Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/vtV5j3BVcOTqcBnDoPjH42US0QY.roa
File: vtV5j3BVcOTqcBnDoPjH42US0QY.roa (raw, json)
Hash identifier: 3H0UZiAwWekHcjAi9TU1TfH0lJOJNRIgjmL6fa+rztE=
Subject key identifier: BE:D5:79:8F:70:55:70:E4:EA:70:19:C3:A0:F8:C7:E3:65:12:D1:06
Certificate issuer: /CN=acabba0b0052ae7bd349235647a2ed731506ccaa
Certificate serial: 018CC794AC07E6E00C75E19D711C2CFEA3CB
Authority key identifier: AC:AB:BA:0B:00:52:AE:7B:D3:49:23:56:47:A2:ED:73:15:06:CC:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKu6CwBSrnvTSSNWR6LtcxUGzKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/vtV5j3BVcOTqcBnDoPjH42US0QY.roa
Signing time: Tue 02 Jan 2024 00:30:58 +0000
ROA not before: Tue 02 Jan 2024 00:30:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210454
IP address blocks: 2001:67c:7c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKu6CwBSrnvTSSNWR6LtcxUGzKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:ac:07:e6:e0:0c:75:e1:9d:71:1c:2c:fe:a3:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acabba0b0052ae7bd349235647a2ed731506ccaa
Validity
Not Before: Jan 2 00:30:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bed5798f705570e4ea7019c3a0f8c7e36512d106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:96:82:8b:40:88:7d:90:5b:3e:5f:81:17:46:
03:64:6d:e3:c8:81:1f:4f:2e:a7:40:cb:70:b4:6b:
59:4c:50:b3:f5:36:c0:d5:1b:40:6d:05:44:51:b3:
68:a6:79:b3:35:0e:83:5b:80:f2:1c:bc:2e:ea:ab:
31:0e:25:34:62:3e:c3:f3:4b:21:28:0c:31:f1:80:
82:dd:5f:b2:47:98:cd:a1:a2:87:86:03:24:89:84:
7b:42:dc:cb:82:e5:ab:09:34:df:18:89:d1:ed:b5:
77:e0:3a:57:07:72:0e:6b:c0:0a:07:fe:f6:5c:84:
aa:59:09:59:ed:ae:33:8f:1b:d4:71:10:30:3e:3d:
dd:c2:c0:16:bf:7f:3d:cf:0e:be:8b:be:f0:88:93:
76:2d:c5:b9:71:28:57:7f:c0:27:73:8d:38:c9:dd:
a5:96:ac:49:98:33:c0:6f:3b:32:11:bf:98:89:e3:
77:99:71:30:8c:b0:05:9b:74:32:12:05:00:39:0e:
9d:2d:bd:9c:e6:c1:a9:6c:23:85:30:16:1e:a1:9a:
01:c6:19:df:88:77:0d:bd:ff:a9:35:28:e3:a8:33:
fc:78:f7:56:cd:f1:74:53:b7:6d:d7:60:85:03:7d:
a4:6b:7f:13:f8:97:65:6c:52:c9:68:b9:b1:bd:b3:
5f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D5:79:8F:70:55:70:E4:EA:70:19:C3:A0:F8:C7:E3:65:12:D1:06
X509v3 Authority Key Identifier:
keyid:AC:AB:BA:0B:00:52:AE:7B:D3:49:23:56:47:A2:ED:73:15:06:CC:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKu6CwBSrnvTSSNWR6LtcxUGzKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/vtV5j3BVcOTqcBnDoPjH42US0QY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:7c::/48
Signature Algorithm: sha256WithRSAEncryption
92:58:51:a1:57:2f:94:57:f9:0d:82:55:e5:48:a2:f1:75:ee:
a5:c8:e3:42:0d:cd:8d:d4:b9:35:75:97:f1:5e:2d:1a:41:b0:
6e:a9:c4:78:fe:92:f2:30:0e:cf:7b:3c:35:18:be:cb:5a:1f:
75:7c:bb:d0:c4:75:b2:c5:6c:8a:23:bd:66:2f:48:96:db:55:
1c:b5:62:c2:6e:06:35:04:42:9d:30:58:ef:df:5b:b9:8f:b2:
47:2a:9e:5d:d1:6b:0e:7c:6c:bd:b1:c8:65:54:0e:62:15:b5:
b9:fa:bd:5c:9a:a0:4e:5d:7b:2f:23:1f:41:64:80:d2:35:86:
73:41:bb:38:5d:3b:ba:5b:9e:f0:a6:59:6c:b2:50:90:0b:35:
d9:8f:77:bf:fe:2c:94:30:06:96:ce:8d:da:87:ed:0d:da:b1:
78:d6:b0:92:20:9b:20:bc:7d:a2:a4:1e:7b:8b:63:3b:13:da:
7b:77:5b:03:71:b6:94:a3:d9:e6:6b:df:ab:2a:ea:bc:80:98:
c2:75:75:02:a5:34:cd:86:81:8c:ce:d5:bb:ac:8d:22:6b:5e:
53:8e:5b:1f:6e:cb:4f:29:1f:3c:33:ee:b8:7d:e7:aa:21:2d:
b5:24:43:b3:19:ea:7f:59:e7:4b:97:77:57:73:e4:67:71:4e:
a6:21:c4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 11:00:23 2024 by rpki-client on console-fra.rpki-client.org