Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/3e62d8-9e41-4f86-9313-615cb372e077/1/gRoTsPg2MQ_xEFwAF53uBHcHGNE.roa
File: gRoTsPg2MQ_xEFwAF53uBHcHGNE.roa (raw, json)
Hash identifier: 6YcfcdtHAU4QrG2BxIiPPSnZau4wQY2Sm7Yt4s5nrFg=
Subject key identifier: 81:1A:13:B0:F8:36:31:0F:F1:10:5C:00:17:9D:EE:04:77:07:18:D1
Certificate issuer: /CN=1d3b64d95f6131682b9905c440a785a60a8ac8b8
Certificate serial: 018CC94DC52B32D7319826F4FC7E3E7B99AB
Authority key identifier: 1D:3B:64:D9:5F:61:31:68:2B:99:05:C4:40:A7:85:A6:0A:8A:C8:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HTtk2V9hMWgrmQXEQKeFpgqKyLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/3e62d8-9e41-4f86-9313-615cb372e077/1/gRoTsPg2MQ_xEFwAF53uBHcHGNE.roa
Signing time: Tue 02 Jan 2024 08:32:46 +0000
ROA not before: Tue 02 Jan 2024 08:32:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216295
IP address blocks: 2001:67c:d28::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/3e62d8-9e41-4f86-9313-615cb372e077/1/HTtk2V9hMWgrmQXEQKeFpgqKyLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/3e62d8-9e41-4f86-9313-615cb372e077/1/HTtk2V9hMWgrmQXEQKeFpgqKyLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HTtk2V9hMWgrmQXEQKeFpgqKyLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:c5:2b:32:d7:31:98:26:f4:fc:7e:3e:7b:99:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d3b64d95f6131682b9905c440a785a60a8ac8b8
Validity
Not Before: Jan 2 08:32:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=811a13b0f836310ff1105c00179dee04770718d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d6:d6:de:45:4e:34:9b:c2:1c:95:94:47:31:
e7:61:07:ec:80:9e:75:19:04:a4:c6:10:ab:23:fd:
19:f1:02:81:61:bc:7e:7f:0b:75:75:6a:99:18:e3:
5a:57:b4:e6:5f:f8:70:80:1d:71:7f:94:47:26:da:
44:59:7e:67:a7:b7:1e:f7:61:9d:f1:12:a8:99:0c:
16:cc:8a:44:db:57:b3:3b:97:22:69:bd:da:5e:4d:
24:f3:52:12:ee:e7:9c:df:22:f0:6a:fd:8a:0d:54:
a2:54:73:b1:41:ff:82:9f:71:c5:f7:8f:83:4f:df:
4f:ed:ee:0e:16:b5:20:a3:7e:38:df:b6:e2:82:ef:
4d:d8:e1:79:31:d4:8b:63:5e:00:07:03:09:67:70:
8c:ae:28:0b:44:1e:89:4b:fa:ff:88:73:1b:b9:f8:
8d:a2:7a:01:b2:56:07:47:67:04:63:20:52:62:06:
44:b3:33:9d:86:8b:41:d6:b5:29:e0:a9:24:ed:9f:
43:0f:8b:25:a2:9e:6f:7d:58:50:59:36:47:93:e7:
dc:10:22:76:ac:91:fc:fc:6c:92:98:0b:ed:1a:b1:
cd:4d:b9:c7:f5:27:ad:ea:1c:42:b8:7d:0d:7c:d7:
f8:0b:18:49:00:17:00:88:a2:bd:45:b3:37:f5:7e:
d1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1A:13:B0:F8:36:31:0F:F1:10:5C:00:17:9D:EE:04:77:07:18:D1
X509v3 Authority Key Identifier:
keyid:1D:3B:64:D9:5F:61:31:68:2B:99:05:C4:40:A7:85:A6:0A:8A:C8:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTtk2V9hMWgrmQXEQKeFpgqKyLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3e62d8-9e41-4f86-9313-615cb372e077/1/gRoTsPg2MQ_xEFwAF53uBHcHGNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3e62d8-9e41-4f86-9313-615cb372e077/1/HTtk2V9hMWgrmQXEQKeFpgqKyLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:d28::/48
Signature Algorithm: sha256WithRSAEncryption
4c:cc:93:54:dc:b4:f3:bd:15:94:c4:25:db:6b:20:eb:f3:13:
2d:29:06:77:db:6d:0e:c1:f4:db:ca:94:76:91:db:10:44:10:
a7:31:04:cb:38:11:40:05:5c:b2:55:37:99:62:95:e4:d1:52:
f9:56:6f:f5:c3:80:c6:96:d7:eb:20:c8:9b:ba:be:90:cd:58:
a5:1d:af:a4:b7:be:c5:b9:2b:9d:31:be:98:ee:ef:2f:9e:80:
8f:86:d1:66:b4:e9:bb:5b:8d:b4:2c:df:0c:02:ed:30:07:ac:
74:bc:bd:c9:0f:58:1c:df:99:f7:f8:01:ed:74:a8:1b:78:52:
cc:b1:48:4d:bd:a7:39:8c:4b:ac:d8:5c:ec:a9:1c:72:d1:9c:
13:6a:b9:e8:2a:70:80:37:b6:47:ae:2e:d3:57:e7:f2:74:ce:
13:7b:82:fe:15:d3:7e:b7:e1:c3:59:3d:65:45:80:db:d2:1b:
6b:53:41:17:6e:08:8a:d7:e5:47:ed:d2:03:83:4f:4a:57:e4:
3c:44:89:9c:8c:1b:f3:95:86:bc:49:05:f0:ba:58:23:d6:72:
71:98:71:1f:62:db:b9:e0:12:14:88:40:09:76:c1:9d:bc:84:
3a:d9:e4:38:35:17:69:b5:c8:a3:d4:7e:63:c9:46:f6:50:77:
71:a2:16:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:15:35 2024 by rpki-client on console-ams.rpki-client.org