Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/tdkUtodTeOLX9Oa8Ow0u-SbzMv4.roa
File: tdkUtodTeOLX9Oa8Ow0u-SbzMv4.roa (raw, json)
Hash identifier: hsmv/pkUO4WtEWW/Pvjua9j6ngJenvDWVOWcGlin13k=
Subject key identifier: B5:D9:14:B6:87:53:78:E2:D7:F4:E6:BC:3B:0D:2E:F9:26:F3:32:FE
Certificate issuer: /CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Certificate serial: 018CC5DC0250523309D278661F1C6B0A84A5
Authority key identifier: 6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/tdkUtodTeOLX9Oa8Ow0u-SbzMv4.roa
Signing time: Mon 01 Jan 2024 16:29:39 +0000
ROA not before: Mon 01 Jan 2024 16:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59747
IP address blocks: 2001:148f:fffc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:02:50:52:33:09:d2:78:66:1f:1c:6b:0a:84:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Validity
Not Before: Jan 1 16:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5d914b6875378e2d7f4e6bc3b0d2ef926f332fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bd:af:01:86:3f:3d:26:ae:7e:8a:9e:7e:6d:
68:7d:3b:b5:2b:e6:32:7f:0f:51:fc:b2:f0:94:57:
d3:5a:8b:c4:4d:1e:21:b8:da:00:1f:07:59:42:75:
2f:bc:fa:cd:b0:d9:a9:9f:aa:bb:dc:12:11:8e:73:
72:a7:d0:e5:50:30:3f:a5:e1:c9:7c:ea:b2:8e:51:
03:36:3b:38:d6:42:fb:dd:2a:9e:dd:3f:37:53:af:
67:62:e1:b9:44:55:3d:66:90:a9:4c:80:96:0c:f8:
26:26:04:bd:cb:41:0e:0d:f2:de:44:27:fd:82:e6:
eb:94:08:53:67:08:c2:59:a2:f3:8b:59:83:5e:21:
30:ae:30:6b:da:92:f0:57:63:1d:5e:59:8f:17:6f:
2e:5f:e5:9b:f9:9a:24:5b:ea:87:8a:d8:c5:4e:41:
1e:e1:9f:28:21:59:99:e3:14:91:a2:22:05:d2:1d:
2e:70:1a:4e:0e:9c:b6:40:9b:ba:3f:6d:13:1a:65:
b3:eb:83:7a:77:4c:2a:7c:21:5e:a0:76:ec:35:c8:
18:f3:bd:c2:85:85:17:66:3d:f1:a3:00:0c:e6:23:
2e:47:15:40:2b:4c:aa:a3:41:cb:9b:26:e5:a6:3c:
49:28:e4:2f:5f:73:92:5c:ef:ff:d2:97:a5:6e:ac:
63:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D9:14:B6:87:53:78:E2:D7:F4:E6:BC:3B:0D:2E:F9:26:F3:32:FE
X509v3 Authority Key Identifier:
keyid:6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/tdkUtodTeOLX9Oa8Ow0u-SbzMv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:148f:fffc::/48
Signature Algorithm: sha256WithRSAEncryption
29:ac:80:d8:81:d9:32:02:36:3f:a2:b5:80:fb:bf:91:25:83:
68:2d:e6:18:6f:18:36:3c:69:cd:b4:da:5a:a6:ec:11:ed:f3:
ac:28:45:e8:18:ee:67:57:20:01:a8:c7:55:5c:11:b1:68:d1:
93:99:8c:ac:66:17:cf:a9:76:84:88:04:3a:66:51:8b:96:12:
d2:2e:e8:5d:66:2c:29:26:93:36:94:c0:4b:68:56:61:48:56:
70:9b:df:b1:9a:ba:5d:5e:d5:6e:8c:53:21:fe:6d:7f:df:54:
94:0e:85:1b:12:6e:bf:17:e9:56:ee:b5:d6:2e:89:ff:e2:56:
cd:81:f5:d9:ba:04:3b:17:12:de:4c:11:f4:95:0e:1f:a8:87:
ad:09:2f:73:43:87:6b:cd:fc:bd:17:b4:8e:53:bd:5f:e2:f0:
c2:50:df:36:e8:cf:1c:41:a0:d6:49:49:a6:a3:37:04:d6:60:
93:37:f4:55:b8:da:a1:d6:bf:3d:0b:e0:3c:ab:db:ce:88:9f:
ab:5d:75:29:88:21:35:a4:6d:12:b5:68:f8:dc:4b:e9:a6:8a:
1d:0d:78:3e:c9:b9:20:bd:23:6d:50:6a:57:e8:18:6d:46:38:
4a:d2:2c:45:70:2d:f4:89:65:c8:b2:26:ae:7d:b2:56:5e:b4:
b7:a2:19:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:51:53 2024 by rpki-client on console-fra.rpki-client.org