Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/d6hnYZsVs_JYmiNXcCh1vo_KibM.roa
File: d6hnYZsVs_JYmiNXcCh1vo_KibM.roa (raw, json)
Hash identifier: 8hZ/i6hTowS+KXFTB29YVWwJ+KDBFC7ZmFZQxsDvBpQ=
Subject key identifier: 77:A8:67:61:9B:15:B3:F2:58:9A:23:57:70:28:75:BE:8F:CA:89:B3
Certificate issuer: /CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2
Certificate serial: 018FDF80BE98E67DE65566EA30EE9BDA6ABD
Authority key identifier: AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/d6hnYZsVs_JYmiNXcCh1vo_KibM.roa
Signing time: Mon 03 Jun 2024 19:08:27 +0000
ROA not before: Mon 03 Jun 2024 19:08:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211421
IP address blocks: 2a14:52c0:6868::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:df:80:be:98:e6:7d:e6:55:66:ea:30:ee:9b:da:6a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2
Validity
Not Before: Jun 3 19:08:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77a867619b15b3f2589a2357702875be8fca89b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f3:92:c3:03:1a:cd:f5:aa:c1:89:a5:0b:b4:
c7:a6:02:0f:4a:6e:ff:cd:25:ef:a4:ee:af:b4:2e:
10:d0:37:2b:d8:f0:59:0d:f5:5f:f5:b3:e8:dd:f8:
b9:c4:18:bb:9a:3c:69:3a:3d:07:cb:83:f0:6d:0e:
dd:87:ea:fa:b0:0e:8c:e5:a7:b8:14:1b:80:df:79:
50:f4:1a:71:1c:50:fe:b2:d3:3c:8c:57:44:69:ad:
48:b1:1f:93:91:39:ba:ac:7f:f5:7d:b4:fe:de:06:
c2:67:7f:b0:b9:12:12:07:7f:e7:93:0d:77:41:c8:
1a:57:41:c0:02:1d:63:dd:68:8a:46:6a:06:f4:9c:
16:02:6e:6e:ba:a0:ef:a3:bf:7d:36:6d:b1:23:c9:
03:14:a1:96:dc:a6:c0:5a:04:ae:28:65:d1:f7:98:
f4:c1:96:07:d4:46:4f:6a:b4:49:8c:7d:a5:fd:e0:
61:f3:52:e9:37:17:0e:1e:3c:b8:6c:95:38:bc:42:
83:3d:98:26:d0:77:67:98:e4:e4:cd:d0:75:4b:87:
96:5f:35:7b:0c:fb:20:d9:ed:5b:bd:4b:a5:cb:1f:
2a:74:61:b6:f2:8d:65:0a:3c:ad:d8:f6:1c:bb:b2:
85:ed:26:2e:40:ce:cb:94:f9:e9:83:f7:1c:73:96:
bc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A8:67:61:9B:15:B3:F2:58:9A:23:57:70:28:75:BE:8F:CA:89:B3
X509v3 Authority Key Identifier:
keyid:AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/d6hnYZsVs_JYmiNXcCh1vo_KibM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:52c0:6868::/48
Signature Algorithm: sha256WithRSAEncryption
65:99:17:eb:a1:93:c3:e5:d8:81:4a:bb:3d:e9:92:fe:56:81:
d2:13:5d:8a:45:a1:ea:76:9e:90:24:a7:83:a5:9e:ce:5b:7f:
ba:05:a4:23:14:cd:a7:84:da:e3:9f:11:1a:33:c5:93:a4:2f:
7f:85:bc:d9:b8:dd:08:e6:54:61:f2:8f:88:cf:7e:12:9e:4a:
e8:5a:f3:00:6d:87:0e:d7:97:e0:eb:d5:f9:c0:f1:74:75:35:
3c:fd:ba:66:49:79:8b:aa:80:83:97:bf:ea:6e:bb:4c:6e:a7:
9d:bf:48:07:f4:61:39:50:be:f5:33:9e:ad:70:51:2c:3d:2e:
6e:3c:ba:ac:cc:1b:da:7a:a7:df:14:f7:8d:5d:d9:6c:cc:17:
0e:dc:42:53:0e:ff:86:fa:dc:19:d7:c3:92:77:b1:46:a1:1b:
9b:a5:79:f7:44:70:ac:08:6a:cb:ca:8f:1f:6f:92:a1:4f:5c:
06:93:16:0e:7d:57:8c:6f:0b:ff:cb:0c:28:ff:b7:d0:cc:c6:
14:ff:df:da:67:d4:23:b0:60:57:00:d6:a9:d0:e5:dc:4b:21:
e0:a9:b4:58:23:5b:d9:0b:2c:74:c4:23:64:27:69:26:37:16:
0f:a2:08:3f:36:d2:82:16:16:cd:01:be:b1:87:a1:9a:00:85:
ae:68:62:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 17:36:33 2024 by rpki-client on console-ams.rpki-client.org