Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/fGGuolSrt2E7rQrNXxzmFOGu8bE.roa
File: fGGuolSrt2E7rQrNXxzmFOGu8bE.roa (raw, json)
Hash identifier: sGLxHrw8W6sNpkomysxab3O2448ny5HhYdSTi+rsKLc=
Subject key identifier: 7C:61:AE:A2:54:AB:B7:61:3B:AD:0A:CD:5F:1C:E6:14:E1:AE:F1:B1
Certificate issuer: /CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
Certificate serial: 018CC801D00ADADE2FECE1198F798F1EA671
Authority key identifier: BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/fGGuolSrt2E7rQrNXxzmFOGu8bE.roa
Signing time: Tue 02 Jan 2024 02:30:11 +0000
ROA not before: Tue 02 Jan 2024 02:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7171
IP address blocks: 2a00:ad40:200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:d0:0a:da:de:2f:ec:e1:19:8f:79:8f:1e:a6:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
Validity
Not Before: Jan 2 02:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c61aea254abb7613bad0acd5f1ce614e1aef1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4e:41:a7:ec:7b:40:11:83:b3:8b:f4:06:e2:
e2:9b:5e:1c:ce:19:28:bc:c4:fe:73:60:02:00:c1:
a7:91:49:2a:db:6f:ec:fe:88:31:19:96:fc:4f:0b:
53:90:58:fc:cf:32:12:9a:54:63:c7:3c:e8:c2:d7:
e3:24:22:7a:cc:4f:97:db:c7:f0:e1:6e:1d:1d:29:
41:92:27:e7:79:be:c8:ab:eb:4d:03:bf:23:14:a5:
72:43:bc:4b:7f:84:74:f9:3a:af:13:62:82:80:42:
c8:dd:1a:90:72:dd:0f:49:fe:65:e3:39:e0:42:97:
01:94:07:07:fd:13:61:8e:63:28:ea:b3:61:5c:07:
13:84:ae:d8:6a:00:15:87:65:af:65:23:42:42:26:
1e:42:ea:f7:5b:56:81:83:b0:91:89:46:6d:32:6b:
9d:f8:1e:aa:c4:ef:3e:00:df:18:24:c5:fd:0f:9b:
3c:2f:08:9d:2b:95:d4:77:df:e2:4c:1d:88:f2:b0:
6e:7c:a2:51:e7:d3:7c:34:3a:12:0e:8f:2b:b3:93:
8a:f3:9d:61:d4:45:87:e9:14:f1:41:3b:53:67:39:
41:d2:58:42:52:07:61:5e:aa:81:52:98:29:23:98:
a7:94:07:07:25:6f:25:80:b6:61:6e:d7:bc:e0:66:
d9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:61:AE:A2:54:AB:B7:61:3B:AD:0A:CD:5F:1C:E6:14:E1:AE:F1:B1
X509v3 Authority Key Identifier:
keyid:BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/fGGuolSrt2E7rQrNXxzmFOGu8bE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:ad40:200::/40
Signature Algorithm: sha256WithRSAEncryption
74:0a:67:6d:0a:47:59:ed:8c:2b:04:6d:57:dc:69:d9:f2:84:
d6:ed:0a:08:85:e8:3e:66:d3:de:31:1f:37:71:20:fe:88:0b:
61:4a:b3:52:76:63:30:7d:1f:75:0e:a0:66:58:44:0c:17:f0:
1f:7d:72:ff:e9:1c:fd:1d:92:d4:15:1a:63:53:1d:36:c9:a0:
2d:5c:c0:9b:53:ff:59:4e:69:99:4e:c7:ea:79:45:80:dc:bc:
fd:55:d2:8f:29:ea:0d:0a:e4:cd:71:2d:28:fe:cf:31:b6:47:
70:82:48:08:7e:79:36:01:7e:04:5b:82:14:3b:7d:09:21:e0:
e1:1b:37:de:26:ae:fd:8d:5b:9c:64:dc:f8:9a:40:40:8e:78:
ae:dd:f7:2c:ad:ac:61:c7:bd:9a:c9:8b:4e:b4:98:58:60:82:
12:e8:31:61:61:a9:9b:4a:c0:6b:12:41:19:84:f5:0d:45:01:
03:26:f6:c9:60:f5:db:51:a3:18:92:43:ec:f4:a2:89:3b:25:
b4:d5:dc:e0:1d:98:0b:34:73:b4:5e:61:e2:86:9b:d6:f8:30:
16:3f:38:3b:41:ec:99:6e:1f:24:5e:a7:28:75:68:7a:9b:d5:
92:66:be:13:c5:6d:3e:cc:23:94:59:2f:bc:3b:3d:63:03:f1:
32:aa:03:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:29:32 2024 by rpki-client on console-fra.rpki-client.org