Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/alRWLPSqHC2mujwlLcSsODsN6Ew.roa
File: alRWLPSqHC2mujwlLcSsODsN6Ew.roa (raw, json)
Hash identifier: T99SFYOCf+TI/RASPX7IQlZOna43Ybx1HfenuhnMWjk=
Subject key identifier: 6A:54:56:2C:F4:AA:1C:2D:A6:BA:3C:25:2D:C4:AC:38:3B:0D:E8:4C
Certificate issuer: /CN=4eaf14b67e051cfbd5e1b1d51693d44682392792
Certificate serial: 018EEDD8B46B08F8742DE5CFF78ABB1DC822
Authority key identifier: 4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/alRWLPSqHC2mujwlLcSsODsN6Ew.roa
Signing time: Wed 17 Apr 2024 20:56:25 +0000
ROA not before: Wed 17 Apr 2024 20:56:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212123
IP address blocks: 2001:67c:e70::/48 maxlen: 48
2001:67c:e74::/48 maxlen: 48
2001:67c:e78::/48 maxlen: 48
2001:67c:e7c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Jun 2024 02:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ed:d8:b4:6b:08:f8:74:2d:e5:cf:f7:8a:bb:1d:c8:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eaf14b67e051cfbd5e1b1d51693d44682392792
Validity
Not Before: Apr 17 20:56:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a54562cf4aa1c2da6ba3c252dc4ac383b0de84c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5c:ad:fe:1c:92:d4:36:cf:3c:df:59:3e:25:
e2:8f:15:6d:c3:8b:37:75:76:d3:17:6b:6c:62:b3:
33:98:d1:38:5a:2a:d8:92:12:1e:7e:5b:e2:fe:e4:
3b:51:b7:74:d2:c4:4e:fa:49:16:c2:76:7f:99:b6:
b1:a1:5d:f2:26:48:82:37:16:e0:31:aa:36:18:a8:
f0:7b:19:27:2a:a3:55:b1:67:22:3e:3c:c0:cc:82:
f5:8d:7f:11:dc:af:e7:23:52:8e:ed:b3:58:91:ba:
d9:8e:3c:5c:73:23:07:96:ac:51:5d:cf:92:83:c2:
b8:66:1b:ac:4f:b7:af:0b:4e:8d:5a:01:ca:96:cd:
a2:b5:df:f9:4a:f0:4f:63:90:23:02:e2:51:58:b2:
f4:3d:0e:b2:f5:a6:47:84:d1:20:c0:e4:1c:62:86:
4d:a7:a4:00:b1:22:8a:ed:38:66:d5:85:5c:37:de:
de:e6:45:f9:01:d1:51:b1:8f:b6:23:86:fb:ba:98:
c5:38:4a:1a:ec:c7:38:91:13:93:09:ec:b9:8d:69:
6a:af:c8:b5:6b:a3:90:0a:ce:2b:24:75:72:59:83:
bf:87:36:43:7a:62:b8:f1:92:11:0a:ba:a3:36:80:
eb:cc:cf:3f:04:c2:7f:e0:7b:28:57:ca:b5:36:14:
47:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:54:56:2C:F4:AA:1C:2D:A6:BA:3C:25:2D:C4:AC:38:3B:0D:E8:4C
X509v3 Authority Key Identifier:
keyid:4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/alRWLPSqHC2mujwlLcSsODsN6Ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:e70::/48
2001:67c:e74::/48
2001:67c:e78::/48
2001:67c:e7c::/48
Signature Algorithm: sha256WithRSAEncryption
6a:f3:25:97:79:d4:46:2f:ac:fc:d0:69:0f:2a:fb:f6:02:3f:
fe:e6:3d:d6:96:60:20:64:ad:32:d7:29:1b:de:1c:92:ac:81:
93:96:6a:e8:41:e0:b5:c7:09:1e:1b:e7:e0:0c:67:ea:71:1e:
bb:70:75:2a:95:c9:f5:85:02:31:33:d5:f3:f2:73:0e:63:45:
63:e2:87:88:78:36:4a:62:47:d7:39:ea:56:e8:cd:b4:5a:a6:
27:98:87:ff:58:74:73:da:c6:4e:5a:99:87:c9:b9:6e:02:8d:
cd:fb:19:0a:21:1f:5e:2c:09:d0:c5:d2:57:f4:95:c7:42:40:
92:6c:12:56:b6:92:02:b0:15:c7:95:d8:51:ca:d6:08:a2:64:
31:e4:0a:d5:d6:a1:6e:04:22:b5:c4:f3:73:50:0a:39:87:3f:
7e:2a:4f:7a:5f:22:9c:d5:4b:6b:d9:e9:d0:e3:b5:1e:d0:02:
0c:46:1f:55:83:ed:61:d3:5c:17:84:24:cc:27:fe:eb:3c:0a:
91:70:91:7e:d0:bc:c3:df:b9:c8:2f:c5:14:62:5f:3b:9d:97:
8f:dc:20:11:41:4e:c8:25:20:d9:a9:ef:3d:f6:71:29:21:af:
a1:24:b6:f2:88:f5:46:77:10:33:9d:9a:08:af:b8:9c:78:46:
65:b4:d0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 07:07:20 2024 by rpki-client on console-fra.rpki-client.org