Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/DbnjwXzvALb4Lrbb27sV0aGzzd4.roa
File: DbnjwXzvALb4Lrbb27sV0aGzzd4.roa (raw, json)
Hash identifier: 6riWSnLDf2foobhTLRSxKrATYvXh/0mfI+4vw9xe1iE=
Subject key identifier: 0D:B9:E3:C1:7C:EF:00:B6:F8:2E:B6:DB:DB:BB:15:D1:A1:B3:CD:DE
Certificate issuer: /CN=1cbd5746e300091ded1a11a13b16807b4fd0f1fc
Certificate serial: 018DA7ECFAD7CAC73FAE54CAB7EE790F7A86
Authority key identifier: 1C:BD:57:46:E3:00:09:1D:ED:1A:11:A1:3B:16:80:7B:4F:D0:F1:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/DbnjwXzvALb4Lrbb27sV0aGzzd4.roa
Signing time: Wed 14 Feb 2024 14:02:22 +0000
ROA not before: Wed 14 Feb 2024 14:02:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215495
IP address blocks: 2001:67c:dec::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 00:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a7:ec:fa:d7:ca:c7:3f:ae:54:ca:b7:ee:79:0f:7a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cbd5746e300091ded1a11a13b16807b4fd0f1fc
Validity
Not Before: Feb 14 14:02:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0db9e3c17cef00b6f82eb6dbdbbb15d1a1b3cdde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:be:f6:38:c4:66:61:71:8e:c8:2d:50:af:b6:
31:41:4a:26:72:d2:2a:03:82:09:4f:93:0d:6c:7d:
ca:93:2a:33:0a:fa:59:38:57:0a:b7:c6:83:a0:21:
54:c0:47:8f:84:cd:cc:3c:80:1c:41:38:2e:5f:3e:
cb:b7:e0:e0:23:5d:b2:59:e8:c0:15:ec:36:56:6f:
db:cf:18:f6:32:eb:a7:d2:9e:65:19:bc:65:1b:3a:
c3:6f:58:36:af:75:72:97:27:9d:51:1e:c8:b3:f5:
25:fa:b8:f4:b8:f8:b5:ca:6b:73:02:07:81:62:30:
1a:25:6b:24:5e:a5:53:d1:04:e1:8f:b1:db:d3:ee:
44:b5:07:26:71:e4:7e:7b:4b:f4:aa:53:f9:1e:9d:
14:9c:50:69:0f:28:14:66:c3:d1:a1:ef:4c:92:59:
13:0c:5a:f7:3e:73:ae:b9:7a:91:a9:1b:89:68:e2:
91:44:a3:5d:48:e8:bd:01:5a:c3:6d:ef:00:bb:ba:
2a:8c:a8:90:fb:a7:09:ac:c5:ab:84:f9:73:22:83:
c7:c1:68:66:a4:e6:ab:25:dc:9f:d7:2b:71:37:e9:
15:a4:8c:39:39:cb:3a:dc:64:96:4d:18:7b:28:46:
6b:19:d8:4c:f6:ea:f6:0e:a9:42:6e:ca:2d:9b:39:
f1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B9:E3:C1:7C:EF:00:B6:F8:2E:B6:DB:DB:BB:15:D1:A1:B3:CD:DE
X509v3 Authority Key Identifier:
keyid:1C:BD:57:46:E3:00:09:1D:ED:1A:11:A1:3B:16:80:7B:4F:D0:F1:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/DbnjwXzvALb4Lrbb27sV0aGzzd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:dec::/48
Signature Algorithm: sha256WithRSAEncryption
18:bc:3c:6b:19:dc:1b:43:66:c0:0d:f9:32:7c:1f:28:31:d1:
29:2a:14:0c:eb:c0:fd:48:26:ed:9f:35:27:6a:1e:bb:7d:50:
e9:d9:42:9b:30:6e:2c:69:55:b0:54:08:15:97:9c:54:18:ea:
c7:f4:c8:17:aa:2a:58:ae:6d:48:9f:15:41:28:e5:31:6d:5a:
4a:fc:d7:05:fb:42:3b:ba:e3:4d:d1:ae:20:b2:e9:e5:07:54:
ce:16:cb:f4:d5:88:d9:b6:bf:00:ab:9a:5c:d5:b0:1b:ea:a7:
e8:b8:ba:e2:ce:63:4f:ae:3f:28:9f:ae:d8:d9:d5:18:71:f4:
30:e3:13:f0:5e:94:ce:a7:08:21:cf:9e:5b:b1:a7:34:f0:29:
b4:4d:b9:94:25:0a:60:e3:75:0f:3c:97:57:ea:eb:07:33:d0:
06:83:a8:61:fc:72:24:a9:fe:60:29:59:49:bc:1f:e0:af:b3:
d6:4a:be:8c:ca:f3:ff:f0:cc:c4:83:b9:eb:0c:72:5f:10:a3:
24:ed:02:ea:8b:bc:5e:24:9f:35:a7:fa:48:dc:5f:39:81:2c:
9c:85:9d:65:59:e7:23:03:1e:c8:95:1c:43:25:29:c1:1b:f4:
41:c7:66:d3:76:39:e9:b1:68:a8:35:cc:ea:4e:a2:98:2d:69:
8e:bd:0a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:14:53 2024 by rpki-client on console-fra.rpki-client.org