Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/6HKRlCVxNUZSYcRW26uKbvSIwb0.roa
File: 6HKRlCVxNUZSYcRW26uKbvSIwb0.roa (raw, json)
Hash identifier: pxZM0b8jMeBUYunbjN1cProRl6hoWtKANILWFPZ2Mho=
Subject key identifier: E8:72:91:94:25:71:35:46:52:61:C4:56:DB:AB:8A:6E:F4:88:C1:BD
Certificate issuer: /CN=f28c69da94c85edd48d9c1fd8e332ae3bee66004
Certificate serial: 018CC6B7A2AA1F413A87DD6D5B43D38A52C5
Authority key identifier: F2:8C:69:DA:94:C8:5E:DD:48:D9:C1:FD:8E:33:2A:E3:BE:E6:60:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/6HKRlCVxNUZSYcRW26uKbvSIwb0.roa
Signing time: Mon 01 Jan 2024 20:29:32 +0000
ROA not before: Mon 01 Jan 2024 20:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211523
IP address blocks: 2001:678:f28::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:a2:aa:1f:41:3a:87:dd:6d:5b:43:d3:8a:52:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28c69da94c85edd48d9c1fd8e332ae3bee66004
Validity
Not Before: Jan 1 20:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8729194257135465261c456dbab8a6ef488c1bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a5:dc:7f:bd:59:19:a1:40:8d:7b:22:f7:7e:
2c:4d:62:52:79:0c:8d:42:2b:9d:9b:1a:46:9a:a6:
f8:e3:98:84:17:95:35:d7:f4:23:91:ce:25:fc:e1:
13:45:33:e9:fb:c0:36:de:27:42:6d:65:cb:37:d6:
cb:0c:b9:82:eb:8b:88:c2:15:ae:a6:b2:04:a1:17:
5e:d6:43:92:2a:06:6f:36:b5:42:5c:8a:a9:2c:60:
1e:b6:25:c1:e0:0c:3c:cf:b7:2e:71:5b:e1:88:24:
2f:28:cc:4b:2b:a9:01:f3:d0:6e:45:ab:af:7b:62:
52:4b:9e:c9:b4:0f:7d:46:7f:f9:36:92:16:83:39:
ed:e4:9e:6a:61:31:14:f0:6c:30:5f:04:e7:f1:ee:
92:25:07:6e:6a:9b:88:b0:ff:9a:6d:b9:7f:22:9f:
b5:1a:87:26:73:21:61:e5:29:b3:ee:35:97:c6:d3:
3e:14:04:a6:c3:f5:a2:8d:9f:03:f9:a2:7b:0d:6a:
3d:76:16:66:94:12:5b:c3:78:b0:31:dc:58:04:7e:
9a:07:39:5e:69:17:e8:28:52:21:ca:bd:82:b3:d9:
97:53:d5:d9:b5:7d:4a:51:39:2e:05:e8:7d:ce:5b:
12:c9:27:28:46:ac:ac:ee:f1:7a:ae:15:64:83:8d:
35:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:72:91:94:25:71:35:46:52:61:C4:56:DB:AB:8A:6E:F4:88:C1:BD
X509v3 Authority Key Identifier:
keyid:F2:8C:69:DA:94:C8:5E:DD:48:D9:C1:FD:8E:33:2A:E3:BE:E6:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/6HKRlCVxNUZSYcRW26uKbvSIwb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:f28::/48
Signature Algorithm: sha256WithRSAEncryption
94:f5:e1:41:fb:cc:29:d9:0d:bc:d8:5e:bd:1f:74:62:a1:ca:
a4:4b:5a:32:91:e4:83:c4:b5:e4:21:d5:66:3c:c9:80:b6:05:
b9:be:50:0b:a5:2f:52:da:35:9f:fd:a4:ae:eb:fd:e5:7b:09:
23:0b:c4:04:91:8c:b2:63:9f:c9:d2:70:c7:99:60:f5:dc:78:
d8:8a:8c:f3:18:51:70:ee:22:43:de:8b:ca:ba:e2:88:79:0c:
7d:b6:b5:04:d3:38:ad:ac:c5:98:2d:da:f3:05:44:0b:d5:57:
35:f9:e5:c0:cd:80:51:75:68:b1:8e:4d:df:15:60:2d:fd:9a:
70:58:37:13:bd:70:60:0d:19:b1:42:2e:31:0e:b7:b5:6e:3b:
11:02:90:9f:62:84:5d:3b:02:3a:41:f8:da:33:9f:fe:59:fd:
99:eb:1f:58:c4:6f:db:0e:64:26:b0:21:05:e7:b3:d0:65:a3:
c1:b3:b9:9b:12:17:38:ba:f5:2e:b5:63:e6:2c:66:69:34:20:
a8:22:7c:a7:60:80:2c:2c:d6:de:3c:44:8a:20:d8:52:af:4e:
b8:50:e3:7b:eb:da:f0:3c:c3:d8:e8:3b:1f:d0:a0:6e:98:e0:
00:e3:8c:52:81:97:b5:90:64:42:a7:58:c8:d1:50:e7:a4:bc:
55:c9:a7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 23:02:11 2024 by rpki-client on console-ams.rpki-client.org