Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/IZVtY6tB0e7V1-ELC4rvwjAUgCc.roa
File: IZVtY6tB0e7V1-ELC4rvwjAUgCc.roa (raw, json)
Hash identifier: HxmDxlGCmZprkf9K8Q2xGHCS1GJfOjeJyNTf2yxzx4Q=
Subject key identifier: 21:95:6D:63:AB:41:D1:EE:D5:D7:E1:0B:0B:8A:EF:C2:30:14:80:27
Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial: 018CC727100CD4372DE6669F065CB5C7C45C
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/IZVtY6tB0e7V1-ELC4rvwjAUgCc.roa
Signing time: Mon 01 Jan 2024 22:31:15 +0000
ROA not before: Mon 01 Jan 2024 22:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60767
IP address blocks: 2a0d:2d46:18::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:10:0c:d4:37:2d:e6:66:9f:06:5c:b5:c7:c4:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Validity
Not Before: Jan 1 22:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21956d63ab41d1eed5d7e10b0b8aefc230148027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a3:59:02:2b:e0:7c:c2:42:79:8c:b2:57:99:
b8:28:91:b8:cb:7f:dd:ed:ce:c6:6f:dd:5e:0f:47:
04:22:30:d5:8b:d9:b8:b1:43:7e:03:84:79:c4:cc:
b5:61:69:da:20:5f:02:08:34:e9:70:a4:07:74:83:
c8:94:23:90:c1:88:91:1e:4b:d0:21:28:45:75:2e:
e0:81:db:2e:b3:7b:48:9d:e4:c3:be:19:7e:b0:6d:
98:98:ea:2e:74:d4:cd:70:12:2b:48:6b:29:65:e3:
34:a0:cb:f3:48:a5:99:9c:9e:01:50:6d:b3:83:81:
bf:77:8f:0f:50:5b:fa:34:02:33:c9:4f:70:fd:b6:
fc:11:12:b1:ff:ab:7b:75:f7:31:d9:13:a2:3b:90:
3a:9f:50:70:3f:7e:c7:f9:49:dd:1c:fb:ce:bf:3b:
d1:1e:6a:eb:e9:a4:15:5d:22:d2:2d:e9:26:f1:75:
91:02:3d:cb:54:81:c8:be:cb:d1:69:ee:99:9e:44:
d8:f1:98:7d:3a:6b:c3:bb:00:00:75:a5:1e:03:55:
01:ba:87:34:fa:36:9c:c8:9c:32:1d:ec:4b:bf:c4:
ba:75:68:a9:f4:de:d4:b1:0d:e2:90:2e:85:d4:ec:
9a:32:2e:d1:f5:ca:6e:2a:5c:da:7c:7f:9e:c6:c7:
e0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:95:6D:63:AB:41:D1:EE:D5:D7:E1:0B:0B:8A:EF:C2:30:14:80:27
X509v3 Authority Key Identifier:
keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/IZVtY6tB0e7V1-ELC4rvwjAUgCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2d46:18::/48
Signature Algorithm: sha256WithRSAEncryption
25:96:4e:2a:2e:7f:38:f0:90:11:eb:53:03:82:43:90:28:0d:
37:7b:62:c8:53:a9:c0:7d:47:30:9a:9f:36:40:d2:f6:8f:cd:
21:45:8f:fc:e7:96:74:0b:3d:54:e0:81:07:ff:de:fe:8a:76:
9c:7c:a8:c9:e1:00:63:1a:95:1b:bc:8e:d2:4e:e2:b5:a9:04:
b6:7b:17:28:a5:db:94:48:02:74:ee:43:72:26:8a:57:e0:6d:
4e:a7:53:d7:17:53:61:f3:2f:0e:1d:e3:d6:84:40:4b:f0:4a:
f7:b6:28:1d:2e:5f:cc:97:8e:8b:47:a3:8c:30:7f:f8:a5:7d:
fc:75:79:e3:4d:1d:1f:35:07:21:b4:76:cf:d7:6d:f2:ce:4d:
58:24:63:a2:e3:0f:ba:36:ad:40:29:31:87:6d:e5:77:28:cb:
b1:bc:b8:62:2e:90:17:4c:fa:d5:1e:a6:ea:c9:b2:dd:3c:99:
46:d5:d0:d1:0d:b5:e0:a2:d9:8c:74:5a:4b:e9:47:53:ae:5f:
4e:40:2d:62:d0:9f:a4:e2:82:ec:1f:b8:b4:8a:aa:f6:5c:2b:
0c:33:91:c2:28:89:bf:c7:73:37:3b:6e:53:8d:76:d7:96:ff:
05:cc:b4:2a:20:b2:75:ac:85:7e:06:3d:d9:bc:d9:23:de:0a:
2e:16:32:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:32:57 2024 by rpki-client on console-ams.rpki-client.org