Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/vu7gnVOtDzqt0PrdCNgY-9JqoqE.roa
File: vu7gnVOtDzqt0PrdCNgY-9JqoqE.roa (raw, json)
Hash identifier: FUz/4h/Ris/QldTOuqdypYkQckoce3gMhmsV1q8ON3Y=
Subject key identifier: BE:EE:E0:9D:53:AD:0F:3A:AD:D0:FA:DD:08:D8:18:FB:D2:6A:A2:A1
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018CC4256453CFFCCFDEE236D39F9E0FC3A9
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/vu7gnVOtDzqt0PrdCNgY-9JqoqE.roa
Signing time: Mon 01 Jan 2024 08:30:34 +0000
ROA not before: Mon 01 Jan 2024 08:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198231
IP address blocks: 2a0d:77c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:64:53:cf:fc:cf:de:e2:36:d3:9f:9e:0f:c3:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 08:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=beeee09d53ad0f3aadd0fadd08d818fbd26aa2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bd:aa:86:9d:fe:e3:52:37:70:f0:4b:f4:32:
5c:b9:39:46:7a:86:b4:70:a2:36:96:7d:5d:d0:fe:
41:9e:55:3b:f5:67:8e:1e:03:bb:90:7e:ef:aa:76:
2f:c2:cf:5b:49:1a:77:cb:ec:61:a2:f1:c4:3e:72:
ee:f1:c8:d3:72:dd:68:6e:a6:64:19:43:cf:02:8c:
c9:e3:5d:69:ec:ec:77:12:22:f1:bc:93:c7:ae:16:
74:26:3c:74:e8:94:41:27:0d:c6:e5:fa:07:a0:b8:
83:79:b4:ca:e2:09:62:52:33:d3:54:27:53:2a:2a:
8a:ad:5e:7e:56:c8:01:88:f1:db:6c:65:ef:45:4a:
0d:e5:59:9e:6b:1f:8b:1e:9a:2c:03:b4:03:6c:f4:
df:5a:dc:18:14:01:ac:e5:c5:8c:52:2d:99:27:7b:
70:7e:17:c3:c9:b9:f0:f7:4b:a3:86:1b:5e:5d:05:
9c:59:75:65:97:65:7d:9f:d1:5f:79:eb:ef:32:bc:
ef:a6:b0:3b:e0:23:92:0c:10:b5:36:84:46:e2:aa:
7d:b9:ff:82:23:f5:42:ad:44:81:8f:db:89:8c:53:
9e:af:ab:a7:21:8d:78:63:a8:66:fa:4d:0e:93:12:
33:13:8f:ff:55:8a:10:ea:94:32:03:78:19:11:f8:
f2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EE:E0:9D:53:AD:0F:3A:AD:D0:FA:DD:08:D8:18:FB:D2:6A:A2:A1
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/vu7gnVOtDzqt0PrdCNgY-9JqoqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:77c0::/29
Signature Algorithm: sha256WithRSAEncryption
91:79:1b:7f:23:a0:d4:d3:db:5d:88:39:b3:d8:7c:3a:5d:96:
44:40:bc:c7:45:11:52:9b:56:50:8c:bc:24:b8:52:87:75:f3:
fb:08:79:43:6b:1e:60:0f:ff:c5:ad:14:8f:05:87:f9:de:4d:
8a:bd:cd:51:d0:08:a2:6d:9f:36:6b:f9:57:dd:47:8d:f6:75:
c6:81:9a:6d:0e:36:96:2c:07:6a:43:21:46:ae:a2:7c:3f:19:
82:2e:2f:51:1e:fd:e3:90:c7:df:7a:da:ff:2c:33:6b:cb:ee:
5e:ea:f8:c4:6c:65:e4:a0:7a:18:51:c5:74:64:8b:ef:55:ad:
3d:d2:4b:ac:c6:10:1e:77:65:69:14:8d:02:d8:f6:c7:fc:d1:
ff:df:59:bb:39:b9:9e:40:b8:e1:ba:26:3b:33:e1:c2:fa:c2:
f1:9f:27:72:22:4b:af:a5:6c:08:3d:d0:ec:fd:c0:b9:41:56:
ab:96:61:5b:a9:7d:e9:33:47:a2:bf:27:f3:fd:10:03:01:d1:
6a:66:a9:f7:10:2a:c6:38:66:bd:ce:1c:36:67:79:f9:16:69:
78:3c:00:35:de:ec:33:a9:ec:a9:87:88:60:95:a3:43:51:a3:
fb:49:ba:41:b7:77:0a:31:80:54:d7:47:e4:82:c5:02:cb:d9:
5a:5f:94:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 19:33:29 2024 by rpki-client on console-ams.rpki-client.org