Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/r5iSlzg9mqwrEiYBgOCgmR19kKs.roa
File: r5iSlzg9mqwrEiYBgOCgmR19kKs.roa (raw, json)
Hash identifier: TS7xvVOhqbmuCbAH0l28A4+8mfBjhQ2ul9NE/brRK3Y=
Subject key identifier: AF:98:92:97:38:3D:9A:AC:2B:12:26:01:80:E0:A0:99:1D:7D:90:AB
Certificate issuer: /CN=4eaf14b67e051cfbd5e1b1d51693d44682392792
Certificate serial: 018F53C2473839EEA141008C95D49AF38EBE
Authority key identifier: 4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/r5iSlzg9mqwrEiYBgOCgmR19kKs.roa
Signing time: Tue 07 May 2024 15:53:12 +0000
ROA not before: Tue 07 May 2024 15:53:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209718
IP address blocks: 2001:678:c44::/48 maxlen: 48
2001:678:c6c::/48 maxlen: 48
2001:67c:2908::/48 maxlen: 48
2001:67c:2ea8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jul 2024 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:53:c2:47:38:39:ee:a1:41:00:8c:95:d4:9a:f3:8e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eaf14b67e051cfbd5e1b1d51693d44682392792
Validity
Not Before: May 7 15:53:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af989297383d9aac2b12260180e0a0991d7d90ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8a:e6:ea:f2:75:22:7f:ae:fa:98:51:e4:70:
f0:89:26:f0:e7:cc:5d:3d:b5:da:6b:84:db:5d:f7:
43:5f:01:84:46:01:dd:b4:da:c8:b8:ab:81:97:f7:
f7:c8:ce:98:46:7b:6e:c3:1c:c8:48:37:d5:f2:b7:
b7:be:3a:e1:35:29:b8:b3:b2:57:e9:58:59:4a:7e:
af:18:b8:9b:75:40:fe:50:bd:55:a3:ae:41:c9:07:
6b:6b:6a:fe:24:e5:2b:2e:2f:f1:dc:2c:e6:c2:db:
12:46:cf:76:7f:0a:9b:d5:a6:1f:1a:65:f3:c5:c6:
99:57:01:6a:8c:3f:0a:ac:34:b2:98:b3:75:89:ec:
93:14:75:29:76:cb:71:2c:53:0e:16:04:b0:f4:7f:
bd:8c:f2:0f:c8:4b:ef:71:8c:19:22:ea:84:0a:46:
3b:20:3a:4a:75:af:d5:ef:43:1c:1c:0c:74:7a:05:
ef:03:a9:15:09:24:6f:5b:49:24:99:4a:d4:0c:7a:
60:bb:3a:21:5d:6c:2c:6b:59:b3:20:ad:80:33:df:
48:33:15:55:16:0f:03:bb:c3:44:f4:63:d9:be:64:
fb:f0:e4:44:96:f5:16:86:68:fd:80:6f:b8:0f:5c:
b7:de:58:ef:ed:48:cf:4f:c5:1d:a1:5b:d3:bc:77:
70:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:98:92:97:38:3D:9A:AC:2B:12:26:01:80:E0:A0:99:1D:7D:90:AB
X509v3 Authority Key Identifier:
keyid:4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/r5iSlzg9mqwrEiYBgOCgmR19kKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:c44::/48
2001:678:c6c::/48
2001:67c:2908::/48
2001:67c:2ea8::/48
Signature Algorithm: sha256WithRSAEncryption
50:11:07:98:5e:53:54:f1:a0:f1:89:b3:c5:e0:08:13:bb:16:
a6:43:3f:8f:20:54:4e:7c:88:f9:bb:b8:ba:b0:c5:04:f1:bb:
f4:0f:8d:42:ce:56:7f:e4:f7:ed:e6:1a:c8:31:b1:08:23:82:
ae:61:63:c7:05:e4:5b:e1:af:87:c9:d4:67:b1:6c:a0:03:5e:
47:00:f1:b7:f1:bb:91:21:b2:b0:0e:03:a9:ea:3a:46:c4:ae:
4f:06:9d:ea:4e:72:65:74:58:7c:92:ed:97:55:1a:5f:3d:de:
f1:33:ae:56:46:37:a4:fb:9c:7f:e2:9f:75:fa:ef:9f:4d:07:
b5:0e:9e:67:ec:f1:52:b6:0e:00:c3:10:ce:85:30:6d:1f:c1:
31:c0:e3:4f:51:d4:e8:da:94:52:17:77:59:b2:5c:fd:57:8c:
d1:bb:e0:13:f8:ef:a9:c4:61:bf:8c:c1:d7:40:89:b6:e0:7f:
b9:b5:f5:8c:ef:20:0d:2b:cd:ab:d4:bc:ef:01:ad:83:e9:6b:
00:04:54:60:02:7e:22:65:98:df:8d:e3:07:ac:0e:96:3b:83:
a3:13:ec:70:e7:6f:39:c7:c4:44:2b:02:8e:33:c1:4b:26:0a:
22:63:3e:bf:67:de:d0:53:bb:00:17:be:af:aa:e9:28:05:92:
c8:ce:cf:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 09:34:56 2024 by rpki-client on console-fra.rpki-client.org