Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/3RhIpzOt6Z932qay8UY-QXMVb20.roa
File: 3RhIpzOt6Z932qay8UY-QXMVb20.roa (raw, json)
Hash identifier: EE4SMC0XhytiQMZjvR9HRgQ21n8jJTLvmBWvnZB1QsQ=
Subject key identifier: DD:18:48:A7:33:AD:E9:9F:77:DA:A6:B2:F1:46:3E:41:73:15:6F:6D
Certificate issuer: /CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7
Certificate serial: 018CC7275BDDD1B5A475BCA8673F8ADD6AAB
Authority key identifier: 77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/3RhIpzOt6Z932qay8UY-QXMVb20.roa
Signing time: Mon 01 Jan 2024 22:31:34 +0000
ROA not before: Mon 01 Jan 2024 22:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212018
IP address blocks: 2001:67c:74c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:5b:dd:d1:b5:a4:75:bc:a8:67:3f:8a:dd:6a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7
Validity
Not Before: Jan 1 22:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd1848a733ade99f77daa6b2f1463e4173156f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b0:2f:b4:b4:86:26:12:a8:06:72:ad:56:11:
df:a8:49:d1:48:7a:24:c9:9f:06:a9:a4:a8:7d:54:
b2:fd:16:45:6a:c7:6b:93:cf:dc:e5:52:85:58:e7:
c5:c5:f4:83:9a:d0:14:c5:d3:df:45:ac:3b:e9:9f:
72:f4:ff:d8:ae:84:2c:ff:d6:15:7d:13:82:06:38:
f5:32:b3:01:c9:59:86:ba:f4:ab:02:18:02:67:42:
93:e3:7b:0b:4c:90:c5:df:4f:32:3e:57:45:fc:64:
d1:79:b2:6f:6d:04:e5:ac:d3:84:6c:a3:5c:12:b7:
13:9e:0d:c1:ca:c2:cf:34:e8:1d:ac:0f:2f:b9:4e:
57:2a:23:ed:92:cb:5e:98:a3:52:0b:e9:d7:70:84:
d6:ba:60:ee:8e:20:5f:36:d9:99:4e:89:76:56:4b:
f1:9c:2f:da:0a:a0:62:d5:88:30:8a:fd:1d:1e:04:
ff:84:88:1b:3b:7a:bf:fc:4c:7b:50:4c:3e:95:af:
97:1e:01:5f:de:fe:96:35:00:d8:87:e0:dd:ec:b8:
bc:71:b9:c6:e2:47:e6:bd:f7:6f:00:06:33:85:e5:
ca:ac:ce:5e:10:44:60:ef:92:ab:54:04:46:c5:7d:
6d:b6:d6:e4:61:82:31:2f:6a:bc:5d:57:8a:36:a6:
74:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:18:48:A7:33:AD:E9:9F:77:DA:A6:B2:F1:46:3E:41:73:15:6F:6D
X509v3 Authority Key Identifier:
keyid:77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/3RhIpzOt6Z932qay8UY-QXMVb20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:74c::/48
Signature Algorithm: sha256WithRSAEncryption
cb:24:9a:be:8b:bc:70:08:db:1a:89:0d:50:50:f8:d6:46:88:
42:a6:1f:cd:45:49:0f:d5:ae:39:62:5b:e9:a7:e1:12:98:4a:
b0:ef:b8:52:e2:f2:00:15:17:9b:89:93:10:e6:01:68:71:09:
79:91:c7:5c:3c:88:df:41:5b:42:37:e6:b7:f6:b1:ad:b4:34:
40:58:92:02:a4:97:44:58:c5:0f:f8:ea:63:04:10:3f:32:e1:
4c:d0:ef:39:89:3a:a1:4c:92:27:04:2f:f3:90:a7:ed:d0:45:
78:78:d2:be:59:49:65:2f:77:a8:c0:99:eb:46:91:5a:57:ce:
22:ad:eb:ad:41:01:b4:32:65:26:57:89:ab:35:43:bf:1a:aa:
46:de:4b:6c:3c:40:82:64:f0:1c:f3:ac:14:f5:fe:6c:68:e4:
f7:51:6f:4a:2a:ac:e8:0a:78:15:79:59:13:85:3a:f6:7d:c5:
a2:94:3e:e2:16:bf:9b:cc:f3:cf:63:4e:0a:25:97:06:a6:f0:
f0:bd:bc:cc:bc:de:8b:a9:2a:38:a2:01:36:e7:2c:15:ac:05:
9f:ea:b9:35:14:de:e4:fa:d2:09:2c:2e:fa:dd:e7:82:15:4e:
08:c1:27:b8:88:83:8d:16:57:6d:03:a0:ed:98:83:d9:08:c8:
cd:bb:3e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:25:55 2024 by rpki-client on console-ams.rpki-client.org