Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/xBMFs5_0XPXWQqSLWrztsPWqV30.roa
File: xBMFs5_0XPXWQqSLWrztsPWqV30.roa (raw, json)
Hash identifier: BSqrmkr+ZbcZ7eP/q9ESAdXMOjepY/0I6e28SPsX1Ew=
Subject key identifier: C4:13:05:B3:9F:F4:5C:F5:D6:42:A4:8B:5A:BC:ED:B0:F5:AA:57:7D
Certificate issuer: /CN=d4f92129df7aaa7157e15973c24753e118c9057d
Certificate serial: 018CC801D373EE0FA412FF0C7712F69FA3E3
Authority key identifier: D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/xBMFs5_0XPXWQqSLWrztsPWqV30.roa
Signing time: Tue 02 Jan 2024 02:30:12 +0000
ROA not before: Tue 02 Jan 2024 02:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31424
IP address blocks: 2001:67c:2c08::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 10:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:d3:73:ee:0f:a4:12:ff:0c:77:12:f6:9f:a3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4f92129df7aaa7157e15973c24753e118c9057d
Validity
Not Before: Jan 2 02:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c41305b39ff45cf5d642a48b5abcedb0f5aa577d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ac:01:7f:7a:5e:74:64:80:c2:40:19:f9:b9:
dc:3b:ce:73:b6:a5:9f:0d:be:76:b1:71:58:a8:9d:
5e:bc:36:0d:55:01:31:79:a4:bd:8c:ed:56:8e:69:
8e:3d:b9:0c:74:f8:c5:52:cf:5c:f5:64:63:7a:60:
13:80:2d:72:1b:6e:7b:d0:ab:e7:9f:1f:c4:b7:a4:
2a:cd:f5:e4:56:6d:0e:63:3e:83:36:fc:c6:5f:1b:
4c:51:40:31:29:30:3d:42:ac:50:7a:94:6c:a0:33:
c6:46:05:76:cd:c0:dd:56:28:c9:2d:a0:40:33:4b:
2d:4c:3e:2d:a2:d8:2a:1c:c0:57:c3:6e:c6:5b:f8:
dd:23:34:b8:de:b9:f7:d6:a8:91:d8:06:26:b0:19:
2d:58:81:f8:bc:07:b2:e0:08:c0:ad:9c:3a:3a:92:
4c:ef:03:df:c1:5c:5e:5a:48:3f:67:85:af:48:cc:
00:6b:27:79:b0:6e:35:f6:53:2b:7c:c0:df:fd:6a:
da:bf:ac:a4:1b:05:c0:a6:20:64:b4:20:73:a6:34:
4d:2c:ad:ec:77:45:e8:79:2a:2c:cc:17:50:76:d3:
df:fb:7d:85:93:15:2b:fb:95:0d:d7:ec:66:8a:6c:
b2:00:0b:ba:40:fa:26:2b:fe:6d:3b:b1:67:2d:e7:
21:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:13:05:B3:9F:F4:5C:F5:D6:42:A4:8B:5A:BC:ED:B0:F5:AA:57:7D
X509v3 Authority Key Identifier:
keyid:D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/xBMFs5_0XPXWQqSLWrztsPWqV30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2c08::/48
Signature Algorithm: sha256WithRSAEncryption
c9:a1:3a:2c:46:d9:03:a0:b2:de:24:b9:d0:77:5a:01:fe:f7:
78:05:5c:cf:9c:04:cd:93:ea:c6:f9:db:46:b9:73:e3:e7:fb:
3f:cd:7f:8c:fb:e6:d6:99:d2:f8:11:15:a6:5e:00:cc:87:3b:
6a:0d:68:88:e2:cf:ca:0a:10:ba:73:40:96:d4:a2:0e:c9:a2:
17:3c:7c:08:55:9a:ac:3f:00:7e:5d:73:3c:0b:a4:d6:82:dc:
4b:0c:24:24:bf:6f:0c:be:b4:72:3d:12:fd:1c:46:41:aa:06:
e4:f2:44:c9:a3:e3:d2:c5:e9:d9:79:cf:7d:bd:25:a2:b5:28:
65:81:fb:8e:62:1c:cd:c8:63:e9:ed:17:15:bf:f8:0e:41:fe:
5f:6d:c5:b0:e2:58:00:2e:be:06:9e:76:08:4c:d5:b5:04:72:
78:5d:8f:f0:ee:9c:39:57:92:76:86:5e:00:4d:7a:61:09:f8:
c6:dc:ab:42:68:3c:fd:0c:6c:4d:4b:ff:d9:60:d2:02:dd:70:
69:6a:4d:b3:36:75:6e:5e:47:87:3d:3c:e7:bc:18:dd:ce:f2:
ec:06:69:34:3e:a8:4b:eb:c1:76:44:41:a2:b9:4c:7d:a3:88:
da:3e:e0:09:d7:16:4d:a7:0a:72:d7:7b:5d:55:ed:49:12:66:
d2:92:e7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 16:12:17 2024 by rpki-client on console-fra.rpki-client.org