Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/d96WQOtqZkSN1Gwmir9FCwW8-ZI.roa
File: d96WQOtqZkSN1Gwmir9FCwW8-ZI.roa (raw, json)
Hash identifier: 89RyxClnjB0dNoVX+1W2pg++iXn/Wp93F/0wJQM1fv8=
Subject key identifier: 77:DE:96:40:EB:6A:66:44:8D:D4:6C:26:8A:BF:45:0B:05:BC:F9:92
Certificate issuer: /CN=f9b16868f322ab679aec733702bf068e9637fc4f
Certificate serial: 018CD9A4D7CA79B3DD3B70E034046B8EF500
Authority key identifier: F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/d96WQOtqZkSN1Gwmir9FCwW8-ZI.roa
Signing time: Fri 05 Jan 2024 12:41:48 +0000
ROA not before: Fri 05 Jan 2024 12:41:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208772
IP address blocks: 2001:67c:d78::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d9:a4:d7:ca:79:b3:dd:3b:70:e0:34:04:6b:8e:f5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9b16868f322ab679aec733702bf068e9637fc4f
Validity
Not Before: Jan 5 12:41:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77de9640eb6a66448dd46c268abf450b05bcf992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6d:1f:db:3f:79:bb:27:eb:b1:9b:d1:09:70:
3c:e6:9a:fc:48:ef:1e:40:7c:60:67:5d:e0:9a:fb:
f1:02:4b:35:72:f0:da:e8:04:52:fd:c7:80:31:ff:
c7:41:b8:77:40:dc:12:e5:f4:c8:74:0a:db:54:0a:
dc:ea:92:4e:b8:65:ff:47:b3:51:74:e4:e0:34:8d:
74:19:51:97:ef:bb:ff:d4:d4:8a:2b:3a:c9:2b:c3:
5e:67:d9:71:86:cc:71:3a:73:7c:f2:51:01:9e:65:
56:c0:3e:5f:9d:46:5a:19:8b:53:d9:ea:0d:4a:65:
95:58:e0:52:6e:8d:9f:46:44:f0:51:d9:c3:d6:02:
c8:f3:e0:68:b3:3c:2a:b0:1f:71:a9:37:1d:c7:ef:
53:3e:f5:ff:ad:bd:15:fd:fc:de:44:26:7e:36:a5:
77:f2:7c:46:56:00:83:21:f6:15:91:fd:e2:bf:b5:
eb:c3:dc:fe:3e:2c:f0:6b:b5:49:fe:66:07:a4:56:
21:18:95:6b:d2:b4:f1:26:d8:47:d3:6c:47:4b:cd:
15:93:57:3b:7b:d3:09:88:77:4e:db:5f:a1:28:c8:
b8:41:26:16:5d:71:5e:da:5d:85:58:8f:3a:bb:ec:
1a:64:33:87:8d:0a:7f:c7:99:77:b7:0c:92:3a:b5:
07:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:DE:96:40:EB:6A:66:44:8D:D4:6C:26:8A:BF:45:0B:05:BC:F9:92
X509v3 Authority Key Identifier:
keyid:F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/d96WQOtqZkSN1Gwmir9FCwW8-ZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:d78::/48
Signature Algorithm: sha256WithRSAEncryption
4f:f9:4c:b9:6a:57:0f:75:a4:b5:f7:43:64:ca:7e:63:f7:50:
2f:fe:39:77:d1:f7:aa:cb:af:18:b3:8b:5d:17:89:f7:33:bc:
29:15:de:54:d1:05:d1:d3:8e:ee:2e:5b:13:c9:8c:51:b3:75:
1f:35:f0:89:13:d2:f1:b9:2e:fa:23:8c:cb:03:ac:ed:0d:25:
22:a1:dc:6c:13:97:2c:30:59:43:7e:49:7b:00:14:79:19:df:
6e:70:35:50:04:cb:0b:43:c1:c2:ea:80:84:c7:a0:9d:42:50:
19:43:45:2c:d6:4d:70:3c:66:63:1a:8b:b2:40:a5:56:e1:22:
7d:1f:5a:ba:4d:31:8c:f6:69:53:ad:2b:fe:a5:d3:fe:24:3a:
6f:53:e9:20:f8:2d:bd:04:e0:34:e5:3b:58:f0:bd:fb:16:71:
56:f0:73:b8:90:58:61:fc:e8:6f:14:c9:80:85:bc:a3:b8:ac:
71:77:0e:0d:78:22:a2:2b:12:a6:2d:6a:5c:86:3f:69:a8:29:
10:bb:2b:ad:28:47:dd:0f:f9:9b:4c:75:0b:ea:22:ac:68:82:
fc:11:96:a8:b8:13:b1:c3:4c:dc:36:d5:c4:d0:e1:e3:75:00:
97:42:46:9b:6a:fe:c3:13:39:40:fe:6b:3c:5c:00:af:e7:cc:
62:eb:93:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:00:05 2024 by rpki-client on console-fra.rpki-client.org