Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/1M1shnmD-27HNVFTUlmmKrOtM9w.roa
File: 1M1shnmD-27HNVFTUlmmKrOtM9w.roa (raw, json)
Hash identifier: ia/7A+qFgoCVZzhPZuMaciJGH8jZ39LHLBGeTDKqcVw=
Subject key identifier: D4:CD:6C:86:79:83:FB:6E:C7:35:51:53:52:59:A6:2A:B3:AD:33:DC
Certificate issuer: /CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Certificate serial: 018CC64B4CBB4AB4093F545223398221C4E5
Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/1M1shnmD-27HNVFTUlmmKrOtM9w.roa
Signing time: Mon 01 Jan 2024 18:31:12 +0000
ROA not before: Mon 01 Jan 2024 18:31:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202283
IP address blocks: 2a02:1041::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:4c:bb:4a:b4:09:3f:54:52:23:39:82:21:c4:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Validity
Not Before: Jan 1 18:31:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4cd6c867983fb6ec73551535259a62ab3ad33dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d6:6f:9f:b7:88:dc:a4:92:cc:57:c7:4a:a8:
ef:28:7b:91:bb:95:ed:b1:83:38:56:6b:65:9e:cc:
bb:8c:87:3c:5e:fd:16:42:e2:33:7a:b0:25:cf:22:
83:de:67:5d:ca:da:80:ed:cc:39:a1:bf:fa:11:0b:
1a:68:86:0e:23:5d:b8:9a:60:1f:45:27:b1:52:4f:
6e:f5:f2:2f:fe:62:71:82:a6:85:53:b2:fa:43:a3:
64:c3:68:bc:15:ab:81:a0:b1:88:f0:df:90:53:ab:
f2:ec:93:2c:cd:90:b5:67:e0:23:0b:0a:4a:d9:23:
af:5c:e3:bc:fb:b0:f4:d3:02:35:f8:b8:56:f6:96:
32:63:4c:a7:f7:92:84:fd:88:ed:f5:5f:0e:d7:a4:
a1:3f:dc:bd:0d:dd:06:0c:4a:9e:13:fc:87:0d:81:
e1:dc:ea:40:0e:b7:28:d5:eb:8f:fb:65:83:c4:24:
ed:96:ca:77:5e:00:a5:15:e1:00:33:96:d5:6e:7e:
bc:13:b8:27:20:a1:4d:82:3d:02:90:90:29:9f:72:
cf:0c:8b:d9:0f:e9:78:7e:46:b7:a9:ff:92:80:bb:
7a:a3:d6:2e:15:1f:a7:1a:ff:f3:bb:e3:55:a9:1f:
bb:69:8b:b2:50:b5:d4:a1:41:90:35:a0:25:80:a5:
81:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CD:6C:86:79:83:FB:6E:C7:35:51:53:52:59:A6:2A:B3:AD:33:DC
X509v3 Authority Key Identifier:
keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/1M1shnmD-27HNVFTUlmmKrOtM9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:1041::/32
Signature Algorithm: sha256WithRSAEncryption
43:97:3a:89:2e:cd:5f:77:31:3a:61:45:0d:34:a6:ea:71:e6:
7d:56:36:2c:34:f3:14:88:17:9b:84:b5:ed:7d:42:0e:17:2a:
fc:87:d5:05:61:1f:08:eb:c0:25:55:a9:70:4b:d9:82:08:a4:
1d:ee:22:85:8e:b8:6d:cd:68:14:c5:ce:38:40:9d:cc:b2:90:
63:f0:67:6a:f3:f7:d6:71:99:42:ad:a1:56:fe:9e:ef:ea:ba:
ce:cd:32:38:58:80:7c:c6:20:2d:29:a0:c8:25:6f:2b:3f:90:
31:56:83:ea:ee:c7:65:b3:52:44:94:6a:d6:84:d5:cd:85:ff:
c0:0a:2c:33:27:e4:37:42:a6:e8:d7:9c:87:d5:95:16:9d:b3:
84:d8:2e:d2:b9:23:db:af:34:b7:09:c1:ba:f2:51:3f:0a:28:
bb:af:12:ba:a1:35:dd:72:e5:5d:cc:66:bd:9b:61:0a:c3:c4:
e6:fb:49:90:f7:d0:a5:a3:d9:1b:3c:fe:fd:c5:64:b6:cf:89:
0a:d0:14:5a:58:00:4a:86:00:0e:f9:5f:30:49:59:e4:13:8d:
f6:16:53:07:45:33:3d:5e:74:b2:25:d8:32:03:13:d0:61:98:
41:00:09:5c:57:c2:60:dc:89:dd:c3:9e:03:e1:71:03:08:0a:
70:15:fb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:26:41 2024 by rpki-client on console-ams.rpki-client.org