Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/4ef1a8-6790-44dd-9d24-88e2adc2030b/1/SdcSt3vnjpXLd3oi_b2MEH5PgOY.roa
File: SdcSt3vnjpXLd3oi_b2MEH5PgOY.roa (raw, json)
Hash identifier: F3WSiWvwgWregodmWuObrSZe/Ta9xwDxfBNv/i4z0ks=
Subject key identifier: 49:D7:12:B7:7B:E7:8E:95:CB:77:7A:22:FD:BD:8C:10:7E:4F:80:E6
Certificate issuer: /CN=d6e04d509ed1e9cdb354b745999db9417a8cb873
Certificate serial: 018CC7270F5C95244DE4146669B67FF07450
Authority key identifier: D6:E0:4D:50:9E:D1:E9:CD:B3:54:B7:45:99:9D:B9:41:7A:8C:B8:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/4ef1a8-6790-44dd-9d24-88e2adc2030b/1/SdcSt3vnjpXLd3oi_b2MEH5PgOY.roa
Signing time: Mon 01 Jan 2024 22:31:14 +0000
ROA not before: Mon 01 Jan 2024 22:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49283
IP address blocks: 2001:67c:27b0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/4ef1a8-6790-44dd-9d24-88e2adc2030b/1/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/4ef1a8-6790-44dd-9d24-88e2adc2030b/1/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:0f:5c:95:24:4d:e4:14:66:69:b6:7f:f0:74:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6e04d509ed1e9cdb354b745999db9417a8cb873
Validity
Not Before: Jan 1 22:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49d712b77be78e95cb777a22fdbd8c107e4f80e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:63:fd:0b:a3:84:0f:3a:da:b4:0c:20:23:80:
ca:0e:b6:57:49:47:7d:37:7f:ed:56:75:b2:d5:b0:
94:d9:1d:98:f0:1f:77:cd:d9:d6:39:02:77:24:5b:
65:d9:9b:26:08:93:11:07:b7:8e:d8:b4:4d:68:bc:
14:50:11:d9:1e:e2:f7:b5:4e:31:d5:0a:47:ec:f8:
d5:4d:c9:e3:dc:2f:95:97:60:b8:6d:b2:ac:af:70:
73:a0:4e:80:ee:8c:9d:85:4c:29:4d:fa:90:7c:16:
9c:ea:86:e6:47:fb:18:c3:0e:0d:50:c7:a9:b5:1c:
5c:48:27:ce:f5:fd:78:05:28:8c:43:5e:88:bb:43:
c2:10:f4:53:b4:34:3f:c6:8c:bc:69:c8:4d:b5:05:
c5:70:a7:d0:9a:eb:04:f5:63:40:66:ed:f8:25:15:
47:da:97:99:51:f2:1b:f3:1b:93:68:1f:b3:80:72:
87:eb:8d:44:7a:73:51:78:a4:46:3e:8c:c9:2d:06:
80:2a:8b:ca:77:23:f4:39:da:19:a0:31:5b:ab:80:
2c:d7:32:e5:c8:6b:09:be:8c:c0:60:16:4a:d3:86:
ae:f6:15:2e:7f:ae:ac:97:7a:72:39:d3:cd:20:50:
f4:a6:c3:be:fb:20:a4:30:14:4f:88:3b:c7:cd:db:
f3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D7:12:B7:7B:E7:8E:95:CB:77:7A:22:FD:BD:8C:10:7E:4F:80:E6
X509v3 Authority Key Identifier:
keyid:D6:E0:4D:50:9E:D1:E9:CD:B3:54:B7:45:99:9D:B9:41:7A:8C:B8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4ef1a8-6790-44dd-9d24-88e2adc2030b/1/SdcSt3vnjpXLd3oi_b2MEH5PgOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4ef1a8-6790-44dd-9d24-88e2adc2030b/1/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:27b0::/48
Signature Algorithm: sha256WithRSAEncryption
2e:ef:2f:c4:7a:a2:ce:63:88:f0:f2:ab:bd:5f:26:38:78:67:
b4:0f:b9:66:6d:ad:42:0a:08:80:58:2f:c1:b8:71:c4:90:ea:
69:d3:cc:cc:9f:da:21:b5:c3:c0:2e:b8:62:31:ff:59:b2:23:
6c:48:e5:07:96:60:a9:87:ed:08:94:2c:2c:2d:ac:a6:38:b3:
28:00:75:e5:cf:23:88:b0:b6:a5:b1:4f:ce:89:59:08:e0:49:
ff:5b:65:ad:dd:e1:30:5c:5b:34:74:73:9d:cb:b8:46:43:b1:
36:53:f4:3c:5b:3f:13:6a:06:2b:fb:9a:12:9f:ba:6f:bc:e3:
e6:aa:97:17:14:2d:30:37:68:bc:a2:1d:17:e9:fb:71:92:cc:
5d:04:46:73:63:30:5e:a8:f2:c0:31:d0:fd:43:f7:a4:77:42:
86:03:6e:0a:0e:6e:ed:d9:0e:cd:97:71:e5:da:d7:e1:22:6c:
47:74:ba:a5:3b:f8:a2:9f:85:d3:3e:c7:0e:a7:55:ef:62:cd:
26:f8:49:5b:99:42:85:c9:1f:7f:52:e1:19:ea:cc:9a:dc:50:
c5:63:bb:f8:34:b8:17:6e:28:f1:5d:07:4d:49:49:59:5f:39:
20:5d:1a:19:58:43:68:c7:27:ec:10:ea:67:87:d6:e3:ad:68:
50:db:15:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:53:12 2024 by rpki-client on console-fra.rpki-client.org