Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/i26ep6QxbhTPcm8PBdnvM8Kb_Do.roa
File: i26ep6QxbhTPcm8PBdnvM8Kb_Do.roa (raw, json)
Hash identifier: KfWfGJhpTrJIYffZRgQoOfRnVpIuFU3QGImF3NaD+W4=
Subject key identifier: 8B:6E:9E:A7:A4:31:6E:14:CF:72:6F:0F:05:D9:EF:33:C2:9B:FC:3A
Certificate issuer: /CN=cf6a7a426dc519963d33d2dc6cef782fd5f2dc77
Certificate serial: 018EA579783923849C78B3CC91DCA2862503
Authority key identifier: CF:6A:7A:42:6D:C5:19:96:3D:33:D2:DC:6C:EF:78:2F:D5:F2:DC:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/i26ep6QxbhTPcm8PBdnvM8Kb_Do.roa
Signing time: Wed 03 Apr 2024 19:39:45 +0000
ROA not before: Wed 03 Apr 2024 19:39:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215236
IP address blocks: 2001:67c:21a8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a5:79:78:39:23:84:9c:78:b3:cc:91:dc:a2:86:25:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6a7a426dc519963d33d2dc6cef782fd5f2dc77
Validity
Not Before: Apr 3 19:39:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b6e9ea7a4316e14cf726f0f05d9ef33c29bfc3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:59:23:f0:2b:49:1b:ec:d9:2a:7c:9c:66:3c:
ff:d2:b1:47:06:d8:fa:a3:a0:6b:c2:62:7a:98:e0:
97:46:5c:85:7e:9b:dd:24:6e:43:a1:22:fc:ff:78:
f5:20:a8:91:4c:e4:0f:c3:6c:f7:cb:ef:83:ce:f6:
7f:74:b1:92:61:fa:2e:de:ed:56:95:ba:d0:c6:07:
53:83:37:39:a5:8f:c4:ce:10:b9:72:18:f1:0d:1e:
dc:48:ac:bd:78:1e:9d:27:47:51:95:3c:f7:e3:a7:
20:da:71:1e:ff:d3:f4:7b:a3:3b:83:3b:75:ee:be:
58:30:4b:2b:d0:93:6a:da:11:4d:d8:88:2c:4c:eb:
57:4f:32:b9:7e:33:b5:f7:22:0c:26:e5:bb:32:1d:
d9:b2:ec:66:3f:3d:a1:d9:58:7d:35:d8:3c:6c:f5:
47:cf:a3:02:af:36:85:6f:b5:8d:a4:c3:5e:66:0b:
a0:8b:b8:4d:ec:2f:b2:99:76:88:10:d5:d9:46:58:
d7:54:30:24:de:13:bb:a4:a3:16:1c:b5:08:72:5b:
94:59:ea:59:a4:6e:e7:69:9b:0c:19:5a:2a:8f:cf:
4a:98:cc:8b:9a:3f:1a:69:49:f2:85:8f:92:3c:f6:
ad:00:15:bf:fa:9a:5c:9f:ff:b9:0b:df:dc:49:7d:
96:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:6E:9E:A7:A4:31:6E:14:CF:72:6F:0F:05:D9:EF:33:C2:9B:FC:3A
X509v3 Authority Key Identifier:
keyid:CF:6A:7A:42:6D:C5:19:96:3D:33:D2:DC:6C:EF:78:2F:D5:F2:DC:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/i26ep6QxbhTPcm8PBdnvM8Kb_Do.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:21a8::/48
Signature Algorithm: sha256WithRSAEncryption
da:95:ca:a8:41:3f:74:64:9d:0f:5f:a6:54:ab:80:f5:8f:58:
e3:d7:60:9b:1a:1c:f2:ed:14:06:06:c6:52:e5:dc:17:a0:bb:
46:30:be:86:d6:b8:58:d2:d6:06:f7:4e:90:cb:4e:1a:63:08:
9b:2d:29:ed:47:16:7f:5e:0f:78:34:2a:63:aa:77:45:c1:1e:
7e:97:a1:c8:c9:94:f6:d0:91:97:4d:69:10:41:52:7e:4b:0b:
96:b5:5b:43:7f:3d:9f:26:21:26:91:d6:aa:83:4b:f3:d9:6c:
3c:0b:f1:8b:e1:03:f1:dd:e9:90:84:b5:1c:2b:fe:31:80:43:
38:30:58:02:b5:ae:b2:2c:05:f8:83:d0:de:63:72:52:b7:de:
d0:8c:7c:fe:d0:2f:af:8f:c0:2d:90:e2:e9:13:94:d0:94:3c:
9f:b8:c1:ef:35:4a:c4:5e:98:55:5a:58:30:3d:20:8e:9a:9d:
c0:e7:35:18:ad:57:de:69:b2:97:c3:e1:d2:59:0e:67:ce:00:
f3:d4:79:cd:79:9d:c6:6d:9a:9b:99:80:6f:7c:ab:b8:89:5b:
7c:97:e2:a9:22:cf:98:4c:31:05:c1:f8:c1:6e:66:d2:ba:28:
3c:97:9e:10:23:43:ab:21:59:f4:72:18:c0:56:15:94:7a:98:
56:37:5b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:51:19 2024 by rpki-client on console-ams.rpki-client.org