Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/dJ0TcqpCgkiQr2ht8PsHbjxbO6E.roa
File: dJ0TcqpCgkiQr2ht8PsHbjxbO6E.roa (raw, json)
Hash identifier: lCXUeO+uBYR7RsuqAga1ilVljDJ/QJQOUMHL8Yb3LT4=
Subject key identifier: 74:9D:13:72:AA:42:82:48:90:AF:68:6D:F0:FB:07:6E:3C:5B:3B:A1
Certificate issuer: /CN=d70e0c4b475010a5b42adef333c39bdc1adb9611
Certificate serial: 018CC2DB3E87D9C2F48D55C4116B62890252
Authority key identifier: D7:0E:0C:4B:47:50:10:A5:B4:2A:DE:F3:33:C3:9B:DC:1A:DB:96:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/dJ0TcqpCgkiQr2ht8PsHbjxbO6E.roa
Signing time: Mon 01 Jan 2024 02:29:57 +0000
ROA not before: Mon 01 Jan 2024 02:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59645
IP address blocks: 2001:67c:a44::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 22:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:3e:87:d9:c2:f4:8d:55:c4:11:6b:62:89:02:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70e0c4b475010a5b42adef333c39bdc1adb9611
Validity
Not Before: Jan 1 02:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=749d1372aa42824890af686df0fb076e3c5b3ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ff:4b:e6:cf:07:83:ab:0e:97:ad:59:3a:5a:
53:3f:ee:af:b6:fb:6f:33:9a:5a:72:2e:91:ff:ce:
a6:90:5d:f4:5e:96:83:2d:21:84:bd:c5:3c:72:4e:
9d:16:27:b3:ae:15:06:91:2b:23:0b:06:a5:5d:73:
c8:e9:b7:a2:6b:24:35:27:8d:0c:49:2c:fd:20:10:
6b:f8:ff:fa:e4:ca:d0:38:4e:97:6b:d1:b4:dc:5b:
d5:3c:6e:4a:9a:63:35:bd:e3:63:7d:23:1f:e9:4d:
d1:c6:70:a2:26:ab:98:e3:4e:39:60:d4:9d:68:f0:
ae:21:5f:4b:a1:c9:4d:78:d6:d3:87:6e:f7:54:06:
8d:f4:30:e6:bf:6f:12:c1:25:08:ea:a6:4d:b0:f8:
ec:92:03:d3:da:58:80:f3:b8:3f:ad:f3:ad:b8:97:
9e:83:ba:4e:2c:71:49:c0:fe:f7:55:7d:a0:56:fa:
0e:7b:2a:83:69:c6:f6:94:9c:1c:ed:91:68:ca:c7:
e6:65:10:35:4d:e9:5f:ce:d3:80:d2:ad:57:95:74:
62:e9:bc:e2:2d:b3:06:f5:a9:cc:1d:11:27:ba:2c:
cf:72:30:c7:68:cd:71:df:91:2f:38:09:4c:41:0e:
25:21:b4:29:bd:04:8b:0d:57:80:7e:b9:2a:4c:31:
54:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9D:13:72:AA:42:82:48:90:AF:68:6D:F0:FB:07:6E:3C:5B:3B:A1
X509v3 Authority Key Identifier:
keyid:D7:0E:0C:4B:47:50:10:A5:B4:2A:DE:F3:33:C3:9B:DC:1A:DB:96:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/dJ0TcqpCgkiQr2ht8PsHbjxbO6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:a44::/48
Signature Algorithm: sha256WithRSAEncryption
9c:e9:e0:76:29:5f:95:6a:7f:78:c6:e4:20:7f:65:2e:9d:b8:
4a:44:19:ef:36:a8:45:28:37:41:a6:38:d9:37:14:dd:8a:9e:
30:cf:e0:c8:f5:80:97:6f:32:ac:5d:0e:bd:7a:74:27:0e:ce:
bd:ad:ab:91:cb:18:da:c7:11:12:fc:32:de:ee:82:66:ed:69:
18:88:ff:91:1f:28:87:9a:46:e2:86:b5:0b:d3:27:65:50:b5:
eb:06:97:fb:71:f1:5c:d8:ca:6b:cb:bb:6a:3e:80:67:e2:ab:
76:8f:24:c5:83:38:95:59:e7:6e:f6:43:a3:97:c5:5a:11:d0:
83:82:b4:e3:75:97:41:53:02:c2:f1:ba:25:c4:67:70:5c:c3:
87:9f:9b:24:90:ab:01:92:31:c5:cc:92:b3:4d:74:5e:dd:8e:
35:cc:38:8f:80:25:82:77:35:23:91:26:6f:98:b3:28:7d:ec:
5f:27:79:c9:f2:e0:fc:a2:39:2a:40:14:59:4a:46:2c:77:dd:
af:c9:2c:38:8e:9a:e4:d3:ca:69:00:d6:1f:9e:04:92:4b:15:
44:c8:f1:18:b8:8f:fc:bf:a1:a5:e7:10:99:a1:06:18:98:bb:
b6:01:e2:0f:5a:26:5c:f7:86:92:5c:3a:b9:ce:ae:76:3a:df:
04:6d:f2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 03:57:25 2024 by rpki-client on console-fra.rpki-client.org