Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/mfZP61Jsk-PSXN-ni7Aq9WBdSro.roa
File: mfZP61Jsk-PSXN-ni7Aq9WBdSro.roa (raw, json)
Hash identifier: dnDXzl/lIBYLmtVJJnQZYzbyBPmHFizOE3Y8jrWewuY=
Subject key identifier: 99:F6:4F:EB:52:6C:93:E3:D2:5C:DF:A7:8B:B0:2A:F5:60:5D:4A:BA
Certificate issuer: /CN=ee0739d0528dcb4fce578d11f7ec34b0e37452cf
Certificate serial: 018CC4936ADECA245474B6E4F6DBEA116CC6
Authority key identifier: EE:07:39:D0:52:8D:CB:4F:CE:57:8D:11:F7:EC:34:B0:E3:74:52:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/mfZP61Jsk-PSXN-ni7Aq9WBdSro.roa
Signing time: Mon 01 Jan 2024 10:30:44 +0000
ROA not before: Mon 01 Jan 2024 10:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58057
IP address blocks: 2001:67c:17fc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:6a:de:ca:24:54:74:b6:e4:f6:db:ea:11:6c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0739d0528dcb4fce578d11f7ec34b0e37452cf
Validity
Not Before: Jan 1 10:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99f64feb526c93e3d25cdfa78bb02af5605d4aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:da:83:db:66:c3:d7:3d:52:7e:3d:a7:09:5a:
4e:38:6f:f8:3a:c9:97:7b:b8:4a:e4:df:70:63:f0:
4e:7f:1b:db:c9:83:8f:96:11:17:0e:b2:7c:2f:06:
ce:8c:c5:97:a4:b7:62:c7:f2:d2:ca:58:02:b7:43:
e0:74:43:40:70:c5:b8:a3:12:00:82:9d:68:0f:3d:
6b:20:9f:4c:6e:c2:97:f8:50:58:c0:3f:ed:2c:fc:
9d:d3:3c:79:72:c1:a4:a8:6b:93:92:15:30:74:e2:
2b:e9:ce:88:0d:b5:1c:f4:d7:80:eb:e2:84:9a:33:
22:76:6f:f1:5e:40:1d:5a:7c:6a:91:dd:44:cb:62:
db:31:00:6c:69:b4:41:0c:d9:f9:66:72:60:a1:fc:
a7:df:8a:c2:40:0d:59:b1:b5:a1:e0:0b:c5:91:e6:
33:81:60:c4:9c:36:a6:d7:a4:ee:c2:92:ea:0f:41:
02:ac:1a:19:3c:da:06:e9:36:44:aa:e3:3f:c9:5e:
3c:f5:94:19:54:f1:37:24:e8:05:13:b3:57:d3:03:
6f:ea:52:0b:cd:2d:c4:b9:a8:50:0c:02:58:95:1f:
bd:98:08:f1:3d:ec:72:bf:35:ec:e9:47:a4:9f:8f:
1b:b4:f2:a2:5b:91:f4:99:33:7e:1d:b0:18:6e:e0:
73:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F6:4F:EB:52:6C:93:E3:D2:5C:DF:A7:8B:B0:2A:F5:60:5D:4A:BA
X509v3 Authority Key Identifier:
keyid:EE:07:39:D0:52:8D:CB:4F:CE:57:8D:11:F7:EC:34:B0:E3:74:52:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/mfZP61Jsk-PSXN-ni7Aq9WBdSro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:17fc::/48
Signature Algorithm: sha256WithRSAEncryption
ae:b1:f1:16:26:cd:7c:94:65:34:28:cd:5b:e6:8f:5b:c6:83:
88:04:9d:19:6a:e7:86:06:5e:e0:63:b1:d0:6f:ef:c5:1f:55:
2d:1d:a1:a0:44:b5:ea:4f:93:5e:d8:5a:90:3e:26:7e:2e:39:
e6:ee:1d:b0:92:cc:e0:56:0f:e1:7b:4b:dd:08:0a:92:2a:9d:
fb:48:c7:5d:2c:92:d2:d0:a0:32:c7:66:6a:36:82:29:cd:96:
c1:b3:41:38:e6:9f:94:81:66:86:eb:07:1c:33:4d:25:90:77:
40:ec:3e:09:b0:76:b4:17:0c:75:26:23:10:29:4a:20:aa:0b:
4f:cf:b6:0e:e4:da:48:7f:b3:38:b3:d4:dc:9e:89:32:53:65:
13:d3:5b:a6:da:a1:73:2a:d9:8d:21:9c:f0:25:b4:ca:72:3b:
ed:98:1c:bc:55:16:d8:46:f1:f4:eb:16:59:7c:a1:7f:63:50:
11:ff:74:2e:cb:af:59:28:f2:7d:8f:ab:db:b3:10:42:d2:6a:
fb:de:74:66:f8:a5:45:57:76:24:73:b9:32:67:5a:59:53:00:
a4:47:b3:68:19:7e:27:b5:58:9e:0f:ed:2e:11:29:e5:c8:91:
d5:40:79:53:92:b7:85:8f:4c:d6:ae:51:87:bb:bb:b1:8f:aa:
c2:fb:39:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 06:33:37 2024 by rpki-client on console-ams.rpki-client.org