Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/SBU2D1fv9-zKSTvXVOcCjj9xQVE.roa
File: SBU2D1fv9-zKSTvXVOcCjj9xQVE.roa (raw, json)
Hash identifier: mlwImh9bGHkjLtwmbNB4w77DcXm7sRDKnJXDtwB03/s=
Subject key identifier: 48:15:36:0F:57:EF:F7:EC:CA:49:3B:D7:54:E7:02:8E:3F:71:41:51
Certificate issuer: /CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Certificate serial: 018EF751F05F0D9600E3B197B404B602D2AB
Authority key identifier: DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/SBU2D1fv9-zKSTvXVOcCjj9xQVE.roa
Signing time: Fri 19 Apr 2024 17:05:26 +0000
ROA not before: Fri 19 Apr 2024 17:05:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216105
IP address blocks: 2001:67c:d4c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f7:51:f0:5f:0d:96:00:e3:b1:97:b4:04:b6:02:d2:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Validity
Not Before: Apr 19 17:05:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4815360f57eff7ecca493bd754e7028e3f714151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bd:11:98:e3:a7:39:34:f4:e3:ee:c3:4d:80:
25:de:c3:05:02:9e:50:1a:19:06:f6:37:3c:9e:a4:
15:d5:53:4f:11:ac:dc:55:64:34:9d:3c:a4:e6:2b:
cd:c1:b6:87:8a:a4:97:30:d2:df:d2:b9:f0:8a:1f:
d3:5f:ed:f7:84:92:66:84:41:99:cd:24:46:2d:3f:
75:ea:ae:40:a0:ec:ac:d7:ea:7f:94:f7:7e:ce:e9:
7d:6c:d2:99:db:bd:6d:5f:f6:ac:17:07:38:fb:f5:
33:d6:0b:90:01:e9:3f:f3:e7:b0:d0:e3:e0:95:fd:
02:8d:30:62:78:80:c4:35:77:98:ef:9d:46:00:57:
17:3b:29:b5:a6:8f:d6:23:c5:b7:f4:3f:6d:52:65:
50:9a:fa:9a:87:e0:72:74:20:c4:a6:2e:1c:ba:dc:
84:40:4b:94:02:e7:e6:8d:58:7b:22:2b:20:65:fa:
33:a4:37:03:96:a3:ea:b4:2b:22:fe:fb:7d:fb:cb:
54:e2:db:76:89:2f:a8:18:10:64:77:eb:48:a6:2c:
a5:86:94:a3:19:54:a3:1a:fe:f5:68:89:19:da:e7:
a5:41:dc:2a:09:79:0e:10:13:80:a6:f5:20:b0:16:
30:6f:42:c7:74:6b:01:4e:dd:04:65:10:26:f8:e0:
c1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:15:36:0F:57:EF:F7:EC:CA:49:3B:D7:54:E7:02:8E:3F:71:41:51
X509v3 Authority Key Identifier:
keyid:DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/SBU2D1fv9-zKSTvXVOcCjj9xQVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:d4c::/48
Signature Algorithm: sha256WithRSAEncryption
09:d3:e4:4f:68:44:17:35:85:45:8a:02:3f:3d:38:a4:42:07:
68:b5:fc:9f:37:c5:72:4e:29:ba:92:69:f3:13:41:eb:80:c8:
86:07:e4:27:7f:6b:60:82:77:e2:b9:b9:e1:3c:4f:85:24:a0:
e4:30:f4:69:7a:5d:2b:1f:26:6e:5e:5c:97:9f:b8:ad:ac:c4:
64:77:3e:eb:0c:3a:ba:bc:e5:a8:49:18:35:24:22:07:9e:36:
fd:26:49:7a:72:f8:5b:be:7d:0e:53:ee:0c:58:90:8e:ba:a4:
bf:03:c8:dd:d9:c1:bf:7b:65:ca:40:a3:22:ed:dd:b8:16:a7:
ad:e6:a9:6d:61:89:e6:74:34:06:11:7e:17:d2:7b:74:af:10:
70:7a:95:f6:48:dd:d1:70:2a:e0:af:6b:06:e2:42:b3:14:aa:
9f:69:bb:f7:a4:aa:40:1e:5e:14:aa:1f:aa:36:6f:5b:a0:00:
92:02:04:1e:e3:11:26:38:c3:74:96:08:9a:3c:48:a6:0d:8b:
23:99:37:16:b5:d4:c0:9a:14:60:57:3b:86:f1:0a:4e:a5:eb:
79:c4:9a:0f:83:32:72:88:24:dc:cf:6b:1b:44:df:77:91:9a:
b9:f0:2d:74:e0:d2:92:7e:68:44:b0:ee:e5:ce:52:35:70:17:
75:90:18:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 12:56:53 2024 by rpki-client on console-ams.rpki-client.org