Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/r3VfElHFlzgK18PLPSTKOe0t4zY.roa
File: r3VfElHFlzgK18PLPSTKOe0t4zY.roa (raw, json)
Hash identifier: qDgPmuY3Bge/MAqaTZc/fphRBdx65Bthn+EKEw8dADI=
Subject key identifier: AF:75:5F:12:51:C5:97:38:0A:D7:C3:CB:3D:24:CA:39:ED:2D:E3:36
Certificate issuer: /CN=3a48e033deb64ac4243c72ce899d53822df6996d
Certificate serial: 018CC2DB096AEF15B5063987279BBBFB62BA
Authority key identifier: 3A:48:E0:33:DE:B6:4A:C4:24:3C:72:CE:89:9D:53:82:2D:F6:99:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkjgM962SsQkPHLOiZ1Tgi32mW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/r3VfElHFlzgK18PLPSTKOe0t4zY.roa
Signing time: Mon 01 Jan 2024 02:29:43 +0000
ROA not before: Mon 01 Jan 2024 02:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47543
IP address blocks: 2001:678:1c8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OkjgM962SsQkPHLOiZ1Tgi32mW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:09:6a:ef:15:b5:06:39:87:27:9b:bb:fb:62:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48e033deb64ac4243c72ce899d53822df6996d
Validity
Not Before: Jan 1 02:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af755f1251c597380ad7c3cb3d24ca39ed2de336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1f:1a:fb:86:bc:03:53:2b:1c:82:8f:cd:e4:
86:ca:22:0f:0c:ca:5f:e8:16:bc:4f:55:ea:92:1a:
6d:6d:28:3e:af:d8:f8:1b:37:26:02:2c:92:4d:88:
29:83:6b:d7:fb:fa:bb:35:e1:6a:f4:c3:1b:a4:d5:
29:7b:83:07:bd:85:42:36:51:42:10:3a:5a:61:b8:
75:d5:9f:b5:14:50:b5:30:2a:42:fb:ef:d0:eb:92:
5c:40:55:23:08:20:8c:ba:e5:eb:b6:06:e8:41:52:
0d:f5:8d:ce:87:6c:56:26:c4:d6:e2:4d:97:3d:cb:
f8:96:5b:49:83:69:66:4f:87:8a:3e:80:07:d3:18:
28:6a:b6:80:da:26:34:08:10:63:a4:5a:4c:4d:65:
3f:4e:d8:7a:80:3f:4b:06:16:2f:99:44:fa:44:30:
c8:78:b0:7a:f7:78:5f:c0:ea:e2:66:9c:a6:f6:d8:
12:44:94:5b:df:f7:8b:9e:f3:35:06:66:fc:8d:b7:
48:59:99:dc:5f:02:26:9c:d4:12:dd:82:ca:68:4b:
1a:95:a3:c7:01:65:2e:07:ab:94:f3:72:e5:e1:2f:
c3:bc:6f:7d:ae:c1:e7:49:1e:e8:39:0f:3b:aa:be:
3a:5b:0b:4c:39:7b:eb:ce:1a:b0:87:e3:74:42:8c:
7a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:75:5F:12:51:C5:97:38:0A:D7:C3:CB:3D:24:CA:39:ED:2D:E3:36
X509v3 Authority Key Identifier:
keyid:3A:48:E0:33:DE:B6:4A:C4:24:3C:72:CE:89:9D:53:82:2D:F6:99:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkjgM962SsQkPHLOiZ1Tgi32mW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/r3VfElHFlzgK18PLPSTKOe0t4zY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1c8::/48
Signature Algorithm: sha256WithRSAEncryption
7d:43:47:f1:29:ee:b8:14:7e:6d:db:fe:bc:0b:99:b7:71:4a:
17:ad:38:93:80:04:81:f4:46:67:82:6d:e7:b6:fb:5a:68:42:
01:b4:bb:9f:26:e6:cd:00:e0:4e:8c:c3:75:b4:95:15:54:6f:
52:7a:3a:f7:10:56:49:90:1e:d5:32:03:78:75:dc:c0:87:e7:
27:9c:68:87:01:a9:6d:42:54:e5:86:5f:7e:1d:52:bd:a9:ca:
38:6c:95:b0:73:fc:ed:18:ab:5d:65:4f:c2:e5:d9:9b:ed:77:
52:2f:a2:38:70:71:00:45:ec:36:6c:46:b6:4b:27:01:84:e6:
65:30:35:8f:08:15:41:e3:ba:97:f2:51:dd:28:bf:13:86:33:
b8:d4:19:c1:88:99:74:aa:61:b3:c8:2b:9c:2b:c4:4a:1f:c0:
c3:32:84:66:5e:1c:bf:de:cb:94:05:91:3e:d1:08:47:e7:e9:
f1:23:c3:1f:08:3b:78:00:9f:64:7d:62:54:f7:80:95:56:f9:
c3:1b:bd:38:79:76:5f:49:8c:5e:59:2a:7f:13:6d:66:b4:53:
0f:39:10:39:9a:de:6f:38:ad:c9:c8:0d:06:73:42:61:a3:a5:
3c:6b:d0:8a:e3:f4:d0:ca:44:fd:c3:cd:25:e8:fb:27:f0:99:
da:ce:fe:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:18:44 2024 by rpki-client on console-fra.rpki-client.org