Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/IIP2V3nwlxk2cYt0y3T8AJVT3ec.roa
File: IIP2V3nwlxk2cYt0y3T8AJVT3ec.roa (raw, json)
Hash identifier: fS9HRIpx83pacmSdg6yvDCEtpJ5F4QKZDDhnlVfX/Ac=
Subject key identifier: 20:83:F6:57:79:F0:97:19:36:71:8B:74:CB:74:FC:00:95:53:DD:E7
Certificate issuer: /CN=435c3f1a97903e796292a2ac7a78d41b1c21db85
Certificate serial: 018CC3B68ACC747F5C8A45D5DAA61DFCF278
Authority key identifier: 43:5C:3F:1A:97:90:3E:79:62:92:A2:AC:7A:78:D4:1B:1C:21:DB:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1w_GpeQPnlikqKsenjUGxwh24U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/IIP2V3nwlxk2cYt0y3T8AJVT3ec.roa
Signing time: Mon 01 Jan 2024 06:29:29 +0000
ROA not before: Mon 01 Jan 2024 06:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62256
IP address blocks: 2001:67c:920::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1w_GpeQPnlikqKsenjUGxwh24U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:8a:cc:74:7f:5c:8a:45:d5:da:a6:1d:fc:f2:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435c3f1a97903e796292a2ac7a78d41b1c21db85
Validity
Not Before: Jan 1 06:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2083f65779f0971936718b74cb74fc009553dde7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0b:0a:df:c6:33:7a:56:49:b6:57:59:f7:84:
11:53:e5:9d:a6:f1:71:a1:0a:7b:c9:a6:e6:7f:e3:
c9:91:9a:31:28:85:e2:7d:68:b8:fa:1f:c5:17:8b:
0a:9b:1d:1d:83:44:26:5c:91:ae:f4:6e:f7:82:c1:
4b:b8:29:0d:d5:70:dc:45:95:42:1f:a9:89:d0:69:
eb:ed:9f:bf:ae:ef:49:4f:0b:7f:e8:eb:98:10:94:
b0:83:2f:51:84:98:4c:d6:2c:9d:4a:7b:99:86:9f:
be:01:0d:b0:20:18:47:66:1b:78:c4:5d:a5:f5:b6:
8a:bf:c5:c3:16:5d:51:e0:df:d8:9a:f7:40:db:0c:
04:8c:2c:2e:c3:17:3a:45:7f:16:f1:d2:fb:fa:de:
eb:50:1c:8c:a0:e5:ca:30:59:d9:27:54:a5:04:9e:
01:22:1e:da:17:23:28:23:88:08:a2:23:29:b3:14:
db:98:55:af:2b:e5:a5:f6:be:d7:d3:cf:72:10:44:
f0:03:0d:45:28:70:3e:54:db:78:f1:0e:04:64:03:
9b:99:77:d9:89:f4:3e:f4:af:68:af:e6:20:65:80:
b7:30:83:0a:db:a3:d7:5c:e9:94:31:fa:f0:b4:33:
3a:06:a1:64:02:a2:d1:36:07:19:85:15:18:83:58:
da:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:83:F6:57:79:F0:97:19:36:71:8B:74:CB:74:FC:00:95:53:DD:E7
X509v3 Authority Key Identifier:
keyid:43:5C:3F:1A:97:90:3E:79:62:92:A2:AC:7A:78:D4:1B:1C:21:DB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1w_GpeQPnlikqKsenjUGxwh24U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/IIP2V3nwlxk2cYt0y3T8AJVT3ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:920::/48
Signature Algorithm: sha256WithRSAEncryption
3f:37:da:0f:79:37:f1:d5:16:ac:31:10:64:cd:c8:38:71:a5:
d2:f9:56:fe:f8:28:57:7b:12:46:2b:82:04:ac:69:03:e2:b9:
57:f1:27:3f:79:4b:2f:d8:38:d2:e8:3a:90:51:80:e0:dd:65:
72:32:18:42:fd:26:e1:22:78:87:92:8e:07:1b:9e:2d:a4:10:
3b:85:1d:96:7f:3b:10:eb:96:40:11:d9:7c:62:bc:e2:08:d0:
b8:34:57:a3:c1:e1:e1:3e:94:c1:3d:f7:fc:aa:9b:8e:90:50:
18:23:94:66:21:fd:6b:ba:ef:23:47:ef:bd:35:d9:7e:bb:77:
17:e9:be:87:a4:e4:02:03:eb:24:8d:7a:b8:0c:21:25:04:93:
ab:d0:86:a2:43:f7:d1:1d:a1:5d:36:f6:fd:df:ab:56:7d:60:
d3:dd:52:ca:04:7e:ec:52:6d:6a:a8:95:4e:b9:20:b0:73:9f:
2d:70:be:ae:8b:03:e1:f1:d0:d2:51:ae:5f:25:9f:86:54:55:
6c:0d:25:76:e5:b1:6f:26:7f:33:56:f8:22:3a:9e:fb:95:ab:
95:48:06:1f:a6:cd:d8:d1:ce:53:15:29:da:cc:11:37:d4:f0:
a5:77:35:51:13:ce:06:75:fe:98:27:e4:49:d5:51:70:69:0f:
d1:c4:eb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:54:05 2024 by rpki-client on console-fra.rpki-client.org