Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/GRX7aSDzGvRVcqg7jfH3TH4U7Dk.roa
File: GRX7aSDzGvRVcqg7jfH3TH4U7Dk.roa (raw, json)
Hash identifier: q9wYh51gB8PofG2fa0az//xwwk+ZfAWANlQdLPUPIkA=
Subject key identifier: 19:15:FB:69:20:F3:1A:F4:55:72:A8:3B:8D:F1:F7:4C:7E:14:EC:39
Certificate issuer: /CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Certificate serial: 018CC8DF0F15DA73DD5C2954A3AD91329718
Authority key identifier: 04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/GRX7aSDzGvRVcqg7jfH3TH4U7Dk.roa
Signing time: Tue 02 Jan 2024 06:31:50 +0000
ROA not before: Tue 02 Jan 2024 06:31:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43591
IP address blocks: 2001:67c:2028::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:0f:15:da:73:dd:5c:29:54:a3:ad:91:32:97:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Validity
Not Before: Jan 2 06:31:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1915fb6920f31af45572a83b8df1f74c7e14ec39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b3:04:36:cb:17:7d:cc:8b:8f:03:6d:cf:e0:
5b:84:fc:fb:91:ef:97:42:cd:24:ad:f9:8a:49:48:
54:01:61:c8:61:85:6e:be:39:60:6a:cb:4f:44:55:
11:8e:50:b0:90:2a:71:63:da:20:bc:5c:8b:57:0d:
51:d1:29:4f:0a:bb:63:94:ea:d5:5c:fe:57:68:b0:
35:b0:2a:30:8f:97:40:72:d3:48:c3:ab:e3:12:59:
45:98:87:39:41:2d:81:64:7a:08:92:77:f3:7c:82:
f3:58:b5:94:2f:2d:ff:d1:55:22:5c:32:98:03:e2:
84:5f:46:c9:84:6d:50:46:57:d3:bc:8e:35:b6:17:
b7:87:a3:4b:6b:dc:17:67:54:8c:4f:48:43:92:e9:
9e:d7:55:c8:21:6a:b1:b2:d1:c0:6a:d7:24:a5:dd:
a5:cb:25:b8:d4:c3:07:78:46:b5:8d:af:27:59:66:
b8:b9:8c:82:f3:60:77:cf:65:cc:90:07:b2:19:4e:
1e:c3:3d:90:46:61:56:d9:88:24:d8:7a:09:d9:73:
39:ef:cd:4c:a1:ca:5a:70:3f:4e:8c:50:d0:b5:8d:
fb:fa:7e:d7:7a:e5:07:7a:c3:47:64:33:f2:e5:78:
ab:e7:01:fd:80:50:60:8a:2f:42:a8:2a:1b:ba:ea:
77:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:15:FB:69:20:F3:1A:F4:55:72:A8:3B:8D:F1:F7:4C:7E:14:EC:39
X509v3 Authority Key Identifier:
keyid:04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/GRX7aSDzGvRVcqg7jfH3TH4U7Dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2028::/48
Signature Algorithm: sha256WithRSAEncryption
c3:b6:04:42:50:56:15:86:ac:4a:66:8e:be:d8:24:85:15:0d:
e1:b7:7c:b8:90:4d:e0:1c:50:f7:d9:35:10:6d:0f:6b:5c:63:
55:73:e2:e4:13:e8:87:88:a5:c0:c2:b8:33:6e:60:6d:c2:a0:
eb:ea:ba:8e:d0:1b:68:bb:01:48:17:76:5f:ba:af:2b:1d:95:
64:72:fd:58:5d:bc:ff:e8:ff:48:e8:92:af:8e:8e:a7:4c:6c:
14:26:0e:01:8a:9f:02:c1:51:c4:18:70:86:e3:db:da:a1:51:
7c:41:89:f1:a2:a1:47:53:d3:12:3a:02:09:09:be:ae:b4:c5:
ea:85:1a:8b:76:d8:b4:db:2e:70:39:e7:25:2d:e1:f3:4a:6a:
2d:c2:14:89:20:89:04:0e:0a:14:c7:8a:01:be:e9:04:f7:e3:
e6:04:35:10:1e:fc:db:6e:1a:de:e3:1e:38:73:f4:bb:95:17:
fc:48:50:7d:d5:5c:cb:f3:5e:98:3b:52:38:6a:94:d0:57:19:
90:14:b5:df:5c:e7:8b:ee:28:1f:ea:5b:e4:aa:5d:5c:2e:bf:
6e:7a:d0:11:eb:60:78:9a:6d:30:11:f6:61:05:52:06:2d:35:
5d:d3:99:3b:a1:54:75:a0:7f:56:ef:fd:fe:04:ae:9d:98:fb:
7c:e3:b9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 10:25:52 2024 by rpki-client on console-ams.rpki-client.org