Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/8sy7RFwoSpm818L4uBLua1jogaA.roa
File: 8sy7RFwoSpm818L4uBLua1jogaA.roa (raw, json)
Hash identifier: skynMNBOFrflJv6M1JaLy98LoiNuXAW5U+J22gCxVsM=
Subject key identifier: F2:CC:BB:44:5C:28:4A:99:BC:D7:C2:F8:B8:12:EE:6B:58:E8:81:A0
Certificate issuer: /CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Certificate serial: 018CC793E7ADB8879C5E6C544991ADEE09EA
Authority key identifier: D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/8sy7RFwoSpm818L4uBLua1jogaA.roa
Signing time: Tue 02 Jan 2024 00:30:08 +0000
ROA not before: Tue 02 Jan 2024 00:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44973
IP address blocks: 2001:678:594::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 15:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:e7:ad:b8:87:9c:5e:6c:54:49:91:ad:ee:09:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Validity
Not Before: Jan 2 00:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2ccbb445c284a99bcd7c2f8b812ee6b58e881a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8c:5b:32:40:b5:f6:95:0a:9a:d7:06:86:bd:
c2:ef:6c:08:bf:a2:46:76:6f:a6:1b:a4:8a:93:27:
19:78:32:fb:d1:75:e1:f4:46:42:d0:c9:46:77:e5:
bb:d2:30:8d:ed:cf:04:31:24:2e:77:47:3d:20:a7:
1d:b2:f3:60:d1:dd:41:7b:f2:72:c1:36:0a:85:bc:
ca:d3:be:75:e8:de:cb:fd:ba:a9:de:66:2f:68:0c:
19:68:61:cd:90:77:74:04:8e:88:cb:66:0e:ae:36:
14:ae:82:42:57:6f:7b:af:15:c6:57:17:32:f3:88:
00:95:f0:02:01:5c:e0:24:bf:83:bc:d2:d9:71:31:
54:9b:f2:1b:d3:43:9c:7a:64:5b:95:0f:39:e0:92:
a9:eb:b3:42:c9:01:3e:cb:99:5f:47:f3:3c:58:1c:
87:df:ca:91:b6:ca:f8:82:4b:72:e4:2f:1d:9b:e3:
25:dd:cc:b8:cc:a7:21:fe:62:08:15:69:90:7c:1a:
c6:19:bb:42:09:80:66:64:f2:30:a5:95:8b:0c:9c:
79:59:9a:ac:a3:d6:22:0a:18:bb:0c:20:82:3f:42:
50:c0:92:bd:f4:0c:95:73:62:d1:ac:63:67:43:39:
d7:02:45:d9:63:a4:9f:ff:fd:00:94:92:f1:a1:b2:
7f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CC:BB:44:5C:28:4A:99:BC:D7:C2:F8:B8:12:EE:6B:58:E8:81:A0
X509v3 Authority Key Identifier:
keyid:D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/8sy7RFwoSpm818L4uBLua1jogaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:594::/48
Signature Algorithm: sha256WithRSAEncryption
1b:9b:0a:d8:ca:bf:ac:72:a6:b1:af:ed:c7:06:48:0e:ea:5d:
06:c1:12:df:9e:ac:f8:a1:9a:29:2c:8d:61:39:5a:92:d1:31:
1a:e3:47:66:11:13:c2:da:d6:31:f8:5f:cc:db:dd:2c:65:16:
46:ea:e4:39:e5:a5:32:01:ca:db:26:41:0d:af:96:74:a3:b2:
aa:42:61:37:53:28:fe:43:12:a4:ac:59:7c:b2:cc:76:13:9a:
3d:79:18:ba:3a:4a:66:54:e8:7c:90:dc:83:2d:3e:ed:c1:3d:
00:78:48:e3:65:f6:bf:cb:7e:a6:1d:9d:d6:19:52:38:2d:01:
3f:20:1d:01:80:d9:15:59:5e:85:de:fc:2b:87:76:d4:a9:31:
43:ed:49:7c:c1:73:eb:88:19:77:9d:75:c8:7a:3e:1e:a3:67:
78:f5:6f:75:98:33:5f:1a:3b:e2:7a:74:2e:07:57:b3:c6:40:
12:83:02:d7:be:ab:47:3c:e7:a2:d7:f8:ec:3f:68:71:e4:b0:
cd:05:b7:5e:6e:82:2e:29:ad:28:c5:89:cd:44:85:b3:88:db:
6a:6c:cc:9d:ac:42:c1:52:4f:16:5c:7e:de:aa:64:fa:c8:1c:
f5:f0:b0:1b:f0:58:6e:92:f3:0e:f2:77:60:6d:99:78:a1:9c:
e8:27:26:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:19:05 2024 by rpki-client on console-ams.rpki-client.org