Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/T16V1FFZnEBdaYrYFY-Uc_3Czvk.roa
File: T16V1FFZnEBdaYrYFY-Uc_3Czvk.roa (raw, json)
Hash identifier: djoXr12LBfgV3Mk6rmeJnlQkZlp0wHsUY0mfOcYq/O4=
Subject key identifier: 4F:5E:95:D4:51:59:9C:40:5D:69:8A:D8:15:8F:94:73:FD:C2:CE:F9
Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601
Certificate serial: 018CC7261D4F4717A185D826F2815E908707
Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/T16V1FFZnEBdaYrYFY-Uc_3Czvk.roa
Signing time: Mon 01 Jan 2024 22:30:12 +0000
ROA not before: Mon 01 Jan 2024 22:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213045
IP address blocks: 2a13:1c47:ffd0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:1d:4f:47:17:a1:85:d8:26:f2:81:5e:90:87:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601
Validity
Not Before: Jan 1 22:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f5e95d451599c405d698ad8158f9473fdc2cef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7f:2e:9a:ab:1e:c8:c9:f6:f1:d5:72:a6:d2:
83:f2:51:56:43:27:8a:e9:c1:65:52:8a:b0:e7:90:
c4:c0:6d:ef:05:0e:f2:5e:8e:fb:43:f6:7f:d5:60:
54:9b:b7:b2:c4:ed:90:84:7e:90:57:a1:03:59:8c:
11:a1:7e:47:2b:e6:95:dc:1a:c6:36:fd:ef:4f:ba:
38:4d:17:8c:ef:48:f5:f0:14:4e:b4:8e:f8:de:d1:
64:bb:cf:3a:38:9f:df:63:17:25:2f:e1:5e:8e:2a:
66:be:7f:c7:02:01:19:a2:d1:76:09:99:85:f3:cd:
cc:60:cd:d2:d2:b8:83:46:5c:86:55:ab:9d:be:6b:
a0:33:02:99:26:08:0e:82:15:13:e5:d3:00:8b:8b:
cd:a8:b7:92:db:c4:7a:2f:f7:84:be:c6:05:03:87:
f8:b3:bb:67:35:fd:1a:22:ba:44:9e:b5:23:61:6d:
7b:7d:bb:26:93:f0:66:35:f1:5e:7e:27:35:25:a5:
7c:bb:47:1b:41:25:12:76:98:52:1e:8b:27:67:4a:
a0:04:86:4f:ad:80:00:f3:40:4b:6f:39:d1:3b:07:
36:5f:04:7f:fe:7a:74:e7:8c:93:0e:36:97:d9:95:
7c:25:86:f6:ab:6e:bf:12:9f:a5:1b:a8:93:bc:13:
f3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5E:95:D4:51:59:9C:40:5D:69:8A:D8:15:8F:94:73:FD:C2:CE:F9
X509v3 Authority Key Identifier:
keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/T16V1FFZnEBdaYrYFY-Uc_3Czvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:1c47:ffd0::/44
Signature Algorithm: sha256WithRSAEncryption
e4:1b:d3:77:05:d2:a0:40:92:61:46:85:cd:a7:4b:fe:bc:50:
04:38:96:61:c9:8d:1c:cb:85:ea:f4:2c:75:74:38:0c:9d:64:
f3:61:8f:d3:50:19:f1:c5:a4:f8:28:d0:0a:22:fe:d1:4b:38:
de:ef:9f:d0:b1:1e:a9:1d:27:9f:7e:89:f7:b1:9e:48:04:64:
34:4b:ec:04:f2:34:54:3b:5f:49:28:2d:87:4f:92:4b:41:d4:
6b:fb:8d:d4:81:df:09:eb:5b:c8:93:01:0d:b1:58:5b:c9:32:
84:cd:62:66:ac:1f:c4:ac:da:76:2c:73:9c:57:98:2a:e2:c7:
dc:04:3e:81:23:af:e9:01:9f:91:bc:0a:40:cf:7a:03:f1:b2:
ed:c7:c9:a5:7a:ea:31:5e:0a:c0:b0:dc:e1:dc:4f:c6:fd:53:
72:0e:0c:42:b9:1d:1b:e1:d3:2e:4d:87:d2:f8:16:11:41:55:
02:25:d6:63:0a:4b:22:ed:f5:ae:e1:47:94:de:59:4a:80:70:
1a:15:d6:53:1b:92:31:0c:22:40:34:12:1b:45:72:ae:83:1d:
0e:a0:38:2e:e8:67:25:1d:a4:47:b8:ee:05:36:f6:38:34:6a:
8f:6a:d1:25:c5:24:d8:3a:1a:c7:92:4a:a9:14:ee:60:26:01:
a8:d6:86:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 23:27:07 2024 by rpki-client on console-ams.rpki-client.org