Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/xVzftmqGU_zp0OkZmXduubjuN-k.roa
File: xVzftmqGU_zp0OkZmXduubjuN-k.roa (raw, json)
Hash identifier: N/Xdj/Z61idSvFi1nHuCN6vbQhllKeOxG9GUxDvqidA=
Subject key identifier: C5:5C:DF:B6:6A:86:53:FC:E9:D0:E9:19:99:77:6E:B9:B8:EE:37:E9
Certificate issuer: /CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15
Certificate serial: 018CC6B77BEEB08F81CB8B517F064FF08BCD
Authority key identifier: 48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/xVzftmqGU_zp0OkZmXduubjuN-k.roa
Signing time: Mon 01 Jan 2024 20:29:22 +0000
ROA not before: Mon 01 Jan 2024 20:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 2001:67c:ac0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 10:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:7b:ee:b0:8f:81:cb:8b:51:7f:06:4f:f0:8b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15
Validity
Not Before: Jan 1 20:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c55cdfb66a8653fce9d0e91999776eb9b8ee37e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:df:60:f8:5b:b9:8f:0b:89:91:33:80:bb:30:
41:78:09:f0:4a:2d:f6:a6:47:0b:ba:e9:25:7c:78:
98:b3:17:dd:f2:ce:fa:22:5c:22:25:bd:a5:e0:99:
63:6e:f9:b5:37:d5:49:b4:7e:d2:1b:65:65:e7:82:
11:af:76:d7:a0:69:f2:68:31:b9:17:24:65:fa:11:
3a:d5:87:57:bf:66:b8:71:90:78:32:56:1f:c3:f3:
9b:95:92:dd:16:ef:59:19:69:25:71:48:2c:34:43:
c6:c1:0e:d6:3e:8c:85:ec:89:91:5d:bf:cb:08:8c:
b4:f4:44:ac:41:a0:32:bc:19:5b:76:fb:2c:2c:26:
8d:a0:66:01:b7:fd:2a:bd:b7:48:8f:24:d7:74:63:
50:bb:2a:df:66:8c:73:ce:92:9b:ed:18:0e:ab:58:
58:21:04:78:e5:5f:b9:37:14:d4:c0:92:36:ff:f4:
2e:c2:3d:a4:35:77:b6:00:74:e2:a8:b5:5f:b0:c3:
d6:76:c6:e4:b8:08:68:bb:48:ee:4b:d7:d1:f8:71:
e2:29:fd:1a:84:a9:ef:09:cd:c3:54:f1:cc:ad:2c:
d9:35:e0:3a:bc:e6:34:38:ad:2b:c0:8d:31:43:43:
7b:47:e9:9e:b1:a5:27:9c:16:da:44:6c:ac:8f:df:
a9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5C:DF:B6:6A:86:53:FC:E9:D0:E9:19:99:77:6E:B9:B8:EE:37:E9
X509v3 Authority Key Identifier:
keyid:48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/xVzftmqGU_zp0OkZmXduubjuN-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:ac0::/48
Signature Algorithm: sha256WithRSAEncryption
62:97:95:a2:10:f1:be:97:e4:e4:b9:b7:85:c0:b3:1a:55:e9:
3e:9e:11:7f:3b:d1:3e:01:1f:c7:a0:58:f0:83:1a:6e:10:fe:
55:81:60:8c:5b:c3:09:01:ee:5e:b1:bb:b8:cd:7b:21:19:db:
ad:c6:72:c1:57:97:66:9c:8c:2d:49:ec:86:73:a6:e1:ed:a2:
3c:c8:4a:bd:e3:1c:58:be:ce:6c:e3:56:d0:34:82:f9:20:d6:
97:af:0c:2a:d5:b4:21:95:61:18:65:59:94:ad:f8:49:43:2e:
a5:5d:d4:44:24:b6:2a:ae:f7:82:f1:b6:cb:be:2e:ad:78:a4:
8a:e3:1f:96:bd:06:16:d3:76:b6:62:c1:6c:36:35:fc:28:61:
d6:8e:e7:78:d0:a3:4d:f6:c3:00:42:49:60:62:ac:9d:51:aa:
f8:38:b7:32:89:d3:cb:6e:f8:b8:c3:ec:0a:7f:76:66:f1:6a:
b4:a8:18:57:c8:fe:f1:9d:c1:8f:e7:e3:bc:80:e2:7a:b0:16:
bd:e7:54:fc:e5:83:60:7d:70:71:13:76:18:85:d3:c5:a8:c8:
d5:0a:2c:cd:f1:b7:d1:3e:4b:66:ca:8d:db:52:62:a7:58:ce:
b1:a9:95:db:bb:4d:90:e1:0f:97:00:67:7a:fe:55:00:58:e4:
70:f8:4e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 18:25:01 2024 by rpki-client on console-fra.rpki-client.org