Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/KvbhvQFlVwhIy2Mi7j8KalIj35E.roa
File: KvbhvQFlVwhIy2Mi7j8KalIj35E.roa (raw, json)
Hash identifier: PMGJbFZUcw7WWm5+FbsvzAISZd5rt0BeWRJD2P/EAfE=
Subject key identifier: 2A:F6:E1:BD:01:65:57:08:48:CB:63:22:EE:3F:0A:6A:52:23:DF:91
Certificate issuer: /CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Certificate serial: 018CC424E81CDEFE4940EE4971A4CEC28B7A
Authority key identifier: 6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/KvbhvQFlVwhIy2Mi7j8KalIj35E.roa
Signing time: Mon 01 Jan 2024 08:30:02 +0000
ROA not before: Mon 01 Jan 2024 08:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206740
IP address blocks: 2001:678:2c0::/48 maxlen: 48
2001:678:2b9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:e8:1c:de:fe:49:40:ee:49:71:a4:ce:c2:8b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Validity
Not Before: Jan 1 08:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2af6e1bd0165570848cb6322ee3f0a6a5223df91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2c:0a:af:2f:90:d8:3f:92:b4:49:66:7a:c9:
20:1a:61:3e:95:45:e7:f4:16:03:46:fb:99:c2:79:
bb:a7:e6:9e:f2:82:2c:48:cd:9d:79:85:7d:ab:07:
f4:da:b9:90:43:66:20:fc:a0:c9:30:42:be:74:8b:
22:e5:1e:10:f9:26:80:37:aa:16:8f:46:d2:17:61:
56:35:40:39:a2:61:35:c7:e2:b0:16:4b:fc:64:0b:
c0:c5:aa:12:cb:a9:c7:60:45:4a:0c:49:f1:1d:41:
38:dc:b3:7b:13:d8:dd:5b:b8:04:31:a8:47:5d:5d:
34:44:58:b1:47:b7:08:e7:5c:50:0b:c9:f1:9b:18:
9b:1d:29:d4:fc:20:f0:f3:cb:be:65:b0:9a:6e:e2:
53:fd:a5:a8:de:90:01:2e:21:f4:4f:4c:49:2c:b4:
e2:e1:95:5e:d8:20:d6:48:72:77:e9:f6:1c:45:e7:
e7:25:19:3f:5b:8e:b1:73:77:84:c9:90:af:0a:ef:
24:11:3f:8f:0b:15:d0:bd:ab:94:4b:88:a2:c7:9b:
d7:28:89:65:21:c2:5b:95:36:05:e4:bb:75:ae:a2:
ad:5b:4a:38:74:47:ca:d7:b8:24:52:19:57:97:70:
82:4e:c7:a5:73:ea:b2:49:c2:2e:7d:59:c3:97:e3:
5f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F6:E1:BD:01:65:57:08:48:CB:63:22:EE:3F:0A:6A:52:23:DF:91
X509v3 Authority Key Identifier:
keyid:6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/KvbhvQFlVwhIy2Mi7j8KalIj35E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:2b9::/48
2001:678:2c0::/48
Signature Algorithm: sha256WithRSAEncryption
32:3c:aa:c7:44:2a:41:2f:32:dd:aa:86:e5:f7:5e:9f:2f:03:
4d:4c:ac:01:57:cf:00:0a:c0:67:65:b3:d1:e4:e6:a2:99:70:
01:78:94:fd:ef:67:52:7f:11:a9:01:e3:6b:97:17:2d:bb:c1:
06:30:41:fe:9b:a5:c8:d4:7c:34:7d:d3:da:3a:5c:5c:62:29:
51:d0:15:4e:cb:85:8b:ba:d5:8d:77:82:00:b5:39:3a:cd:e9:
42:6c:36:0e:d8:2a:4f:58:99:c8:65:01:80:f9:3c:26:30:42:
7f:56:1f:9a:01:ce:92:e8:40:8e:79:6d:95:2e:8c:5f:3c:9c:
2f:05:fe:eb:48:34:ed:66:5a:77:80:f4:35:e2:4d:62:a2:bc:
be:fe:fe:a7:72:93:a2:77:c8:07:f4:d8:15:63:a9:49:42:4f:
42:23:1a:78:e7:39:44:d5:8c:d1:31:3a:38:60:8e:2a:e4:cd:
a9:e9:da:3b:ed:9c:ab:f3:c2:29:64:94:48:42:b4:81:81:85:
57:70:63:90:96:35:c3:e6:87:ec:30:03:bc:28:76:22:b6:c4:
f9:73:85:da:70:9a:46:6c:61:4c:1d:24:d8:01:4e:ab:dd:8f:
6f:42:04:03:e2:d3:d7:10:fc:e6:45:19:ce:2a:f9:6d:6d:e2:
6c:86:79:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:50:28 2024 by rpki-client on console-fra.rpki-client.org