a:8d:08:81:94:d0:97:ee:b5:13:ca:44:
8a:c1:a6:21:68:fa:0b:4a:e2:c8:c8:51:23:d4:2b:
dc:a5:34:5d:fa:a0:6c:d1:f8:0d:1f:4f:95:f5:10:
1c:b5:8a:88:a8:2b:f0:3f:5f:7f:45:4f:24:5f:a2:
6f:dc:5d:13:e2:85:b0:88:6e:de:6f:b0:12:50:64:
ba:35:c4:d1:7b:7e:76:fb:a0:d2:44:e6:97:ff:a8:
c9:4f:b8:2d:fe:3b:85:17:dc:5a:9a:b4:10:9d:e0:
75:29:e1:ab:a5:e4:7a:02:cf:6a:0c:f4:6e:86:0b:
37:ba:c9:28:60:71:09:93:7d:f1:50:ac:06:f6:5e:
db:06:aa:e1:42:ba:c0:1b:b0:57:9d:55:8a:f6:94:
2c:22:5d:95:f8:7d:cf:2d:f3:99:33:72:88:10:11:
43:f2:9c:e4:9d:24:e7:3a:da:b6:24:f8:43:e8:14:
d3:be:41:62:9b:9f:f8:e3:38:6e:11:a6:14:8d:f1:
03:e9:72:74:0d:a9:5c:0f:28:75:1b:9f:5d:fc:26:
31:31:49:e1:47:f8:bb:70:5b:f6:99:4b:d6:0e:60:
3b:3b:01:a9:4c:07:dc:b4:0e:5c:56:92:d3:e1:a9:
03:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5E:D8:17:B9:45:C6:A1:D9:81:CE:43:81:1A:1A:68:74:B8:06:D8
X509v3 Authority Key Identifier:
keyid:ED:90:0A:55:51:8B:67:9E:DC:78:FA:A9:88:3E:C6:E6:03:5A:E7:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/kl7YF7lFxqHZgc5DgRoaaHS4Btg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:b74::/48
Signature Algorithm: sha256WithRSAEncryption
34:f6:ad:79:5c:b5:07:0c:bc:79:65:42:6e:7f:e2:a7:08:ad:
1b:02:85:c2:0b:f3:92:ce:70:ae:71:7f:72:6c:20:23:eb:02:
ac:28:92:2c:d6:53:65:87:22:ef:59:dd:5a:7a:62:9c:19:70:
bf:9c:fe:5b:31:97:47:bc:76:a6:84:b1:34:05:c4:59:31:0d:
1d:9a:93:bb:a1:0f:2f:bd:d9:f8:50:f9:a4:6e:93:b5:37:a2:
5c:29:e3:67:52:f0:56:20:08:42:39:7a:b6:59:4b:94:3b:88:
ee:7b:fe:85:5d:82:09:72:c7:db:45:1e:43:ef:e8:44:5e:6a:
2d:7b:d4:1d:f4:1c:3e:a3:bf:83:f8:25:51:fc:90:44:97:e8:
15:a9:af:44:46:1c:00:f7:01:f9:79:f1:31:30:b8:b8:a9:23:
7f:e1:08:72:05:78:f3:bd:ab:4a:81:16:9e:e9:42:e4:6b:2d:
9c:c6:76:08:ae:a6:4d:a1:5f:ee:d4:d3:af:6a:53:fb:0c:ba:
a3:b8:c6:19:81:06:75:1a:5b:6a:3c:58:31:e8:13:5c:95:d8:
0d:d5:b9:df:5b:0a:1e:0d:b2:35:88:e7:85:70:a0:86:a5:93:
ec:a1:fa:21:32:30:3d:5b:72:06:a1:8a:3e:8b:6d:a0:6b:76:
6c:f6:25:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 12:43:13 2024 by rpki-client on console-ams.rpki-client.org