Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/toTv4whlg9fhMWkYjCedIkuK7Tw.roa
File: toTv4whlg9fhMWkYjCedIkuK7Tw.roa (raw, json)
Hash identifier: SGkpA3C2QkTwud0AXn03BzTQVbgMw3a+IksnJYn/5qM=
Subject key identifier: B6:84:EF:E3:08:65:83:D7:E1:31:69:18:8C:27:9D:22:4B:8A:ED:3C
Certificate issuer: /CN=e1a5a17f50c135b1851cec2c76b0fd70f9dcc79e
Certificate serial: 018FAA8C138CF0BC4C508A901616CADA6376
Authority key identifier: E1:A5:A1:7F:50:C1:35:B1:85:1C:EC:2C:76:B0:FD:70:F9:DC:C7:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/toTv4whlg9fhMWkYjCedIkuK7Tw.roa
Signing time: Fri 24 May 2024 12:20:57 +0000
ROA not before: Fri 24 May 2024 12:20:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202731
IP address blocks: 2001:678:1e4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 20:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:aa:8c:13:8c:f0:bc:4c:50:8a:90:16:16:ca:da:63:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a5a17f50c135b1851cec2c76b0fd70f9dcc79e
Validity
Not Before: May 24 12:20:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b684efe3086583d7e13169188c279d224b8aed3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2f:0c:b9:a9:77:8a:77:84:fb:0a:56:cb:a9:
e4:05:d5:78:4b:24:c6:85:46:42:b6:94:81:c1:cc:
62:02:47:5d:d4:d9:3d:3e:94:78:ec:6f:7f:85:94:
19:88:b8:12:3b:3d:5b:ba:c8:6e:1c:08:05:53:38:
cb:6a:72:a8:ef:2d:66:6a:1e:b6:ef:77:6a:1d:dd:
72:82:58:5b:2e:70:ad:21:b6:fe:f7:a4:06:4d:c4:
b2:c1:a2:ce:e8:97:d3:82:92:d3:16:81:af:72:c9:
a8:8e:69:8f:3c:4e:1f:e2:ce:b9:ab:1c:44:bd:b4:
67:a6:82:ac:3f:9f:24:da:8b:b6:a6:45:17:bd:82:
70:4b:11:cb:b0:a6:39:86:8a:24:37:0c:b2:df:6b:
67:b9:47:c9:af:47:09:eb:c7:cd:27:e0:fc:46:f2:
ca:6a:d8:9d:15:3b:64:39:6d:14:3b:75:fb:02:60:
33:40:fa:a1:7c:a5:87:5e:92:0e:9d:c7:a1:2a:de:
8e:70:fd:6e:82:fd:45:2e:24:34:3e:2e:fe:a9:30:
28:42:d4:11:96:5b:6d:6a:6b:0a:a7:92:97:f7:9a:
c5:d7:4c:5d:54:65:e6:a1:18:55:8a:20:68:59:7b:
a1:03:3a:63:8c:fd:b9:16:29:5c:78:fc:ac:2b:45:
a2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:84:EF:E3:08:65:83:D7:E1:31:69:18:8C:27:9D:22:4B:8A:ED:3C
X509v3 Authority Key Identifier:
keyid:E1:A5:A1:7F:50:C1:35:B1:85:1C:EC:2C:76:B0:FD:70:F9:DC:C7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/toTv4whlg9fhMWkYjCedIkuK7Tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1e4::/48
Signature Algorithm: sha256WithRSAEncryption
81:c2:fc:54:b7:67:16:54:f3:61:98:cf:9a:1c:90:be:e3:61:
f8:21:65:9e:81:fe:14:67:36:7e:81:46:97:8a:88:50:db:d1:
93:75:e6:92:8f:9b:b9:cd:e8:42:ca:6f:9b:2e:ca:1d:0f:29:
dc:68:ef:5a:9b:94:42:72:40:be:cf:80:1b:0f:ef:21:d8:8a:
c5:11:f9:89:43:05:ee:50:73:bb:a2:08:0a:21:c6:5c:96:ef:
5f:d7:e7:ab:87:da:e4:4c:74:b8:1c:1c:be:55:0f:f9:63:0f:
d4:fc:f6:1a:eb:ad:19:5d:5b:83:ad:bc:93:46:8f:b1:52:2d:
35:e4:ef:95:b6:e9:38:eb:73:4a:40:35:05:76:42:ca:c7:a2:
44:af:28:b9:26:8b:81:2e:d7:cb:e4:78:c1:59:f7:ae:8c:5f:
02:70:2f:6f:f9:09:8a:3c:d9:f6:f8:d7:9c:b3:41:47:81:9b:
85:ff:84:c4:cd:18:a6:14:50:c2:ce:3f:23:12:23:c2:6a:51:
35:5d:7b:2a:91:52:c9:67:2f:6f:e6:c2:0f:60:c2:af:fe:2d:
97:73:04:89:47:d5:4a:4e:ec:ed:8a:79:b3:c8:53:42:bd:b7:
73:21:80:72:f7:e5:39:b1:90:3a:7c:b1:5b:ec:92:02:b5:73:
49:95:de:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:27:29 2024 by rpki-client on console-ams.rpki-client.org