Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/iFJj2mbQIZKbb6EzVTfQdeeykVc.roa
File: iFJj2mbQIZKbb6EzVTfQdeeykVc.roa (raw, json)
Hash identifier: ZGRbQ8bse2z1YSZ5/uCm+5mz0v9RWiSGPxQlXJmBZv0=
Subject key identifier: 88:52:63:DA:66:D0:21:92:9B:6F:A1:33:55:37:D0:75:E7:B2:91:57
Certificate issuer: /CN=849e3adff03aab62d5db223ac3b35e2a9baa4ea3
Certificate serial: 018CC7945E390BB0D367C0E889D7C37EAA9E
Authority key identifier: 84:9E:3A:DF:F0:3A:AB:62:D5:DB:22:3A:C3:B3:5E:2A:9B:AA:4E:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/iFJj2mbQIZKbb6EzVTfQdeeykVc.roa
Signing time: Tue 02 Jan 2024 00:30:38 +0000
ROA not before: Tue 02 Jan 2024 00:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20712
IP address blocks: 2001:67c:2058::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:5e:39:0b:b0:d3:67:c0:e8:89:d7:c3:7e:aa:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849e3adff03aab62d5db223ac3b35e2a9baa4ea3
Validity
Not Before: Jan 2 00:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=885263da66d021929b6fa1335537d075e7b29157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:10:72:74:8e:af:ca:74:11:5a:d0:e0:cf:3e:
17:bf:0b:c3:25:90:6e:f5:05:b7:a8:01:26:c6:1c:
d7:06:c5:36:2c:78:db:47:b2:21:a3:64:21:9a:9a:
95:ed:b2:ab:3c:c5:c8:64:cd:96:89:34:65:b3:80:
bf:f2:7d:18:e5:0e:86:af:ae:23:67:d4:5a:b4:54:
9f:22:db:8c:c2:fc:84:39:c9:54:ab:8f:68:06:74:
fd:23:8f:4a:a9:5d:3c:6c:57:ee:21:ee:44:99:cc:
f6:98:1e:e0:26:60:39:dd:76:f0:ec:64:a1:02:08:
6e:d0:8a:04:65:84:e8:a7:b8:11:ae:b0:c2:1c:2b:
ae:51:dc:d5:37:76:2b:56:c4:87:43:44:c4:06:6b:
c9:eb:5b:3a:80:b6:57:eb:32:8b:6b:f7:ae:74:88:
7f:ab:e7:96:4a:db:46:7d:f2:97:e4:11:97:6b:a1:
59:b6:6d:d5:9c:66:b7:d6:43:ea:95:26:62:02:68:
85:fd:cb:60:c6:dd:70:cd:26:20:6a:24:a8:ea:4b:
2c:c5:6a:a6:8b:ea:a6:ed:1b:60:89:02:fe:c6:4e:
8e:2e:e7:8a:d7:69:c0:50:cc:a9:bb:b0:09:74:4f:
83:50:95:e6:2e:0a:d2:5d:55:6a:16:70:7e:b3:91:
6e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:52:63:DA:66:D0:21:92:9B:6F:A1:33:55:37:D0:75:E7:B2:91:57
X509v3 Authority Key Identifier:
keyid:84:9E:3A:DF:F0:3A:AB:62:D5:DB:22:3A:C3:B3:5E:2A:9B:AA:4E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/iFJj2mbQIZKbb6EzVTfQdeeykVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2058::/48
Signature Algorithm: sha256WithRSAEncryption
78:b8:d1:5d:c6:cd:bf:f4:77:ee:db:6b:b5:aa:8c:3f:de:9c:
cc:20:eb:32:d8:83:39:15:5c:b2:4c:86:7e:74:d3:de:54:7f:
8a:b0:23:8c:19:21:83:86:b3:d4:81:75:ed:0a:75:fc:16:2e:
1d:57:88:13:18:29:54:49:30:d2:f8:82:eb:d0:57:99:23:d5:
b6:84:d5:08:3f:d0:14:c7:e2:3e:1b:de:70:7a:2b:15:f3:33:
59:29:63:1d:2b:7d:d7:b8:86:31:1b:06:17:51:d6:8e:69:1d:
0e:f3:15:54:e0:fc:ab:16:0f:d2:a4:6a:52:93:53:69:a9:5e:
d6:01:2f:df:a9:74:1f:e3:2d:06:3d:23:7d:2e:28:dc:31:19:
20:6f:52:b0:2e:6f:fc:b0:95:2f:44:0a:e1:0d:0e:f6:2c:83:
1b:10:f0:54:1a:38:6f:2b:11:7b:9a:39:d2:64:0f:a5:4d:aa:
08:5d:7b:b7:81:14:3e:ef:63:b8:59:c2:b2:02:13:9d:49:34:
9c:0d:ba:59:4f:ff:a3:13:bc:a3:09:82:eb:6c:6c:fc:3f:aa:
62:23:32:25:84:37:33:8f:aa:2d:40:36:6a:6a:8b:ad:f1:28:
4b:12:e8:d2:7e:0f:1f:b8:6a:3a:12:82:87:c0:ba:ff:7c:2b:
97:b2:c4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:17:30 2024 by rpki-client on console-ams.rpki-client.org