Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/dmphHvEeJzortBRvHbUqrSt3y6U.roa
File: dmphHvEeJzortBRvHbUqrSt3y6U.roa (raw, json)
Hash identifier: KJB9F0CDiKWRZOdpwfmtDXu2IsD6ugQh9F362zDvrCk=
Subject key identifier: 76:6A:61:1E:F1:1E:27:3A:2B:B4:14:6F:1D:B5:2A:AD:2B:77:CB:A5
Certificate issuer: /CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Certificate serial: 018CC4248332C41050006D4167CDFA0DD282
Authority key identifier: F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/dmphHvEeJzortBRvHbUqrSt3y6U.roa
Signing time: Mon 01 Jan 2024 08:29:36 +0000
ROA not before: Mon 01 Jan 2024 08:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12400
IP address blocks: 2a03:6947:c00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:83:32:c4:10:50:00:6d:41:67:cd:fa:0d:d2:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Validity
Not Before: Jan 1 08:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=766a611ef11e273a2bb4146f1db52aad2b77cba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:21:90:6c:da:44:e2:4b:02:bf:4d:13:64:b1:
74:2a:5f:46:51:f0:07:7d:7c:8d:fe:ba:4c:d2:12:
1c:5d:c0:f6:51:b7:5f:c2:e7:41:67:7c:e1:b1:1d:
30:a0:68:f1:17:c0:8a:4c:1b:f3:23:a1:a3:85:79:
4b:5a:f8:70:6c:07:f4:76:5c:28:d0:8d:06:ea:4f:
af:4e:8e:c8:08:9f:25:c9:e6:02:a1:99:50:a3:5f:
a1:5b:61:62:b2:e3:08:91:2a:0f:ce:d0:7e:f3:46:
91:c3:c4:04:89:e0:2b:fc:99:8c:bc:d5:59:1a:ab:
42:49:6c:af:34:a0:7e:e3:7d:7b:be:ad:68:d4:68:
58:cb:f2:2f:79:ea:22:67:ba:84:30:45:99:cd:a5:
fc:46:61:e6:b1:e6:c9:e7:23:6c:30:0e:33:ec:8b:
fc:37:fe:3a:06:c5:33:32:d2:5b:3d:75:4d:26:9a:
f4:b0:7b:b1:71:e1:03:0c:b0:6a:fd:86:ee:2c:04:
87:10:3d:85:87:fd:ed:df:5c:bf:0a:55:7b:60:03:
a7:e0:86:ea:9f:69:f9:fa:01:fe:e1:d6:c3:75:79:
35:06:3a:ab:24:fa:01:3b:27:33:99:18:93:8a:c6:
a2:8d:8f:c7:7d:ed:90:df:6d:76:ae:2c:3e:dc:09:
90:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:6A:61:1E:F1:1E:27:3A:2B:B4:14:6F:1D:B5:2A:AD:2B:77:CB:A5
X509v3 Authority Key Identifier:
keyid:F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/dmphHvEeJzortBRvHbUqrSt3y6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:6947:c00::/40
Signature Algorithm: sha256WithRSAEncryption
95:43:56:5c:67:58:e9:48:ac:ed:4b:70:cc:d8:17:fc:6e:20:
dc:c6:6f:01:1c:11:f2:b1:d8:02:ed:9b:f4:2a:a4:4f:ce:ca:
5b:86:b2:7c:9d:10:9a:1a:7b:7e:13:4b:60:4b:51:54:a9:87:
90:57:8f:af:0d:b1:10:4e:a7:45:2d:da:1a:d4:b6:fe:de:98:
de:6b:17:4c:de:c2:7c:c6:87:c2:7e:b0:a5:18:87:d3:72:92:
42:96:97:7d:88:14:e6:f6:e1:3e:34:9a:fc:d7:82:f5:0c:15:
a2:b8:86:e8:d3:44:e8:5c:02:81:da:9f:96:d0:a8:c3:46:81:
08:10:dd:2b:b0:9c:e5:98:1f:b3:7b:5b:98:13:02:e5:96:a2:
01:78:6c:4e:79:39:e2:0b:29:42:88:53:73:1d:90:9d:21:dd:
08:27:bd:24:2e:ad:76:f7:d9:22:96:2d:4d:db:d3:71:7a:04:
da:61:7d:d8:09:b0:aa:90:e8:f5:05:ec:e0:e1:0b:5a:5a:b8:
72:2d:9d:ca:5c:0a:27:1a:05:51:52:38:4a:5e:4d:a2:48:c6:
7f:22:30:d5:84:20:59:2e:18:f8:f6:35:99:23:a5:9e:47:ea:
8b:9e:25:9d:cd:27:7a:66:08:25:b1:69:b5:21:dd:81:de:c0:
bd:5a:9f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:17:22 2024 by rpki-client on console-fra.rpki-client.org