Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/JbduymGuzfpQ8su1wieEj1kgaRY.roa
File: JbduymGuzfpQ8su1wieEj1kgaRY.roa (raw, json)
Hash identifier: Gjq8BfXRq1FUu6XpFTbVjJywe7H2G06zB/NqNEAypvw=
Subject key identifier: 25:B7:6E:CA:61:AE:CD:FA:50:F2:CB:B5:C2:27:84:8F:59:20:69:16
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018CC4257046CD669A75CFFEB805D41547DB
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/JbduymGuzfpQ8su1wieEj1kgaRY.roa
Signing time: Mon 01 Jan 2024 08:30:37 +0000
ROA not before: Mon 01 Jan 2024 08:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211248
IP address blocks: 2a0b:b87:ffb4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:70:46:cd:66:9a:75:cf:fe:b8:05:d4:15:47:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 08:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25b76eca61aecdfa50f2cbb5c227848f59206916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c3:30:ca:af:59:12:b2:c8:d3:e3:69:ec:d5:
a2:4c:0d:6f:23:c8:5e:23:84:1c:d1:4e:45:2a:52:
10:da:56:ba:3f:fa:5f:69:ec:21:e4:80:ba:f5:00:
df:e3:35:ff:8b:51:4c:0b:7b:c5:08:e0:b3:01:cc:
95:a8:a9:af:17:54:f0:80:e6:43:dd:ef:f0:69:05:
ef:76:1e:f0:07:19:88:da:27:67:e6:7a:b6:d8:88:
f6:2e:a5:ca:f4:50:11:1b:cb:2b:91:29:6f:85:a1:
37:a2:c8:d3:5d:07:06:8b:ad:36:dd:bb:5e:26:9e:
39:bb:5c:f1:9b:ac:61:cb:fa:bc:7e:e8:9a:91:fe:
f5:65:b6:5c:61:96:a1:c9:a8:72:c0:8a:3f:05:82:
e2:5a:94:bd:26:58:b0:b2:af:96:42:f8:90:b2:55:
a9:3d:13:5c:72:00:9b:d2:c4:11:65:6d:9d:31:90:
12:57:ee:32:43:88:f7:cb:46:2a:34:2e:15:57:8c:
30:17:8d:9d:ee:84:75:00:ac:68:28:15:2e:7d:0a:
d1:95:9d:af:a2:38:10:5b:37:12:44:f9:24:32:ae:
83:10:71:f2:15:37:e8:9e:57:06:8f:9a:90:a0:86:
71:96:e2:34:0f:ec:8d:e6:56:c9:52:be:e6:ce:f0:
e3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B7:6E:CA:61:AE:CD:FA:50:F2:CB:B5:C2:27:84:8F:59:20:69:16
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/JbduymGuzfpQ8su1wieEj1kgaRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b87:ffb4::/48
Signature Algorithm: sha256WithRSAEncryption
7a:b7:3e:70:3b:50:7d:4b:09:8d:3d:ac:79:98:44:79:70:42:
83:d5:16:2a:27:3f:a4:fa:7d:1c:c1:41:a4:87:31:6a:77:be:
e3:4b:be:0d:f8:47:66:cc:6d:7b:f5:e1:83:6f:68:46:59:a1:
bf:ae:c0:62:61:41:f1:47:25:17:0a:bc:32:bf:9f:20:e8:a5:
68:0c:73:ba:97:83:a2:05:32:db:f6:72:1e:f2:ac:9d:45:72:
bc:65:3a:cf:72:25:37:c4:9e:af:52:a7:42:5f:cb:36:af:83:
c7:cc:89:99:12:c8:35:33:22:31:24:57:8a:55:51:e6:1f:60:
d8:46:1f:81:f7:db:63:e2:48:19:0e:1d:8b:2c:72:1b:ec:4d:
65:90:32:18:43:1d:26:f3:14:c0:00:da:a6:a7:36:b2:2e:c9:
51:ca:57:2b:c7:08:ea:60:be:10:e9:28:4f:c1:3e:c4:a1:54:
48:4f:47:ae:2f:dd:5e:81:d9:10:02:28:dd:a1:7e:1b:bb:23:
dc:87:3c:a7:f6:74:df:f6:fb:33:de:b5:fa:c6:ec:c4:63:3e:
48:a7:6e:7f:d3:0b:ba:07:5c:6c:86:15:26:13:31:20:7d:fa:
29:ee:ef:fd:0a:9e:e3:a4:85:6b:f9:a0:ec:0c:20:3d:72:37:
c6:03:2c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:13:52 2024 by rpki-client on console-ams.rpki-client.org