Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/IIN_J40w4DbVyKxjVrm9POVu6qo.roa
File: IIN_J40w4DbVyKxjVrm9POVu6qo.roa (raw, json)
Hash identifier: jkF6TULap16g6TlLXFfmPybOvMx97ViSDW9Ge5lMyW0=
Subject key identifier: 20:83:7F:27:8D:30:E0:36:D5:C8:AC:63:56:B9:BD:3C:E5:6E:EA:AA
Certificate issuer: /CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b
Certificate serial: 018CC94D42D1498D5A774B01B76922D9E137
Authority key identifier: 2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/IIN_J40w4DbVyKxjVrm9POVu6qo.roa
Signing time: Tue 02 Jan 2024 08:32:12 +0000
ROA not before: Tue 02 Jan 2024 08:32:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211514
IP address blocks: 2001:678:f24::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 02:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:42:d1:49:8d:5a:77:4b:01:b7:69:22:d9:e1:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1d2457e0be54dc78fc1f6687db3e94b068ac9b
Validity
Not Before: Jan 2 08:32:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20837f278d30e036d5c8ac6356b9bd3ce56eeaaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b0:31:76:ba:c7:7b:de:cf:0c:79:21:fc:c0:
3b:ce:8c:3f:f7:8a:af:18:78:9e:fa:72:3f:05:ec:
41:fb:fe:90:e7:31:7a:81:e8:f4:de:4e:30:75:6c:
ee:a2:01:dc:5c:b3:64:c3:e4:df:1d:ec:98:ef:cd:
ad:21:0c:fe:77:9e:66:e6:54:73:51:98:70:29:e8:
d7:40:42:c0:3b:21:a5:d1:ce:52:94:7f:b4:9a:72:
b7:df:3d:db:24:4a:bd:fb:72:2f:7c:89:03:2a:ea:
96:0f:4d:89:18:8d:d1:2d:cd:7f:e5:89:c8:a0:b8:
6c:cc:0d:3f:62:f2:69:fe:f9:d4:1d:6f:3a:f9:25:
02:c5:e5:1d:7e:7e:96:22:47:a6:e9:07:50:83:c1:
5c:f4:63:b0:73:54:a9:f9:dc:19:d5:c7:b1:e8:90:
d1:2c:2e:c5:8b:00:e8:dd:32:e8:48:b1:7b:a6:58:
69:0e:c2:8f:fc:d0:1c:8b:63:c4:e5:6d:68:ec:01:
00:36:8e:9d:67:75:6c:2f:4d:a9:1d:4d:90:5d:8c:
d2:a9:88:f5:66:4a:fb:1a:db:72:41:e9:e6:b6:3a:
8c:7f:0d:3c:39:ac:19:24:90:b3:58:e4:05:b8:76:
4e:4e:26:09:6b:b6:02:fa:ba:38:f0:eb:f9:b8:39:
f5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:83:7F:27:8D:30:E0:36:D5:C8:AC:63:56:B9:BD:3C:E5:6E:EA:AA
X509v3 Authority Key Identifier:
keyid:2E:1D:24:57:E0:BE:54:DC:78:FC:1F:66:87:DB:3E:94:B0:68:AC:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lh0kV-C-VNx4_B9mh9s-lLBorJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/IIN_J40w4DbVyKxjVrm9POVu6qo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c78df3-fc47-4edb-a9a0-94fd9e2969af/1/Lh0kV-C-VNx4_B9mh9s-lLBorJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:f24::/48
Signature Algorithm: sha256WithRSAEncryption
89:8a:88:e1:64:31:10:08:b3:92:cf:a1:a4:cc:bf:18:a1:b5:
25:d0:a2:37:45:a7:96:b5:a9:cc:ab:45:c9:b1:85:4b:19:68:
d1:0e:be:7f:45:70:26:03:b7:1f:bb:14:70:50:17:6b:0d:28:
75:4c:ba:4d:93:3d:8d:cf:f2:87:39:f8:90:7d:ef:a0:6c:9f:
d4:ef:0a:8c:52:09:af:1c:5c:aa:9f:03:84:5e:12:0a:1c:d3:
bf:09:ad:97:ba:cf:bc:8d:25:3a:a0:f0:c6:d7:a4:a5:f7:20:
ea:b8:40:8d:ec:45:41:17:bd:eb:40:ff:17:04:92:82:8c:18:
b9:4a:11:33:e8:3b:8a:16:07:3c:a5:b7:a2:e5:e5:c5:72:9e:
49:d8:a7:cd:92:a0:45:69:a2:77:b2:18:91:89:0c:db:e2:1f:
40:06:62:5c:23:24:6f:cd:15:0c:12:d1:a1:86:25:f0:16:50:
7f:9d:be:5c:1e:c8:da:5c:75:eb:0c:9d:2d:48:37:39:35:d6:
c1:13:d2:11:fb:51:47:50:2b:e4:d9:10:5f:2c:42:64:bb:c4:
ee:f4:de:3e:3a:98:5d:19:8d:f1:9a:9e:d5:4f:61:fe:9d:50:
f5:ba:fe:9b:18:6d:6e:51:98:03:73:97:54:b7:c7:20:8c:fb:
67:13:31:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:39:19 2024 by rpki-client on console-ams.rpki-client.org