Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/6KRcvy83p1o5hI3VnT1dbg-Ut14.roa
File: 6KRcvy83p1o5hI3VnT1dbg-Ut14.roa (raw, json)
Hash identifier: jIHDqwgAP1TIYTFsRkuy1mcyAQ7ACD7Yr6iMWREYOPk=
Subject key identifier: E8:A4:5C:BF:2F:37:A7:5A:39:84:8D:D5:9D:3D:5D:6E:0F:94:B7:5E
Certificate issuer: /CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Certificate serial: 018CC64B020FE7C1FCCBC9230F0D34033A25
Authority key identifier: 1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/6KRcvy83p1o5hI3VnT1dbg-Ut14.roa
Signing time: Mon 01 Jan 2024 18:30:53 +0000
ROA not before: Mon 01 Jan 2024 18:30:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13101
IP address blocks: 141.91.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 07:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:02:0f:e7:c1:fc:cb:c9:23:0f:0d:34:03:3a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Validity
Not Before: Jan 1 18:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8a45cbf2f37a75a39848dd59d3d5d6e0f94b75e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b2:a7:fb:10:5a:42:8b:6a:11:2a:85:12:d8:
4c:30:3c:0d:2f:78:f7:06:fd:d9:eb:2a:9b:77:11:
d2:26:64:25:f3:b9:ba:c7:1f:36:f7:fc:d3:52:7d:
fc:a9:e9:16:5f:1a:cc:86:98:71:a6:9f:ab:19:3e:
0d:72:83:17:6b:0b:c9:18:73:b8:6e:e0:2e:6d:3f:
86:1d:ee:c9:0d:ab:f1:45:73:13:9f:71:26:60:f9:
6d:be:ec:69:d0:b9:d4:03:53:e3:54:88:6d:56:be:
68:75:5c:1a:39:65:a8:fc:28:24:b2:f9:0e:2a:af:
df:87:eb:84:40:b5:27:6b:7d:6a:ea:d8:00:79:6c:
95:4c:37:29:d8:60:38:32:5e:51:a0:4e:28:87:79:
3e:61:1c:cf:00:d5:fa:17:0c:d8:ad:8b:eb:14:01:
f1:b8:98:ae:69:39:19:2a:37:1b:eb:c6:ae:bb:1d:
cd:96:41:e6:9f:6f:91:6f:7a:fa:5b:ac:df:1d:ad:
eb:53:b2:3b:55:a2:a5:14:9e:89:a4:a6:5a:52:81:
c4:1f:85:43:f6:06:35:d9:6c:21:26:29:2f:e9:08:
d1:7b:37:c6:a4:8e:8d:dc:9f:b9:54:04:85:22:38:
b7:85:5e:a3:93:2e:e1:31:52:db:e3:20:6d:b0:87:
de:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A4:5C:BF:2F:37:A7:5A:39:84:8D:D5:9D:3D:5D:6E:0F:94:B7:5E
X509v3 Authority Key Identifier:
keyid:1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/6KRcvy83p1o5hI3VnT1dbg-Ut14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.91.0.0/16
Signature Algorithm: sha256WithRSAEncryption
48:04:98:11:65:a3:f5:3d:1a:ab:0e:19:a2:2a:0b:cf:c3:8e:
b7:04:fb:60:59:d0:b6:80:2a:80:48:cc:7b:c4:f2:43:74:e9:
89:fc:34:cb:73:ce:3b:f8:b8:d2:70:f9:d4:23:a4:b1:7f:f9:
b4:17:8f:3b:52:db:78:a5:19:92:a0:00:5f:47:78:38:84:96:
dd:bf:1e:63:af:d7:37:5b:9a:a0:ae:57:83:1d:99:6b:07:73:
c5:4e:ab:7a:a6:54:52:1a:fa:56:d8:ef:ae:a7:9d:a6:18:c6:
89:d4:7d:ae:c9:b3:3e:37:b8:6c:c6:78:fd:7d:76:51:26:cd:
2d:95:b0:e5:c0:08:f6:d3:67:f9:8b:b5:23:a9:c1:53:73:ac:
b2:40:cd:1f:86:7f:8e:04:de:ad:13:90:67:e1:f1:cd:0c:9f:
3c:79:b0:d3:74:43:0d:2c:aa:1d:f2:5f:24:72:2c:24:ff:33:
d8:80:34:30:79:70:f4:a5:61:7a:8a:81:d8:c9:7a:47:31:1d:
e5:37:41:ea:03:b5:2a:5c:57:99:d2:b5:d5:c5:32:77:5e:98:
13:c8:2f:dd:aa:f9:8f:99:04:44:78:b0:9a:3a:58:e9:d4:1f:
9b:91:c5:e2:37:3b:fb:e0:d2:78:e5:2a:8e:a0:af:b8:c1:dd:
b2:d4:bc:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 11:27:32 2024 by rpki-client on console-ams.rpki-client.org