Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/OcZZk1aejclFiFKxuTG-LGefhz4.roa
File: OcZZk1aejclFiFKxuTG-LGefhz4.roa (raw, json)
Hash identifier: PLSAisAYxIaEp2Z/ceUmFXBe9D5x4EzY6nEYPpFK6qM=
Subject key identifier: 39:C6:59:93:56:9E:8D:C9:45:88:52:B1:B9:31:BE:2C:67:9F:87:3E
Certificate issuer: /CN=be3f74f2b6e4e28e9ff6ca3cca3a5d78ca2cad6a
Certificate serial: 018CC5DBF7E9D2D2C1B7AC7DE6088E2773C4
Authority key identifier: BE:3F:74:F2:B6:E4:E2:8E:9F:F6:CA:3C:CA:3A:5D:78:CA:2C:AD:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/OcZZk1aejclFiFKxuTG-LGefhz4.roa
Signing time: Mon 01 Jan 2024 16:29:36 +0000
ROA not before: Mon 01 Jan 2024 16:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 2001:678:934::/48 maxlen: 48
2001:67c:bf0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 13:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:f7:e9:d2:d2:c1:b7:ac:7d:e6:08:8e:27:73:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3f74f2b6e4e28e9ff6ca3cca3a5d78ca2cad6a
Validity
Not Before: Jan 1 16:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39c65993569e8dc9458852b1b931be2c679f873e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c7:2f:5b:38:83:ff:ba:ae:25:b1:ee:ed:f9:
e6:9d:e3:e0:1b:88:5a:dd:f7:ea:f8:2a:72:ba:c4:
64:aa:ce:05:34:95:f3:9a:37:fc:26:eb:9e:8e:9d:
c8:e8:72:98:ac:1d:b4:42:d0:4e:22:1b:60:55:df:
ab:30:cc:0d:9e:3e:1c:b5:8f:78:81:b9:9f:62:d2:
0e:eb:5a:3a:f8:22:74:df:55:b0:08:d4:74:ee:51:
69:72:d2:c1:f8:20:0b:2d:65:75:c2:e4:af:f9:88:
4b:70:38:be:f7:6e:53:f1:46:4f:e8:b8:72:73:71:
86:ff:70:a5:2e:5e:df:db:2a:65:56:5d:52:41:e1:
5a:f6:80:92:95:06:dd:43:48:84:28:85:61:b0:c9:
ee:30:4a:81:c1:5e:ec:a7:35:91:fe:cc:c5:59:2d:
4f:fb:c6:11:9d:48:eb:5d:4f:4b:ff:92:4a:e2:e6:
8e:ec:b6:01:1a:d6:ca:b4:a2:d4:ce:ab:3f:a1:81:
ef:5e:82:a2:6e:71:d6:2f:1a:d2:fa:c1:f6:f2:f7:
72:d8:9d:2e:3b:b1:55:c0:59:21:e9:2d:e3:2b:58:
b8:c6:fa:a9:4d:de:08:4d:b2:8a:84:fb:b8:de:b4:
d6:4e:03:cb:99:f3:80:3d:f3:74:af:f6:ef:47:3a:
c6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C6:59:93:56:9E:8D:C9:45:88:52:B1:B9:31:BE:2C:67:9F:87:3E
X509v3 Authority Key Identifier:
keyid:BE:3F:74:F2:B6:E4:E2:8E:9F:F6:CA:3C:CA:3A:5D:78:CA:2C:AD:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/OcZZk1aejclFiFKxuTG-LGefhz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:934::/48
2001:67c:bf0::/48
Signature Algorithm: sha256WithRSAEncryption
12:4d:a9:33:4b:54:ed:b8:e2:d3:e0:de:ca:70:81:47:2c:6a:
30:66:5e:74:6c:50:93:64:f2:4c:a6:83:17:c1:50:d1:97:e7:
5b:e8:c6:c9:dc:7f:e5:d1:0a:66:93:51:d0:1c:d6:e6:90:a7:
a0:c6:c6:76:81:7f:57:10:25:b5:f0:08:08:43:22:8c:4b:3b:
8a:b3:d5:76:5e:55:27:5e:43:07:11:45:fa:f5:c2:9b:94:fe:
52:35:af:ec:7d:87:05:85:29:80:d2:ff:d5:66:30:4d:b3:4f:
95:8d:33:e0:6b:44:54:d2:b1:49:19:ba:89:32:57:24:10:b0:
44:18:e2:08:ef:57:2a:1d:6c:64:28:a2:17:2c:2f:4d:9a:45:
a6:31:62:d3:21:58:3b:a2:70:2d:dd:2b:55:66:01:47:c4:88:
e5:77:f8:74:ea:2d:42:f2:82:13:b2:9f:a5:c3:55:a7:25:ad:
13:5d:45:db:eb:7e:60:5e:33:9f:4b:36:2b:aa:71:94:1a:17:
e0:e7:f7:99:a3:e3:79:2c:91:aa:df:06:c1:b2:44:56:49:13:
82:6c:10:83:a7:3a:40:71:85:a5:90:4e:b3:fc:3d:fb:fb:a1:
43:f6:2c:e9:e3:c9:03:83:0b:88:b0:7f:9d:ee:ce:30:ef:e9:
1d:20:a0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:40:35 2024 by rpki-client on console-ams.rpki-client.org