Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/21hYhFiZ0_n-69vO5VtzPYZADHE.roa
File: 21hYhFiZ0_n-69vO5VtzPYZADHE.roa (raw, json)
Hash identifier: N6CLe/NmN3KcQ2z2H5dt1DQb3mz1MSCXv3zQtPg/j8Y=
Subject key identifier: DB:58:58:84:58:99:D3:F9:FE:EB:DB:CE:E5:5B:73:3D:86:40:0C:71
Certificate issuer: /CN=e769bad3061832de9b7d7c373737f4346c6c06e6
Certificate serial: 018CC500155FE03FBD809353C866A246AD80
Authority key identifier: E7:69:BA:D3:06:18:32:DE:9B:7D:7C:37:37:37:F4:34:6C:6C:06:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52m60wYYMt6bfXw3Nzf0NGxsBuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/21hYhFiZ0_n-69vO5VtzPYZADHE.roa
Signing time: Mon 01 Jan 2024 12:29:26 +0000
ROA not before: Mon 01 Jan 2024 12:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201567
IP address blocks: 2001:678:13c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/52m60wYYMt6bfXw3Nzf0NGxsBuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:15:5f:e0:3f:bd:80:93:53:c8:66:a2:46:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e769bad3061832de9b7d7c373737f4346c6c06e6
Validity
Not Before: Jan 1 12:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db5858845899d3f9feebdbcee55b733d86400c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3d:6a:db:ad:82:80:53:78:42:72:f4:d1:44:
eb:27:7f:b5:99:81:16:c4:e8:21:30:72:86:47:39:
73:f6:19:2c:06:c9:c0:2b:de:05:5c:32:e4:15:c8:
85:fe:14:f5:6f:b2:4f:c9:24:68:4a:13:fd:18:10:
94:f7:d1:82:52:d1:ea:bd:6f:87:d4:05:49:9f:3d:
72:88:9e:91:97:7c:71:3e:14:86:58:12:d3:1b:f8:
54:54:78:7d:37:79:b3:d3:96:0f:17:47:da:aa:37:
20:6f:ea:70:bb:10:d9:00:47:39:67:f4:1d:ef:d7:
90:18:a7:a2:6e:ab:66:4d:14:b1:04:f7:66:bd:f2:
4f:4d:1d:ae:1b:82:c3:fc:1d:91:3f:32:46:88:22:
28:d5:42:cb:c9:59:39:c1:3f:8b:70:c4:c9:5e:dd:
3a:e9:78:c1:7a:70:06:b6:5c:dc:c5:15:f9:72:de:
b1:6f:6c:e8:ac:96:42:5d:9c:b4:e8:0f:80:c6:9d:
d0:61:ba:5d:27:30:a8:b8:98:57:f8:d2:43:44:70:
35:fc:9b:a4:e5:47:d0:85:ce:cd:7b:82:06:1e:25:
71:fd:dc:25:5c:bd:5b:82:46:e7:52:86:3b:28:58:
3d:4c:d3:f7:e6:33:a1:c4:dc:21:1c:63:c8:01:c4:
d9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:58:58:84:58:99:D3:F9:FE:EB:DB:CE:E5:5B:73:3D:86:40:0C:71
X509v3 Authority Key Identifier:
keyid:E7:69:BA:D3:06:18:32:DE:9B:7D:7C:37:37:37:F4:34:6C:6C:06:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52m60wYYMt6bfXw3Nzf0NGxsBuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/21hYhFiZ0_n-69vO5VtzPYZADHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d1bcda-9270-43a3-baae-2cc8dc4f0220/1/52m60wYYMt6bfXw3Nzf0NGxsBuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:13c::/48
Signature Algorithm: sha256WithRSAEncryption
98:df:49:59:3b:42:9f:99:6b:54:76:2d:b9:80:6a:d9:73:4a:
a9:02:75:b9:8a:ac:fd:23:2d:e0:f2:8b:d8:71:bb:1a:29:e2:
b8:ac:40:38:a4:b6:1e:52:2a:db:88:47:01:00:c3:bd:02:40:
b4:0e:d4:dd:6e:3c:f5:8c:ab:66:56:37:14:cc:41:f8:a6:9f:
f1:07:d8:60:9e:38:91:e6:5c:c8:3f:4c:64:99:ad:a5:62:bc:
e4:d2:08:6f:40:36:f0:72:49:50:96:36:27:e0:77:a8:de:f5:
f3:60:d1:97:4a:c8:19:15:f8:09:34:80:10:9e:93:80:b8:61:
f5:77:e3:eb:e6:b4:31:bf:12:07:90:c5:7e:a1:d8:63:f6:e7:
01:37:21:58:10:7d:7f:e6:64:65:c9:b9:39:1d:9f:1f:38:f9:
ad:59:fd:09:51:ba:9c:1a:a8:be:05:ec:46:2c:21:ca:ca:31:
db:29:86:03:0a:c6:37:93:30:31:ae:ed:2c:a0:d4:57:81:ef:
5e:71:8c:5e:b6:37:0d:94:46:09:08:af:6d:6f:5d:91:3c:36:
f8:f2:8e:39:0a:26:3b:73:23:81:79:38:1c:51:f0:66:e9:1f:
da:c2:82:db:a0:a8:9a:ce:a0:be:5e:95:49:93:98:6c:46:2d:
b1:d7:8b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 08:33:06 2024 by rpki-client on console-ams.rpki-client.org