Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/3Qqh3hgmrwVwDWK0w5x5rpYtcnQ.roa
File: 3Qqh3hgmrwVwDWK0w5x5rpYtcnQ.roa (raw, json)
Hash identifier: YNoQbK8h27ICJfT4uIDHPOEIeHGULhsegYY5VHu8Nsc=
Subject key identifier: DD:0A:A1:DE:18:26:AF:05:70:0D:62:B4:C3:9C:79:AE:96:2D:72:74
Certificate issuer: /CN=8e615e51bf61aa74bf397255199759cfec7cc9bb
Certificate serial: 0190D8F4C89B5E2858FA930CB812E91963DD
Authority key identifier: 8E:61:5E:51:BF:61:AA:74:BF:39:72:55:19:97:59:CF:EC:7C:C9:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/3Qqh3hgmrwVwDWK0w5x5rpYtcnQ.roa
Signing time: Mon 22 Jul 2024 05:40:39 +0000
ROA not before: Mon 22 Jul 2024 05:40:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57536
IP address blocks: 2001:67c:26a4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:d8:f4:c8:9b:5e:28:58:fa:93:0c:b8:12:e9:19:63:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e615e51bf61aa74bf397255199759cfec7cc9bb
Validity
Not Before: Jul 22 05:40:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd0aa1de1826af05700d62b4c39c79ae962d7274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b2:a9:a2:1e:5e:db:a2:6c:3d:41:f4:59:08:
fd:7a:37:83:60:02:c8:0a:53:5c:30:81:b3:6d:80:
81:8e:79:f2:95:f4:c3:7e:d4:61:6b:d5:8d:97:2d:
f6:22:fb:26:09:aa:c0:08:45:6d:1a:d7:af:a4:7a:
ff:a9:37:36:3f:d1:d9:1e:6a:e9:a9:68:81:44:99:
98:51:0c:89:37:db:e0:07:be:ab:67:a0:4d:14:9f:
e7:47:f9:61:e4:d6:75:1e:f4:2a:12:e7:e8:f1:c9:
d0:97:a8:03:4b:88:65:2e:72:21:4c:9c:a4:89:4b:
78:19:ff:97:14:d9:5a:85:0b:91:ac:b8:e6:0d:e8:
70:af:61:d0:e4:fe:60:d3:82:b8:f4:27:0c:6b:4f:
07:ab:63:5e:39:06:b6:33:5c:9b:aa:ae:a4:35:c4:
81:6e:54:0e:2b:b8:b9:d1:3a:de:ff:88:ae:65:2f:
78:1f:50:a2:6f:d0:e5:65:5e:21:4c:90:6d:9e:ad:
e2:7c:ba:ab:8e:76:d0:01:e1:ff:6f:f2:93:27:21:
33:ee:20:9e:87:a8:03:31:4b:ec:8b:46:81:7a:13:
35:98:d2:64:44:5e:d2:a6:e1:7a:9d:fb:e3:cf:8a:
87:b0:76:e5:be:e0:1a:fc:a8:90:fa:78:8e:7f:41:
12:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0A:A1:DE:18:26:AF:05:70:0D:62:B4:C3:9C:79:AE:96:2D:72:74
X509v3 Authority Key Identifier:
keyid:8E:61:5E:51:BF:61:AA:74:BF:39:72:55:19:97:59:CF:EC:7C:C9:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/3Qqh3hgmrwVwDWK0w5x5rpYtcnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:26a4::/48
Signature Algorithm: sha256WithRSAEncryption
5b:d2:0f:89:3a:c2:5f:33:eb:14:71:c0:d7:fb:9c:ea:a2:a5:
7f:00:3b:a3:5a:42:96:41:2b:4a:a4:26:c7:17:8a:a8:93:02:
fc:3c:ae:f3:8d:7a:4b:da:a5:ce:29:89:57:62:1c:db:94:b6:
7b:98:2c:ae:58:03:cf:5c:a6:c6:34:f2:60:70:7b:9b:9c:87:
b8:ec:40:98:ce:1d:34:d7:06:ad:dd:4f:dd:7e:fd:e7:8a:e4:
dc:9d:dc:c0:8e:ac:75:b3:18:45:59:32:f0:cf:ba:1f:82:aa:
59:28:17:d8:de:a6:0b:9d:3d:d8:f0:ea:b2:59:dc:87:64:b8:
60:37:5e:eb:f9:f8:8c:96:58:94:dd:92:c2:20:8f:51:cc:cf:
f0:ef:cd:de:09:f2:2d:b0:43:95:59:4e:27:6a:3f:d0:42:14:
05:f0:a9:d9:c1:19:1a:ec:e8:08:02:5e:d0:4e:db:9b:4e:fb:
62:1c:da:7c:09:a0:14:d9:46:5a:c0:ab:ae:e3:15:80:98:4b:
d4:58:ae:6a:94:57:a7:69:c9:a8:5c:dc:28:c6:23:f2:84:cc:
7e:d8:77:9c:2a:ae:9e:74:b9:df:04:cb:ca:01:0b:1c:47:e7:
d2:b4:95:8f:82:e9:a2:3b:3c:95:b4:9c:e3:d7:a6:82:1b:fe:
27:f2:ed:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:26:26 2024 by rpki-client on console-ams.rpki-client.org