Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/fSV7DynfknlorKYOgZB3D8P2hUo.roa
File: fSV7DynfknlorKYOgZB3D8P2hUo.roa (raw, json)
Hash identifier: 6Jnb1S9vVqMLQPOqfIzWznxVatgOOpbsbVrkh5hV700=
Subject key identifier: 7D:25:7B:0F:29:DF:92:79:68:AC:A6:0E:81:90:77:0F:C3:F6:85:4A
Certificate issuer: /CN=5f0fd90d987297cb5dd4e07be840d280d1e2cc4a
Certificate serial: 018CC4923098A12DEEC6B81CF950935D615B
Authority key identifier: 5F:0F:D9:0D:98:72:97:CB:5D:D4:E0:7B:E8:40:D2:80:D1:E2:CC:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xw_ZDZhyl8td1OB76EDSgNHizEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/fSV7DynfknlorKYOgZB3D8P2hUo.roa
Signing time: Mon 01 Jan 2024 10:29:24 +0000
ROA not before: Mon 01 Jan 2024 10:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61218
IP address blocks: 2001:67c:bd4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xw_ZDZhyl8td1OB76EDSgNHizEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:30:98:a1:2d:ee:c6:b8:1c:f9:50:93:5d:61:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0fd90d987297cb5dd4e07be840d280d1e2cc4a
Validity
Not Before: Jan 1 10:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d257b0f29df927968aca60e8190770fc3f6854a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6a:46:58:74:61:38:6d:98:0a:b8:33:06:54:
9b:6f:97:02:30:dc:60:a9:d1:07:8c:12:d5:09:6a:
67:04:9e:2e:a1:8f:d1:a7:09:ac:d7:3b:f3:80:6f:
18:fb:ec:24:83:64:e4:5b:68:6e:c5:ab:a2:11:32:
9c:32:ad:90:40:42:8e:5c:4e:c3:27:c5:1d:d1:9f:
e2:e5:f8:54:65:1f:fa:58:b6:6c:4b:36:75:99:c9:
21:60:62:62:87:b7:e0:d6:be:ce:74:21:1d:29:07:
b3:e5:9a:91:c9:33:04:78:72:79:50:f6:fc:2f:d9:
06:88:eb:09:eb:0d:d6:00:81:56:52:10:2b:d0:08:
3e:23:4a:57:e5:30:ca:a8:fe:75:83:08:cb:3a:47:
fd:57:06:d9:e0:a0:13:ca:69:d2:2d:32:9c:b6:96:
76:9b:14:fb:4d:df:7d:29:2e:c7:43:13:77:46:12:
8c:62:13:38:41:63:ac:a9:7c:dd:a4:9a:3f:50:6f:
e2:d9:5e:02:68:8d:36:3c:c9:7b:9b:53:af:90:24:
e2:d9:f9:11:c2:1d:c7:93:47:28:b8:c4:8a:4d:30:
44:9a:67:29:c9:79:5d:54:c8:35:7d:8b:d5:45:ba:
9f:70:a4:fb:04:7c:a9:f3:83:2b:c5:c6:c3:6c:0a:
df:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:25:7B:0F:29:DF:92:79:68:AC:A6:0E:81:90:77:0F:C3:F6:85:4A
X509v3 Authority Key Identifier:
keyid:5F:0F:D9:0D:98:72:97:CB:5D:D4:E0:7B:E8:40:D2:80:D1:E2:CC:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw_ZDZhyl8td1OB76EDSgNHizEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/fSV7DynfknlorKYOgZB3D8P2hUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:bd4::/48
Signature Algorithm: sha256WithRSAEncryption
bd:42:ce:6c:c2:94:69:44:38:c6:9a:87:08:df:e0:76:53:6d:
3b:f4:ce:7d:4a:ff:72:22:f3:dc:a8:0d:c9:59:c7:b0:fc:24:
30:9e:51:2e:e0:b9:c6:32:db:cb:d5:e3:8e:fd:f7:36:93:f3:
10:93:22:9e:95:7e:33:9a:ad:4f:10:63:d5:bc:cf:9e:31:7b:
98:e2:b3:4d:f5:a3:25:f4:ba:d6:d1:64:10:6e:ce:f0:b4:dd:
f0:9e:3d:95:8b:37:eb:24:55:30:4a:63:50:ce:8c:96:e0:b8:
df:eb:63:86:9c:27:c5:ae:bf:8e:d2:d9:7d:ac:28:d3:01:43:
68:cd:9c:c3:c5:49:78:8a:b3:97:9a:e4:25:68:a6:34:e0:e5:
ac:ae:4e:46:f6:2c:11:2e:80:a6:93:bf:1e:4d:8a:4e:59:e1:
d7:d8:38:fe:81:c3:bb:b0:f1:ce:69:c2:f0:2a:79:4e:cf:f7:
a4:bc:2b:42:e2:1a:9d:18:ce:11:6a:73:73:a8:42:5d:ae:17:
f5:85:d7:8f:d0:8d:04:a6:7e:c7:a8:66:b7:e1:69:08:af:fb:
8e:a5:f6:60:3d:a2:f2:aa:8a:d4:48:c7:f6:79:02:21:b5:79:
67:43:cb:11:30:2e:73:d1:80:36:b2:44:d0:85:1e:74:17:fb:
44:f0:3f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:47:56 2024 by rpki-client on console-fra.rpki-client.org