Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/6LL4e78DDr4jRf2ouL9iNwGpDeU.roa
File: 6LL4e78DDr4jRf2ouL9iNwGpDeU.roa (raw, json)
Hash identifier: 5ebwtCOru+Z8JNVvPrfzfecfgBxYq1HjB9AipWh91Dc=
Subject key identifier: E8:B2:F8:7B:BF:03:0E:BE:23:45:FD:A8:B8:BF:62:37:01:A9:0D:E5
Certificate issuer: /CN=03dc8c62391efdd4dd18e46819e1778002a9a187
Certificate serial: 01910EDC00587B7A007B9B2458EB4A0652A7
Authority key identifier: 03:DC:8C:62:39:1E:FD:D4:DD:18:E4:68:19:E1:77:80:02:A9:A1:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/6LL4e78DDr4jRf2ouL9iNwGpDeU.roa
Signing time: Thu 01 Aug 2024 16:53:04 +0000
ROA not before: Thu 01 Aug 2024 16:53:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214564
IP address blocks: 2001:67c:ef8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0e:dc:00:58:7b:7a:00:7b:9b:24:58:eb:4a:06:52:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03dc8c62391efdd4dd18e46819e1778002a9a187
Validity
Not Before: Aug 1 16:53:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8b2f87bbf030ebe2345fda8b8bf623701a90de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:66:68:6d:da:c2:55:74:33:5f:a8:72:d4:c0:
e0:5b:bf:e9:a0:2e:8f:60:3c:b7:2c:31:ff:ea:a2:
c2:f1:e9:b5:d6:21:62:cb:c1:36:9c:8b:b4:da:ea:
84:c8:20:16:c0:4f:e4:83:fd:36:69:5f:08:c9:27:
0b:16:69:66:3e:94:58:ee:fb:d0:03:4a:6f:6e:9d:
63:39:0f:6c:06:64:13:02:5f:c1:1c:14:8b:96:b0:
75:5d:63:68:46:d8:5e:08:c7:ea:d2:99:83:7f:72:
cc:6d:67:7f:80:cb:3f:6c:b0:9c:dd:66:72:b3:b1:
b0:c2:00:11:97:a9:d8:d4:0c:65:01:80:33:b9:5f:
0c:3f:06:f5:ad:04:cb:5e:52:9a:84:ab:b7:a8:14:
0d:d0:55:e0:fb:52:13:23:99:da:3c:2c:dd:4d:19:
b6:1b:95:41:60:02:a6:be:7c:23:32:2a:61:5d:03:
d7:76:75:8a:20:03:ba:2e:17:e9:d7:02:c1:ba:41:
1a:d3:cc:ea:f9:08:32:8d:c8:75:bb:90:94:7f:04:
2f:ac:d4:19:9b:44:e1:7c:33:9b:ca:05:28:46:1e:
9d:83:ab:d0:4f:5f:ce:34:27:9d:d0:0d:78:8a:08:
0b:a0:5f:8a:cc:78:c5:ea:d0:4b:e7:d2:0e:87:9c:
ab:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B2:F8:7B:BF:03:0E:BE:23:45:FD:A8:B8:BF:62:37:01:A9:0D:E5
X509v3 Authority Key Identifier:
keyid:03:DC:8C:62:39:1E:FD:D4:DD:18:E4:68:19:E1:77:80:02:A9:A1:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/6LL4e78DDr4jRf2ouL9iNwGpDeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:ef8::/48
Signature Algorithm: sha256WithRSAEncryption
8c:9a:cc:95:f9:22:16:ce:29:15:06:55:4c:42:b3:f2:9b:c6:
ec:ae:63:97:4a:03:9f:f6:eb:a9:10:33:f4:e8:cf:fe:09:ba:
dc:00:21:9e:13:73:17:66:54:ce:a7:4d:ea:55:f5:d9:39:ac:
b8:f7:2a:ac:be:ad:85:be:f0:30:43:a9:a7:89:59:35:90:42:
d3:b4:ee:2f:04:0e:4d:45:82:37:90:25:a1:94:57:be:74:76:
9d:56:03:51:c9:30:43:8d:bb:b9:97:d0:90:38:0c:62:9a:ac:
fc:1d:d8:c3:d1:e9:45:01:5a:44:ec:cf:95:9b:f1:99:20:69:
41:79:90:95:ca:42:d1:81:a7:09:93:c3:f3:34:13:58:51:7f:
98:a4:f7:04:28:57:1c:19:83:e0:d8:96:5b:00:ed:96:d6:57:
a7:62:54:76:1a:ba:28:0f:70:2a:4d:1d:82:c8:42:cd:f9:df:
fc:04:4b:73:c9:dd:da:7b:a1:6a:88:b3:99:30:25:99:21:c0:
dc:3f:8f:3c:8b:1f:8b:9c:1a:63:9b:4b:c0:45:a3:e0:d9:51:
27:67:95:dd:80:14:bd:23:1d:70:b8:ca:b8:3b:18:eb:59:c1:
ef:7a:87:7d:b2:71:58:2d:0b:a7:18:13:1f:4f:06:2f:58:be:
09:42:74:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:51:44 2024 by rpki-client on console-fra.rpki-client.org