Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/fvUKemEIJpfn_j3bnm3afrQiB4I.roa
File: fvUKemEIJpfn_j3bnm3afrQiB4I.roa (raw, json)
Hash identifier: ERPf+5SN3Q89DthAAuXM8c4lZZYmWJLq2OQ6W07dB/c=
Subject key identifier: 7E:F5:0A:7A:61:08:26:97:E7:FE:3D:DB:9E:6D:DA:7E:B4:22:07:82
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 018CC86FD9A58F1727BDBCB4D4C3C9C3FAA7
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/fvUKemEIJpfn_j3bnm3afrQiB4I.roa
Signing time: Tue 02 Jan 2024 04:30:22 +0000
ROA not before: Tue 02 Jan 2024 04:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199897
IP address blocks: 2a03:5840:f2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:d9:a5:8f:17:27:bd:bc:b4:d4:c3:c9:c3:fa:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jan 2 04:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ef50a7a61082697e7fe3ddb9e6dda7eb4220782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:af:b1:80:1f:84:bb:b1:41:5a:ed:65:8d:e9:
a6:68:66:c5:8f:61:cf:5a:fd:a3:1e:d7:79:9d:56:
36:d1:7a:28:ee:7c:fa:e6:5a:68:ad:61:50:de:90:
61:e5:d2:03:30:7c:3a:c9:95:f9:14:46:65:91:76:
bf:7f:0d:7a:ab:86:7b:2d:7c:f9:dc:2e:c5:c7:cf:
43:06:bd:b2:a9:f4:e4:df:d2:54:bc:19:49:27:0d:
a2:37:f7:1e:9c:46:a1:dd:fd:f0:4c:3e:f7:46:d2:
08:3c:83:8e:69:28:70:66:b9:3c:81:06:52:9d:0e:
c9:2c:32:50:83:a6:0b:99:59:10:08:1d:cf:85:2f:
46:39:65:f4:84:9e:95:2b:21:6f:6f:ab:40:97:d7:
fc:d2:68:42:5b:e9:8f:18:43:a8:85:66:b5:c2:4e:
57:7f:57:09:12:70:e1:36:be:28:9e:b2:d7:ff:28:
84:46:14:3e:d3:25:f3:1d:6e:aa:09:90:4a:a4:26:
94:89:e5:de:06:bf:a6:6b:30:9f:c5:e8:9b:50:2a:
95:ae:54:fe:bd:8e:1f:03:63:d4:75:fa:5c:03:7c:
85:19:64:70:d0:47:71:6b:4d:d6:9e:5c:2a:8e:c4:
87:ec:e9:59:b1:b2:d8:f6:64:a1:6e:f2:ad:dd:ec:
a3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F5:0A:7A:61:08:26:97:E7:FE:3D:DB:9E:6D:DA:7E:B4:22:07:82
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/fvUKemEIJpfn_j3bnm3afrQiB4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:f2::/48
Signature Algorithm: sha256WithRSAEncryption
96:0a:e3:1e:87:d3:06:e5:76:32:b3:c9:32:3f:dc:44:b5:0b:
a8:97:34:f6:00:eb:06:ed:3d:3a:fa:40:d1:b4:35:17:88:61:
e4:79:77:67:e2:18:12:7e:d9:81:c5:d0:0a:8b:66:30:e4:d4:
1d:e6:a8:c5:d5:33:75:53:64:28:44:a4:72:b9:cf:2f:34:2c:
0f:6f:35:80:ee:f5:d4:6d:02:22:92:0a:0c:e1:33:6f:42:3d:
23:01:4a:80:51:ce:a6:16:f4:3d:1c:06:d5:ce:9b:94:4f:06:
d8:dd:cd:19:b8:0c:7a:38:7b:c9:d2:48:c1:f3:81:b8:f9:97:
a1:18:9c:26:60:98:4c:b9:48:51:0f:21:39:90:a4:bc:5f:99:
f0:22:b9:6f:8a:0a:31:27:7a:00:83:c9:ce:a8:61:a0:fd:14:
34:5b:a9:de:a5:5b:f6:aa:f8:25:77:eb:3c:48:f0:95:c2:07:
03:6e:b3:4a:7c:bc:ae:06:e9:cf:c5:80:3c:7d:c4:6a:7f:3a:
dd:a1:ab:0a:c7:e7:b8:9c:27:d9:93:f0:82:cc:ce:04:c0:f9:
1a:37:c8:9d:55:25:e9:46:e2:82:9b:da:b0:d0:61:88:f9:8e:
2f:18:96:d1:a7:b3:a5:97:32:b2:6d:f4:89:57:00:e4:7b:66:
d4:d1:bf:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:19:34 2024 by rpki-client on console-fra.rpki-client.org