Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/icYdpu9HcREOGMi2GAsXxpblwbE.roa
File: icYdpu9HcREOGMi2GAsXxpblwbE.roa (raw, json)
Hash identifier: Y02PZ7nm8ZckSBD/mChAGCBgS45TzPM3+Ig4mcq2bzE=
Subject key identifier: 89:C6:1D:A6:EF:47:71:11:0E:18:C8:B6:18:0B:17:C6:96:E5:C1:B1
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 018D844C1BBE7748795C806CC2F7BD24D914
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/icYdpu9HcREOGMi2GAsXxpblwbE.roa
Signing time: Wed 07 Feb 2024 15:59:56 +0000
ROA not before: Wed 07 Feb 2024 15:59:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215554
IP address blocks: 2a03:5840:116::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:84:4c:1b:be:77:48:79:5c:80:6c:c2:f7:bd:24:d9:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Feb 7 15:59:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89c61da6ef4771110e18c8b6180b17c696e5c1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d9:53:45:c7:7b:51:48:e0:69:f3:a7:09:90:
4d:eb:3c:f5:27:8f:01:47:00:43:f0:a7:1c:dc:68:
93:c5:42:c3:58:4a:e0:56:b0:4c:6a:4f:a5:23:c5:
22:c5:ff:bf:10:76:36:29:c7:75:03:0a:74:8a:05:
2a:37:1c:34:d9:61:a4:f6:79:c5:1e:7d:64:d9:cc:
89:ed:9d:2e:93:20:a6:1f:bc:58:86:b6:cd:b5:2e:
50:b9:d8:de:71:a4:f1:c4:e3:60:7c:8a:f6:21:73:
ae:af:dc:3e:e3:b2:c7:c2:7a:e5:9c:df:bd:df:b8:
27:9a:db:93:7b:9c:74:83:db:5a:71:7e:d1:5a:ae:
eb:aa:fb:90:24:3c:f1:a9:f8:8b:57:a0:21:8a:bb:
c8:08:16:c7:b0:fc:54:c9:5d:05:d2:1b:45:81:94:
18:d0:a8:90:f4:a1:73:77:94:f3:fe:6f:7d:14:b9:
96:a7:7b:15:1f:0b:6d:f8:15:0e:46:a5:f0:9c:3c:
fe:cb:eb:4c:76:e6:03:52:3f:80:57:8e:e8:e2:44:
93:58:37:41:8a:58:b1:0a:38:fd:db:f0:39:3f:f2:
37:34:f1:b8:c0:a5:12:80:4d:6d:16:0e:d7:70:e1:
3a:43:83:7c:19:b4:a0:26:49:bc:22:a1:63:a7:16:
2d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C6:1D:A6:EF:47:71:11:0E:18:C8:B6:18:0B:17:C6:96:E5:C1:B1
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/icYdpu9HcREOGMi2GAsXxpblwbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:116::/48
Signature Algorithm: sha256WithRSAEncryption
3b:56:59:6c:93:57:26:ec:95:53:a8:b9:01:79:1a:b1:4a:7a:
34:d5:ef:1b:7a:a1:ef:4f:4c:43:2c:0b:16:c2:56:dc:34:11:
a8:04:79:cd:45:85:8a:42:32:22:65:99:cf:f2:f2:bb:76:8d:
59:85:92:dc:64:d9:c1:51:db:da:78:ab:de:e6:af:f7:69:35:
dd:b8:ca:37:2b:c4:f8:97:b7:33:d5:ac:2b:0b:bb:62:78:01:
16:b8:f1:e4:ca:01:0f:f1:fe:d1:2a:29:2e:41:95:32:48:3a:
bb:06:c1:05:4d:73:bd:46:4e:bb:fb:e4:65:c0:8c:ae:a3:5d:
0a:58:09:f1:b7:a2:c6:a9:e0:9d:55:26:f4:fd:ea:c5:b3:cb:
87:96:45:86:fb:29:58:80:e0:76:17:d5:f5:10:af:9d:b6:96:
33:31:63:8e:46:bd:3b:77:b6:9d:21:e0:97:dc:cf:f2:38:49:
a5:34:74:a4:98:f6:3e:10:b4:58:9b:f5:9a:3a:a5:9a:5c:19:
d8:c2:4b:a7:d1:a5:35:1f:6f:f7:57:8e:02:9b:35:fd:b4:88:
6e:2f:3c:ea:7c:1c:50:a0:5f:f1:4b:08:6f:7f:47:e0:34:87:
72:3d:6c:77:5a:5f:20:8c:ed:40:b1:f8:92:bf:d7:03:bf:bf:
59:a2:ef:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:19:34 2024 by rpki-client on console-fra.rpki-client.org