Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/msfDoyW_bFSjrdHuJq8L6CW3NvI.roa
File: msfDoyW_bFSjrdHuJq8L6CW3NvI.roa (raw, json)
Hash identifier: FLjXQb4VMp2DuIrc3fJX/hw1X3nyiyqsVxdLz2+UeyM=
Subject key identifier: 9A:C7:C3:A3:25:BF:6C:54:A3:AD:D1:EE:26:AF:0B:E8:25:B7:36:F2
Certificate issuer: /CN=e8d672fa60aee4c273a11507f49b584dc552c472
Certificate serial: 018E1811F8D0BBF7F6E35F1EE1CEABB927C6
Authority key identifier: E8:D6:72:FA:60:AE:E4:C2:73:A1:15:07:F4:9B:58:4D:C5:52:C4:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/msfDoyW_bFSjrdHuJq8L6CW3NvI.roa
Signing time: Thu 07 Mar 2024 08:40:14 +0000
ROA not before: Thu 07 Mar 2024 08:40:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35236
IP address blocks: 2001:67c:e2c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:18:11:f8:d0:bb:f7:f6:e3:5f:1e:e1:ce:ab:b9:27:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8d672fa60aee4c273a11507f49b584dc552c472
Validity
Not Before: Mar 7 08:40:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ac7c3a325bf6c54a3add1ee26af0be825b736f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a1:d7:3e:79:9c:7d:40:91:e9:22:19:00:0a:
16:59:2b:83:db:74:e1:0a:e5:c3:39:18:d0:23:2d:
64:9a:54:0f:d4:63:75:46:6d:61:55:75:4c:da:c2:
94:dd:27:51:36:54:84:d8:73:2d:50:7f:b7:e3:09:
b2:12:07:f1:2f:7c:ab:5b:ac:14:8f:c9:0e:57:e5:
8b:ec:78:19:8d:16:bc:ca:29:68:66:a1:aa:ad:9e:
7a:73:56:ba:64:64:d0:a6:f5:16:7c:b8:59:53:a4:
7b:9f:c8:8d:5d:9b:65:39:f8:a9:62:08:89:d7:1a:
fb:b8:88:e6:0c:fd:89:e7:90:25:1c:48:69:7e:f5:
db:ae:eb:4c:34:71:c6:eb:82:0f:2e:07:33:a3:13:
3c:60:84:0b:a3:6e:a5:ad:3f:8e:ef:93:53:87:ba:
ca:83:3c:84:0a:f6:e5:f3:54:b2:ba:c4:f7:ca:4c:
f7:21:0c:86:51:dc:28:fc:89:b0:ff:4f:79:e6:7b:
7b:18:01:4d:10:d4:68:e6:55:27:68:85:df:51:84:
a1:75:51:58:2d:75:f2:a5:32:2b:54:01:00:c4:81:
c5:7a:0a:06:9b:32:89:b1:16:a9:c6:a2:fd:ea:9c:
1d:c0:91:b5:0d:2b:15:ce:de:76:45:00:aa:47:6a:
b6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C7:C3:A3:25:BF:6C:54:A3:AD:D1:EE:26:AF:0B:E8:25:B7:36:F2
X509v3 Authority Key Identifier:
keyid:E8:D6:72:FA:60:AE:E4:C2:73:A1:15:07:F4:9B:58:4D:C5:52:C4:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/msfDoyW_bFSjrdHuJq8L6CW3NvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:e2c::/48
Signature Algorithm: sha256WithRSAEncryption
94:44:81:17:9e:e9:aa:32:2d:0c:17:17:bd:52:31:0b:ea:4e:
9e:dd:3e:c0:f6:22:57:00:4e:a4:c7:db:ca:9c:48:b1:22:6c:
8d:e3:7b:8d:28:70:18:63:f0:5e:db:f3:83:b6:f0:c0:6e:7e:
dd:2c:79:9e:0b:84:56:40:4b:b6:a8:46:1a:5d:9f:d7:57:0a:
ea:41:b7:a8:ac:94:22:bd:6d:7d:a4:02:90:d5:6c:0a:d2:6c:
47:f1:05:1e:6e:15:e6:cc:77:8d:63:03:b4:85:6d:63:80:ed:
9f:0c:da:a2:dc:63:81:59:fd:2d:92:54:97:78:3e:fa:a0:f9:
03:cc:50:8a:c5:58:30:8f:57:cf:25:67:67:97:b5:35:cc:27:
10:5a:0a:e8:73:6c:bc:20:12:70:25:fc:bb:35:71:e3:43:55:
39:69:88:86:3c:01:db:a1:b1:d8:19:cc:de:c5:ee:a2:df:6e:
72:e7:8e:0d:75:cd:95:39:16:14:21:6e:5f:57:e3:ac:2f:a9:
da:35:bb:96:21:46:76:89:08:6d:93:bb:49:fd:9d:00:5b:89:
ff:4a:da:de:47:89:0b:99:fc:c4:ee:0b:ba:74:db:4d:7c:e3:
45:c9:d2:6c:15:75:0b:31:a0:9d:41:47:35:c9:24:8b:43:25:
aa:2f:5b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:31:36 2024 by rpki-client on console-ams.rpki-client.org