Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/UgGHhXX4ThtVDMUuOZYsTAycgmo.roa
File: UgGHhXX4ThtVDMUuOZYsTAycgmo.roa (raw, json)
Hash identifier: nSFBT+z+wPZZJbAPgVT3lhCaONF3iz3zCbQxg/rmCJM=
Subject key identifier: 52:01:87:85:75:F8:4E:1B:55:0C:C5:2E:39:96:2C:4C:0C:9C:82:6A
Certificate issuer: /CN=66501165645aa80dcba315885cf374acb6d21305
Certificate serial: 018CC8017823F1D62BA6C5A0A1D894BC543A
Authority key identifier: 66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/UgGHhXX4ThtVDMUuOZYsTAycgmo.roa
Signing time: Tue 02 Jan 2024 02:29:48 +0000
ROA not before: Tue 02 Jan 2024 02:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56841
IP address blocks: 2001:67c:acc::/48 maxlen: 48
2001:67c:2788::/48 maxlen: 48
2001:67c:ad0::/48 maxlen: 48
2001:67c:ac8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:78:23:f1:d6:2b:a6:c5:a0:a1:d8:94:bc:54:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66501165645aa80dcba315885cf374acb6d21305
Validity
Not Before: Jan 2 02:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5201878575f84e1b550cc52e39962c4c0c9c826a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1b:9d:b7:86:e7:dd:93:52:66:f3:77:8d:b2:
a7:ce:4d:62:24:70:fd:3d:0f:ec:62:8c:27:b0:9c:
a3:ef:6b:68:88:de:1a:46:2d:43:06:59:18:78:83:
61:41:ae:e8:48:73:61:29:b9:b0:c3:26:56:92:4a:
5d:e0:c0:a2:c3:3b:90:98:38:fd:c8:bc:8a:39:24:
bd:81:35:a9:7c:32:e7:2a:48:c5:55:03:7c:2e:e3:
22:ee:5a:58:f3:80:fe:a9:68:00:7a:e8:af:22:ea:
c2:28:52:ad:7e:6c:ce:86:00:19:a3:be:c3:d6:05:
f8:75:5e:9c:48:a3:0d:e6:08:d4:dc:2b:0e:f6:c0:
27:95:81:d3:3a:c7:d7:c1:c2:29:9f:7d:a7:f2:38:
88:cc:ff:c6:53:32:bd:e1:75:06:f2:aa:10:62:c8:
f1:a7:9e:ea:46:b2:df:c7:e9:3a:f4:2d:f5:c3:f5:
5e:fd:08:93:b2:2d:ba:c3:c7:0c:78:12:96:a5:ed:
88:e1:e8:d8:52:85:a1:db:92:5d:32:14:cc:e8:4a:
bf:12:79:2d:24:ab:50:31:78:26:6a:fc:f5:ab:36:
fe:ba:53:96:9b:dd:6a:a5:bc:7b:34:8b:d5:38:e4:
de:d8:01:47:99:37:bb:db:9f:fa:fe:c0:0d:5a:3b:
61:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:01:87:85:75:F8:4E:1B:55:0C:C5:2E:39:96:2C:4C:0C:9C:82:6A
X509v3 Authority Key Identifier:
keyid:66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/UgGHhXX4ThtVDMUuOZYsTAycgmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:ac8::/48
2001:67c:acc::/48
2001:67c:ad0::/48
2001:67c:2788::/48
Signature Algorithm: sha256WithRSAEncryption
b1:31:8c:14:ff:c6:1f:b1:9f:5a:bc:d3:da:63:4b:b1:30:03:
53:c8:2f:4c:b1:4e:b2:e3:70:a4:7f:76:5d:cb:ee:9f:4e:be:
2b:cf:29:93:39:61:03:08:3f:96:27:07:37:4e:42:02:5f:f1:
0d:df:31:96:a0:41:6d:48:10:c2:5a:02:a8:cc:cb:fb:68:35:
97:b3:76:f7:bb:33:98:fe:25:a2:0a:d5:8f:83:d5:58:f0:b5:
40:16:14:58:e0:40:8b:be:21:90:93:2e:32:9b:95:6d:bc:6c:
43:79:f3:e1:7d:36:94:c4:8d:69:ec:04:28:03:8f:3d:a4:01:
e6:76:47:4a:d6:68:eb:10:4e:c1:c9:00:6f:b9:9d:2e:bd:bc:
3b:82:84:c5:b3:a1:33:64:42:96:55:ea:91:a4:b6:14:f3:4d:
ac:72:3b:b9:c4:98:3d:9e:d5:05:44:53:60:08:6b:17:cf:6e:
da:a5:0d:8c:61:a2:0e:87:e6:97:d2:e2:ac:fb:17:50:5f:b7:
2e:89:95:5b:3d:02:4c:ff:ab:30:01:d8:c3:57:7a:cf:b0:eb:
74:5b:95:08:8f:25:01:69:db:e0:f9:9f:9e:7f:80:86:87:25:
b1:62:da:e7:52:0a:1c:a2:7a:d5:50:de:39:77:3d:e9:5b:1e:
2e:1b:dc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 04:35:26 2024 by rpki-client on console-ams.rpki-client.org