Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/dDVgS3_2OFGjHmNtR2PDYSZYiuU.roa
File: dDVgS3_2OFGjHmNtR2PDYSZYiuU.roa (raw, json)
Hash identifier: xmHjzP+INJyiPf4usvTRn5d7rtbTtGR/jl+rlhcANlk=
Subject key identifier: 74:35:60:4B:7F:F6:38:51:A3:1E:63:6D:47:63:C3:61:26:58:8A:E5
Certificate issuer: /CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Certificate serial: 018CC56EEB8A7FEF4E6D28CC351DAF007EB9
Authority key identifier: D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/dDVgS3_2OFGjHmNtR2PDYSZYiuU.roa
Signing time: Mon 01 Jan 2024 14:30:29 +0000
ROA not before: Mon 01 Jan 2024 14:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34658
IP address blocks: 2a13:fd80::/32 maxlen: 32
2a0f:45c7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 13:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:eb:8a:7f:ef:4e:6d:28:cc:35:1d:af:00:7e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Validity
Not Before: Jan 1 14:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7435604b7ff63851a31e636d4763c36126588ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:db:6e:49:69:0b:40:5d:8c:0c:53:12:d0:2e:
3e:d7:71:b5:63:66:e0:96:89:fc:cf:3a:8f:08:3f:
db:32:20:30:c2:7b:c6:18:25:b0:7a:e3:b4:f7:cb:
6a:30:83:8a:1c:65:09:ba:4c:7a:5d:30:9c:e0:e1:
89:d0:b2:85:45:15:fe:49:4d:85:fe:63:49:80:93:
b7:52:f1:65:55:11:8b:a7:01:eb:68:a1:f4:30:3e:
31:48:d1:d0:14:75:aa:2c:92:22:2d:e7:39:24:c3:
f9:b7:c3:1e:43:b1:a7:98:2d:72:61:47:17:4c:6d:
54:13:43:91:d8:c5:d4:9f:52:e0:a7:54:77:e5:a9:
a5:d0:02:b6:39:8b:04:39:24:b3:67:cc:52:30:67:
b4:04:e5:69:03:f7:4c:c2:95:2a:c8:e0:11:e0:b5:
d8:83:ef:03:8a:02:fa:f1:b2:0f:a7:63:33:b9:6e:
56:10:c8:61:03:85:79:14:bb:a8:3a:d3:35:aa:96:
3c:ae:2f:0a:6b:bf:0d:e3:00:0d:39:40:07:98:1f:
3c:aa:63:b0:3d:b5:10:1e:b0:7c:7a:21:3f:73:c0:
e8:9e:7b:27:18:6f:f5:cb:25:cb:ae:01:c0:72:b6:
76:1a:3e:90:1c:c9:8c:08:ae:e0:3a:d8:03:7d:a7:
54:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:35:60:4B:7F:F6:38:51:A3:1E:63:6D:47:63:C3:61:26:58:8A:E5
X509v3 Authority Key Identifier:
keyid:D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/dDVgS3_2OFGjHmNtR2PDYSZYiuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:45c7::/32
2a13:fd80::/32
Signature Algorithm: sha256WithRSAEncryption
7d:a1:9b:0b:c0:d4:6a:19:ee:51:0e:2e:bf:92:e6:99:89:45:
03:2f:af:1d:79:67:72:d0:f5:0b:63:c5:a6:32:68:22:1d:92:
f9:42:8b:44:5d:8a:49:11:23:26:9e:7d:a6:21:f0:40:84:26:
58:f4:a0:4f:08:25:18:31:79:a9:e1:30:df:0e:ba:df:0c:6f:
97:65:d7:fc:7c:df:02:1b:54:bd:6f:78:a1:f3:1e:d4:9b:bf:
b6:e0:e3:0e:af:45:76:96:26:ab:cb:32:5a:7d:26:0e:6d:e7:
77:9c:24:b5:b5:94:49:24:34:2d:b0:ea:41:3f:f6:36:5a:6e:
d6:28:38:de:fb:79:96:bb:04:c0:16:3a:74:c3:19:f7:9e:be:
20:d4:b5:b9:3e:d2:df:3b:36:1a:bf:16:fe:39:6f:96:d9:56:
f0:98:8b:a0:21:14:b8:19:02:7c:3b:3f:ee:e0:74:44:9c:41:
e5:e6:6f:d2:9e:d9:44:4a:0a:b5:6d:43:15:04:1f:b2:d1:c2:
df:3d:90:68:e9:02:8d:d9:61:d3:94:eb:ba:b3:fc:ae:0f:d8:
a4:ce:83:73:18:7d:6d:dc:62:26:74:d3:ca:3a:f7:16:94:08:
5e:3e:88:00:e1:3a:72:64:60:ee:c5:b3:10:af:23:54:7c:3b:
bc:27:19:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:57:44 2024 by rpki-client on console-fra.rpki-client.org