Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/i3EpyGFcUSZRIuQOoEeMEEq5uTc.roa
File: i3EpyGFcUSZRIuQOoEeMEEq5uTc.roa (raw, json)
Hash identifier: 64rd7uogo40gAQb5ZyFt/xOq4fA/Lcpw6QxmcFj48Vo=
Subject key identifier: 8B:71:29:C8:61:5C:51:26:51:22:E4:0E:A0:47:8C:10:4A:B9:B9:37
Certificate issuer: /CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Certificate serial: 018CC50121E46DD998A3CA365EBFDB38B488
Authority key identifier: 4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/i3EpyGFcUSZRIuQOoEeMEEq5uTc.roa
Signing time: Mon 01 Jan 2024 12:30:34 +0000
ROA not before: Mon 01 Jan 2024 12:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2119
IP address blocks: 2001:67c:2f50::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:21:e4:6d:d9:98:a3:ca:36:5e:bf:db:38:b4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Validity
Not Before: Jan 1 12:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b7129c8615c51265122e40ea0478c104ab9b937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0f:3b:ef:cd:92:91:04:7b:c4:a5:78:cf:73:
90:30:db:b9:0a:6f:3d:b4:06:45:56:41:d9:28:7b:
3e:85:e3:7d:18:45:22:3c:a7:1a:47:db:ea:7b:5d:
2e:47:15:45:50:d1:a8:4b:07:77:c7:cb:42:3d:5e:
98:3d:4b:2a:6d:46:3b:44:d5:c9:28:ea:cf:7a:53:
52:9a:ce:d9:20:7f:dd:d3:6f:7b:2d:e2:71:0b:bf:
c0:1a:5d:03:8b:3b:b0:7f:bb:fd:3e:92:ab:3b:70:
61:43:c5:b0:c1:28:dd:b1:fd:5d:8d:7f:8e:7e:8e:
08:55:fe:6a:e1:ca:b8:58:6f:50:6f:48:be:c0:49:
06:23:f9:1b:2d:79:a5:1a:38:9c:00:9d:1e:44:94:
2e:77:6f:c3:1a:4b:68:e3:3b:9d:c3:da:dd:06:62:
c2:88:57:2a:ea:48:1b:66:f2:9e:5d:b8:1b:b4:12:
7f:1d:39:a0:70:c8:37:2d:c1:9b:49:b2:11:9a:82:
e4:28:98:30:54:1c:4b:45:c6:ac:5c:6f:cc:89:da:
b5:34:ed:d4:5a:62:3e:fc:7b:ef:78:22:0f:cf:3d:
15:18:ec:1e:81:fc:d2:83:39:f9:d4:58:60:2b:9d:
df:cf:c3:0d:81:b1:d2:25:41:62:6a:34:fc:ae:33:
af:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:71:29:C8:61:5C:51:26:51:22:E4:0E:A0:47:8C:10:4A:B9:B9:37
X509v3 Authority Key Identifier:
keyid:4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/i3EpyGFcUSZRIuQOoEeMEEq5uTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2f50::/48
Signature Algorithm: sha256WithRSAEncryption
53:de:78:88:d3:57:8c:eb:b1:1e:b9:7c:c7:15:c8:67:07:31:
2a:cd:c1:fe:90:0c:22:5c:d3:e4:d0:a9:3c:d5:ba:5b:f3:93:
23:be:1a:12:a3:08:81:c8:82:eb:c9:aa:0e:0c:3d:74:31:79:
d3:21:db:c3:d5:ba:1e:80:b8:3f:f1:ba:33:bf:60:91:d7:cd:
7f:6a:1d:47:40:0d:d9:0e:62:82:47:7f:5e:96:20:b2:b0:9b:
26:e1:08:11:1a:96:c1:d9:c7:7e:36:b4:95:6e:e0:4f:be:c3:
e5:53:b5:ad:9d:11:7b:86:38:d8:42:a3:5a:4c:5b:0b:c6:47:
50:9d:09:2d:a0:60:5e:a8:79:5d:54:03:1d:9c:a9:5c:57:80:
0b:0d:0e:58:da:f7:88:5c:3b:ae:81:08:4e:99:f2:7d:99:cb:
72:6d:5e:60:f7:91:7e:00:53:11:98:a1:6d:03:5f:cf:06:2a:
e1:80:6a:1e:c8:c9:0e:5c:60:7e:6c:ce:7a:91:6e:8f:2e:47:
31:aa:47:ac:b1:85:51:87:8a:8f:c6:b5:0f:63:c0:52:d9:33:
7f:fc:74:af:05:c0:92:bc:05:8f:c3:07:ef:fb:7a:d1:63:e2:
2a:97:b1:ac:6e:40:ab:ec:c1:eb:71:30:7f:7c:79:6c:68:ce:
b6:a5:89:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:48:52 2024 by rpki-client on console-ams.rpki-client.org