Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/58Nc687IvdOPxe9xxssjcVJGGTs.roa
File: 58Nc687IvdOPxe9xxssjcVJGGTs.roa (raw, json)
Hash identifier: w3F5RnFv6qhfGWR5IeraOL6RVm+z0QZTx09QbZguhys=
Subject key identifier: E7:C3:5C:EB:CE:C8:BD:D3:8F:C5:EF:71:C6:CB:23:71:52:46:19:3B
Certificate issuer: /CN=81c1aed74aad06b1b85c5ba6779c161f4a52b3c4
Certificate serial: 018CC86EFDC415E0B17D5DB823ACFA4942B7
Authority key identifier: 81:C1:AE:D7:4A:AD:06:B1:B8:5C:5B:A6:77:9C:16:1F:4A:52:B3:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/58Nc687IvdOPxe9xxssjcVJGGTs.roa
Signing time: Tue 02 Jan 2024 04:29:26 +0000
ROA not before: Tue 02 Jan 2024 04:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34601
IP address blocks: 2001:678:b94::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6e:fd:c4:15:e0:b1:7d:5d:b8:23:ac:fa:49:42:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c1aed74aad06b1b85c5ba6779c161f4a52b3c4
Validity
Not Before: Jan 2 04:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7c35cebcec8bdd38fc5ef71c6cb23715246193b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b9:0e:0e:ea:08:45:a1:39:54:d3:a1:4d:ca:
2d:bc:04:9a:cc:17:76:38:6d:57:1a:92:6e:4e:9b:
c6:b2:6b:c6:9b:fc:8b:d4:67:d7:0e:af:3d:4e:b4:
9c:cd:af:d7:88:49:2f:f7:22:6a:8d:4e:9d:c0:4b:
48:55:4c:0d:08:44:cb:cf:02:bd:7f:08:05:c3:3e:
b8:0a:51:b0:d4:bf:33:51:27:01:10:7b:02:73:06:
3c:5d:28:65:3b:4c:b0:a9:28:22:14:3e:ce:7e:6c:
de:ac:fd:b0:0c:52:d9:af:99:ec:42:13:42:68:e3:
b4:08:17:78:fb:6c:6c:d9:d1:97:fc:1c:69:19:6f:
20:7f:ee:a7:ff:9a:8c:51:4b:eb:a2:51:4e:1a:be:
64:69:6f:82:20:1b:ac:9c:2e:4b:41:75:61:06:a3:
66:ee:01:c1:f1:76:56:be:cd:1e:2a:6a:73:db:1f:
bb:0b:ff:bd:e4:27:be:db:d4:9b:e9:91:d9:d1:b8:
ef:43:02:43:ba:64:48:9c:28:ac:38:c4:20:be:3f:
1d:b3:07:f3:73:fc:7c:30:5f:6a:a0:eb:8f:de:a6:
e7:e9:20:fe:f6:8e:94:79:80:a5:b8:a3:3f:95:1a:
73:bc:78:2b:1d:b9:09:47:08:c4:86:ad:24:30:fd:
9d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C3:5C:EB:CE:C8:BD:D3:8F:C5:EF:71:C6:CB:23:71:52:46:19:3B
X509v3 Authority Key Identifier:
keyid:81:C1:AE:D7:4A:AD:06:B1:B8:5C:5B:A6:77:9C:16:1F:4A:52:B3:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/58Nc687IvdOPxe9xxssjcVJGGTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:b94::/48
Signature Algorithm: sha256WithRSAEncryption
bd:f2:95:90:3b:8f:c8:37:c4:3a:28:dd:14:5a:5c:9e:06:e7:
61:09:a0:43:19:d9:90:b7:40:3a:b2:34:92:93:16:99:08:89:
17:e2:0a:85:b0:c8:6b:e6:a7:13:f2:e0:7c:df:29:38:29:40:
b7:c5:7c:70:0c:f3:df:98:c9:e7:bf:73:2b:b9:df:94:ea:b3:
3b:eb:48:01:3f:14:e9:98:db:34:f5:bf:83:aa:42:92:0d:3f:
af:19:13:a2:b5:76:c2:ec:8d:b5:3e:d2:89:06:90:b4:c5:ee:
88:e1:1b:ff:46:b1:59:75:30:ae:3f:97:83:71:9b:f4:da:09:
f7:0f:c7:97:99:78:e7:5e:ea:4b:c9:dd:26:e3:39:25:9e:4c:
18:8b:09:cf:5d:b2:9f:85:96:94:19:fa:87:35:f6:d9:14:e1:
80:c6:65:68:e0:b5:d6:be:07:37:40:b7:b6:40:e0:35:09:07:
4d:fd:06:3a:ce:67:c2:c8:cb:9b:c6:67:9b:75:f7:ec:c6:c7:
f5:d6:f0:2e:ed:f3:06:a6:32:1d:a3:78:78:53:22:b5:cb:84:
e0:cd:77:d0:f6:9e:a3:c3:01:1a:a7:33:01:1d:df:23:d8:3e:
c1:07:9d:4c:dd:da:71:9e:f8:a6:de:0f:54:e1:b0:a2:89:b5:
b9:27:74:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:11:29 2024 by rpki-client on console-fra.rpki-client.org