Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/J8-PqKXLKprLZa67IT7Okq7NDEA.roa
File: J8-PqKXLKprLZa67IT7Okq7NDEA.roa (raw, json)
Hash identifier: cCSd54AzWFQJHcMzHD6IJiHasyEimZEu0nUKC/p8NvY=
Subject key identifier: 27:CF:8F:A8:A5:CB:2A:9A:CB:65:AE:BB:21:3E:CE:92:AE:CD:0C:40
Certificate issuer: /CN=42f51aeaf774b633a47f960a7089b15b35b1a4cb
Certificate serial: 018CC2DB3CF2B66B237EC3717C06434A6DC9
Authority key identifier: 42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/J8-PqKXLKprLZa67IT7Okq7NDEA.roa
Signing time: Mon 01 Jan 2024 02:29:56 +0000
ROA not before: Mon 01 Jan 2024 02:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216145
IP address blocks: 2001:67c:15cc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:3c:f2:b6:6b:23:7e:c3:71:7c:06:43:4a:6d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f51aeaf774b633a47f960a7089b15b35b1a4cb
Validity
Not Before: Jan 1 02:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27cf8fa8a5cb2a9acb65aebb213ece92aecd0c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c3:17:d6:52:64:67:d2:8c:aa:c0:ee:a1:c5:
3e:c8:45:6b:25:22:df:40:ca:05:69:12:a6:7a:58:
2b:73:3f:a5:f2:ba:aa:2d:8b:8b:08:e9:e5:96:0d:
02:c6:f1:9b:24:95:22:6d:63:4d:f7:9d:a0:94:33:
32:3b:ed:e3:61:b5:82:fe:6a:74:21:54:25:c4:99:
38:f9:e0:61:45:5b:f7:e8:2a:19:80:c7:e7:a9:04:
d0:67:17:1a:cc:5f:42:ce:fe:6e:97:66:1f:84:c3:
e6:c1:ca:08:00:31:64:c2:cb:51:82:5d:77:06:9a:
b9:8c:2c:b9:25:da:5e:e3:04:b7:74:6d:e8:cf:9a:
d5:ee:91:bc:23:82:a2:f1:0b:1d:9a:96:14:d4:12:
6f:be:23:25:e3:3d:03:24:08:d6:cb:20:3c:4e:86:
27:6a:a9:70:2e:45:c1:16:40:62:6b:38:76:a5:55:
4d:4b:5f:1d:4b:d7:54:5e:50:b5:4d:bd:56:87:53:
78:ac:75:50:99:1c:b6:5b:47:be:3a:36:bd:5c:86:
b1:b7:57:f5:60:cc:17:de:eb:96:b2:a9:07:35:be:
96:bf:f4:5f:64:08:b2:8a:cb:be:36:a6:8b:93:03:
3d:84:7f:58:8d:3c:6f:0a:5d:56:13:83:e9:21:df:
2b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:CF:8F:A8:A5:CB:2A:9A:CB:65:AE:BB:21:3E:CE:92:AE:CD:0C:40
X509v3 Authority Key Identifier:
keyid:42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/J8-PqKXLKprLZa67IT7Okq7NDEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:15cc::/48
Signature Algorithm: sha256WithRSAEncryption
95:83:14:fb:07:52:f6:e9:73:e2:2d:97:77:1b:03:79:bb:f9:
82:37:f2:9a:a0:86:8a:7b:5b:b5:bf:e7:43:66:6f:3e:6f:eb:
51:b3:08:eb:b4:8e:ea:dc:b4:9a:20:be:0a:76:c1:e7:d9:1e:
9f:f8:f0:6d:0e:e6:e1:2c:64:3d:30:d0:0f:1a:e7:8c:d5:8f:
c0:41:33:b7:8f:1f:f4:b8:0d:20:dc:a2:49:c5:ae:4f:48:2a:
ee:c8:3b:24:00:5e:75:ba:fd:7b:1f:63:9e:54:bc:5f:31:8a:
ef:ae:39:3a:ca:02:cc:ae:f9:c0:3f:64:94:75:c0:b2:27:8b:
9c:a0:9d:40:b6:9b:ec:4f:33:e9:3e:f4:45:c8:0e:49:0d:24:
7a:d4:f4:64:b1:03:47:ef:ff:ed:51:e9:61:db:6e:13:ce:9a:
b3:1a:28:bb:0d:7a:95:13:10:27:12:23:55:74:e2:68:a5:76:
30:20:85:ee:fd:a2:82:a6:c0:cb:97:74:e0:ab:3e:c2:53:2c:
e4:27:97:8e:db:b8:66:47:c7:b8:a9:80:55:b6:69:cc:29:01:
c8:2d:be:2c:24:02:f5:43:40:53:eb:62:8b:d5:da:6c:94:20:
40:1e:af:b2:32:7f:db:4a:3d:6d:58:97:e4:cf:ce:9d:61:36:
1f:1b:47:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 16:45:19 2024 by rpki-client on console-fra.rpki-client.org