Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e4f5ec-efdc-4b00-8eb6-a048eb94d55b/1/s1FgNcrgtLXRJUBPk45z2nmhh9E.roa
File: s1FgNcrgtLXRJUBPk45z2nmhh9E.roa (raw, json)
Hash identifier: 2Fv8L021ngMMjqR+nudMGSM97Za9ARUHC+vevmZOiqM=
Subject key identifier: B3:51:60:35:CA:E0:B4:B5:D1:25:40:4F:93:8E:73:DA:79:A1:87:D1
Certificate issuer: /CN=74e87431bebf703cc4e4a33106f4618a1a00a969
Certificate serial: 018CC7272E507AD515D752E8E02F3C95F7B3
Authority key identifier: 74:E8:74:31:BE:BF:70:3C:C4:E4:A3:31:06:F4:61:8A:1A:00:A9:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOh0Mb6_cDzE5KMxBvRhihoAqWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e4f5ec-efdc-4b00-8eb6-a048eb94d55b/1/s1FgNcrgtLXRJUBPk45z2nmhh9E.roa
Signing time: Mon 01 Jan 2024 22:31:22 +0000
ROA not before: Mon 01 Jan 2024 22:31:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213343
IP address blocks: 2001:678:d18::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e4f5ec-efdc-4b00-8eb6-a048eb94d55b/1/dOh0Mb6_cDzE5KMxBvRhihoAqWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e4f5ec-efdc-4b00-8eb6-a048eb94d55b/1/dOh0Mb6_cDzE5KMxBvRhihoAqWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOh0Mb6_cDzE5KMxBvRhihoAqWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:2e:50:7a:d5:15:d7:52:e8:e0:2f:3c:95:f7:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e87431bebf703cc4e4a33106f4618a1a00a969
Validity
Not Before: Jan 1 22:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3516035cae0b4b5d125404f938e73da79a187d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7f:e6:0c:28:66:18:8e:19:47:5e:0b:9a:6e:
cd:6b:06:0e:46:29:20:cd:4c:c9:82:3c:6a:19:64:
fc:e0:cb:39:3b:37:50:29:5d:f1:1c:26:7a:00:bf:
fd:1e:bc:ab:97:4c:1c:cf:cd:c9:d7:ec:70:d4:b0:
c1:fa:96:87:30:e0:a4:e3:b8:70:f4:42:28:cc:a1:
91:67:f8:ef:27:4f:31:28:95:c7:16:a2:7a:57:91:
22:88:92:ba:74:a2:f3:0c:24:c2:1f:7a:a0:3f:dd:
68:e3:71:00:93:75:92:58:f4:4b:0a:f2:88:5e:81:
9d:47:fc:92:92:35:62:11:48:0b:09:58:fc:06:73:
ee:35:5b:ab:04:67:b0:63:1e:85:ad:05:22:0a:49:
20:d2:29:ba:d8:fb:33:ea:bd:cb:0d:e6:bc:b8:49:
c0:58:0a:d0:36:c9:04:46:7f:a2:95:f1:13:3c:7a:
f4:83:47:31:94:26:b0:ad:24:8f:5b:d0:f0:9c:6c:
65:16:9c:2e:e1:45:63:a5:d8:8d:3f:d6:b2:3e:48:
d6:ae:a4:40:11:6f:04:6b:32:9a:2c:43:06:72:53:
d1:9c:3f:51:29:69:01:b2:e2:a4:07:66:7f:10:09:
73:cd:83:85:d8:55:fc:33:d2:5f:ff:ae:f0:62:6f:
c7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:51:60:35:CA:E0:B4:B5:D1:25:40:4F:93:8E:73:DA:79:A1:87:D1
X509v3 Authority Key Identifier:
keyid:74:E8:74:31:BE:BF:70:3C:C4:E4:A3:31:06:F4:61:8A:1A:00:A9:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOh0Mb6_cDzE5KMxBvRhihoAqWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e4f5ec-efdc-4b00-8eb6-a048eb94d55b/1/s1FgNcrgtLXRJUBPk45z2nmhh9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e4f5ec-efdc-4b00-8eb6-a048eb94d55b/1/dOh0Mb6_cDzE5KMxBvRhihoAqWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:d18::/48
Signature Algorithm: sha256WithRSAEncryption
82:82:ef:e7:12:ac:fb:e1:0e:6d:6a:09:39:1a:9d:c8:70:c3:
fd:f2:71:47:32:75:c8:d7:67:53:a1:0d:be:db:fa:b0:d4:c0:
72:f5:56:2d:8f:8f:63:27:18:f5:82:b2:d6:48:cc:a0:cd:e2:
e8:a3:83:36:08:1d:1a:95:6a:58:e7:27:b7:02:63:c4:e8:c8:
7e:e8:59:ed:d1:1e:21:a3:01:81:18:9d:cd:5c:d0:c1:fa:76:
3d:0f:cc:b6:a9:4c:db:6a:f9:54:8a:c9:6b:15:ff:b3:53:41:
8a:0b:56:16:4c:de:16:8e:b3:ff:58:53:c6:89:e5:5a:e7:40:
e2:0b:5c:7d:0f:92:b5:fb:70:b1:03:82:91:f7:43:d7:75:ba:
cd:93:36:b8:b9:27:86:10:10:41:2d:14:8b:85:84:cc:8c:cd:
df:e8:16:86:dc:15:61:8c:5b:98:30:5b:72:a0:7a:75:4c:0a:
a6:0e:31:87:3b:09:11:c3:08:7a:51:f0:38:46:93:e7:e2:7e:
5b:3a:41:30:36:ae:99:ac:ec:c0:d4:e6:91:0b:b1:e3:a2:46:
a0:e4:3e:c8:55:8b:8d:7d:4a:c0:cd:83:aa:a7:47:d8:53:22:
1b:96:42:d0:b4:db:55:2f:fa:f5:23:f5:1e:7f:a9:db:d2:b8:
5c:72:f0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:40:21 2024 by rpki-client on console-fra.rpki-client.org