Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/d7ajyhix5OYOHS5bjOMzFNdvvzU.roa
File: d7ajyhix5OYOHS5bjOMzFNdvvzU.roa (raw, json)
Hash identifier: iycL2Atn8bFBw3z0tiS1wbILZ7xAAP2xAVoS+7kUD+Y=
Subject key identifier: 77:B6:A3:CA:18:B1:E4:E6:0E:1D:2E:5B:8C:E3:33:14:D7:6F:BF:35
Certificate issuer: /CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Certificate serial: 018CC34917DB27CA07B8655A32FDA1F0ED2C
Authority key identifier: AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/d7ajyhix5OYOHS5bjOMzFNdvvzU.roa
Signing time: Mon 01 Jan 2024 04:29:56 +0000
ROA not before: Mon 01 Jan 2024 04:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60505
IP address blocks: 2a11:a500::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:17:db:27:ca:07:b8:65:5a:32:fd:a1:f0:ed:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Validity
Not Before: Jan 1 04:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77b6a3ca18b1e4e60e1d2e5b8ce33314d76fbf35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a7:14:b5:d7:86:7c:d7:3b:2b:e9:ca:10:08:
29:6c:e7:3b:5f:0e:ca:9b:91:b2:ca:5f:18:34:65:
74:d4:85:22:77:ed:e2:05:60:94:b3:62:7e:2b:8e:
2b:43:eb:0e:4f:8f:57:69:b6:fb:4d:e8:db:70:44:
ff:64:bf:69:12:78:e5:7d:46:68:11:e4:0f:f2:c4:
0e:09:50:58:0c:e7:67:03:17:cf:b4:02:8e:2e:1f:
d1:52:57:db:b9:fa:df:90:40:4f:2c:a3:6a:0e:86:
a7:43:1b:93:47:28:0a:4f:9f:97:8c:6a:c1:e1:9b:
ab:c3:ac:80:fc:e7:c4:60:8b:06:f0:d6:a2:2c:1d:
0f:5a:ae:fb:a4:84:15:32:49:3f:cf:54:58:c0:5e:
47:a4:54:1b:3f:bd:22:77:83:ea:88:b9:e9:1f:4c:
a8:40:36:65:17:c2:2a:3d:af:c0:9c:69:31:ce:56:
07:98:3d:4f:42:83:aa:c9:17:8f:4f:3a:83:a5:22:
b7:3b:b9:dc:a0:aa:4e:41:aa:7e:2c:35:2c:8f:b3:
e0:8b:c9:56:d6:a5:9a:11:2b:f9:de:06:3e:a2:b7:
8c:a2:8d:e2:0a:f2:c3:6a:5d:29:26:27:1b:25:e2:
bd:fc:19:39:18:fa:46:43:c7:10:49:d1:28:e1:ff:
03:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B6:A3:CA:18:B1:E4:E6:0E:1D:2E:5B:8C:E3:33:14:D7:6F:BF:35
X509v3 Authority Key Identifier:
keyid:AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/d7ajyhix5OYOHS5bjOMzFNdvvzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:a500::/32
Signature Algorithm: sha256WithRSAEncryption
a5:66:76:aa:a5:b0:20:1c:97:6d:ab:25:a2:22:0f:89:f7:79:
bd:44:da:5e:19:09:10:7a:5c:a6:2a:14:4a:55:9c:57:3b:c7:
fb:9f:e8:28:3f:2a:4f:c3:f7:07:9d:1e:f5:6e:da:c6:db:62:
7f:66:70:71:ea:e0:2a:e2:e4:3b:bc:df:04:da:21:02:fe:af:
e2:6d:46:71:28:17:8c:f0:b1:7f:05:6b:88:1b:74:61:eb:d2:
62:5d:1e:c1:dc:e8:95:6c:9c:c1:8c:de:54:e9:82:af:2c:f5:
04:b2:6a:9a:48:36:a3:ce:23:9e:87:99:1a:b3:2b:d6:c5:18:
ae:e2:9c:f7:d5:43:0f:74:cc:33:d1:a6:70:76:a8:a9:0a:4b:
fb:c0:f5:d8:14:b4:7d:49:1d:68:a9:e9:61:ef:bd:6b:25:6a:
71:22:75:51:8b:d4:70:67:d2:d7:bb:8e:d6:8d:61:34:2c:eb:
3c:38:e8:6f:11:c7:c3:a2:84:6a:74:4a:fd:12:27:f1:77:4e:
23:fc:4d:8f:45:4d:82:b8:95:bd:94:d8:be:3f:bc:8c:03:36:
85:de:04:f4:7f:a7:b5:73:0f:e0:85:b2:d0:bb:69:49:26:3b:
e7:31:50:85:b2:96:03:7a:dc:28:f0:88:8c:b6:61:06:9b:f9:
42:2f:0f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:40:49 2024 by rpki-client on console-fra.rpki-client.org