Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/abe331-7d14-4305-97c8-d7c2b48ff0ca/1/vaoIeoP5NxGbvxQkGM7yeHfRNBQ.roa
File: vaoIeoP5NxGbvxQkGM7yeHfRNBQ.roa (raw, json)
Hash identifier: 96ah2hnF9/msbPNKe26/Uqc4+HOkFux8zriQgiojiIo=
Subject key identifier: BD:AA:08:7A:83:F9:37:11:9B:BF:14:24:18:CE:F2:78:77:D1:34:14
Certificate issuer: /CN=dd44be6ba5af12b6f1707853dcdacbda7e42212b
Certificate serial: 018CC348942EEC420F2E5DD4DE0E4B855C3D
Authority key identifier: DD:44:BE:6B:A5:AF:12:B6:F1:70:78:53:DC:DA:CB:DA:7E:42:21:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3US-a6WvErbxcHhT3NrL2n5CISs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/abe331-7d14-4305-97c8-d7c2b48ff0ca/1/vaoIeoP5NxGbvxQkGM7yeHfRNBQ.roa
Signing time: Mon 01 Jan 2024 04:29:22 +0000
ROA not before: Mon 01 Jan 2024 04:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216460
IP address blocks: 2001:67c:1bbc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/abe331-7d14-4305-97c8-d7c2b48ff0ca/1/3US-a6WvErbxcHhT3NrL2n5CISs.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/abe331-7d14-4305-97c8-d7c2b48ff0ca/1/3US-a6WvErbxcHhT3NrL2n5CISs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3US-a6WvErbxcHhT3NrL2n5CISs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:94:2e:ec:42:0f:2e:5d:d4:de:0e:4b:85:5c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd44be6ba5af12b6f1707853dcdacbda7e42212b
Validity
Not Before: Jan 1 04:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bdaa087a83f937119bbf142418cef27877d13414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:36:4f:da:5c:2e:56:d1:2a:e0:f4:96:ab:5e:
36:95:cc:c8:7b:45:ce:7a:e6:ac:b7:58:ee:89:be:
f1:89:e6:8a:f6:fc:ce:91:43:05:91:02:8f:d6:54:
04:0b:95:99:a9:d7:17:f7:24:41:46:0c:a8:a2:8b:
84:c2:dc:c7:00:dc:dc:32:eb:e2:65:b6:6a:df:ad:
fd:e8:8e:5a:a0:4a:9a:a5:14:bb:6e:fb:43:48:46:
15:12:7f:4a:56:4c:11:83:5e:00:75:ca:f7:b9:1b:
6f:69:ea:5e:f2:32:ba:91:b4:d0:6b:6b:24:7a:52:
5c:2d:28:71:9b:13:84:46:7e:fe:4b:ad:f3:b1:61:
93:49:60:4e:41:bb:71:fd:a2:2b:6a:87:46:38:f9:
02:16:28:79:6a:1d:37:f5:ff:02:d3:2b:b5:2f:d8:
92:57:c1:30:14:ae:8d:b7:b6:91:4e:04:d6:c9:5f:
82:af:bb:10:09:40:f7:79:06:f5:0c:13:0a:ef:fc:
93:d0:25:66:ae:8f:fb:0e:d9:1d:c6:07:f3:1e:c3:
a3:7f:a4:e6:e3:39:28:62:11:40:42:33:9a:c3:c5:
93:7c:67:31:0d:40:13:a7:e3:7b:73:ec:18:26:b8:
57:01:88:26:26:d0:ae:17:1d:79:51:9d:43:04:ef:
ba:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:AA:08:7A:83:F9:37:11:9B:BF:14:24:18:CE:F2:78:77:D1:34:14
X509v3 Authority Key Identifier:
keyid:DD:44:BE:6B:A5:AF:12:B6:F1:70:78:53:DC:DA:CB:DA:7E:42:21:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3US-a6WvErbxcHhT3NrL2n5CISs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/abe331-7d14-4305-97c8-d7c2b48ff0ca/1/vaoIeoP5NxGbvxQkGM7yeHfRNBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/abe331-7d14-4305-97c8-d7c2b48ff0ca/1/3US-a6WvErbxcHhT3NrL2n5CISs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1bbc::/48
Signature Algorithm: sha256WithRSAEncryption
3b:f7:fd:a7:39:e7:f7:ee:91:3b:87:75:8d:23:c2:c5:49:d2:
53:64:63:6a:7a:fd:f9:17:59:8d:3f:23:6d:36:d0:67:2d:5c:
45:0e:bd:d4:90:3e:a2:1c:56:42:9b:4e:3d:d7:fa:88:27:af:
f3:19:40:c5:df:c2:21:5f:e1:e2:bb:c0:d1:0c:3b:3a:3a:c2:
79:4d:24:d7:bf:8d:a2:46:2c:64:a9:a4:bc:c1:2f:89:24:2b:
48:98:4a:e3:51:a7:0a:16:93:33:cc:a5:58:1c:da:92:15:cc:
66:33:1d:76:ee:c0:46:dc:7d:11:90:34:02:be:c2:46:22:16:
3e:bf:b4:1c:13:c1:d0:1e:b5:52:a9:66:89:ba:b6:6c:7b:c5:
10:56:26:76:15:cc:84:68:ca:cd:c1:5c:6f:54:50:87:cb:54:
13:ec:d4:f2:04:8d:0c:57:d9:46:8c:90:1a:0e:95:aa:09:90:
9d:ae:da:0b:4c:40:10:d5:aa:fa:0c:fb:0f:28:f9:c2:69:ae:
fc:83:9b:25:03:c8:50:87:2b:8b:a7:63:41:52:fb:ee:02:e4:
41:83:f6:16:11:fc:e5:a1:2d:52:d9:00:4b:82:89:6c:2b:38:
d4:7d:80:33:22:e5:ce:dd:7d:59:6f:b9:86:13:83:0b:f9:b8:
43:f1:cf:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:18:05 2024 by rpki-client on console-fra.rpki-client.org