Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/mV9BdmYQdL5DOMSHI7CQggt-JV0.roa
File: mV9BdmYQdL5DOMSHI7CQggt-JV0.roa (raw, json)
Hash identifier: pw157J2x08EpCqWBK4ZLj1XWIZDp2zyHf71lbpdxdKY=
Subject key identifier: 99:5F:41:76:66:10:74:BE:43:38:C4:87:23:B0:90:82:0B:7E:25:5D
Certificate issuer: /CN=5ae7953e9459dc09486f0ddc59f2a405b5669250
Certificate serial: 018CC8DE6D5587E8EFF92174B0EB22EEC978
Authority key identifier: 5A:E7:95:3E:94:59:DC:09:48:6F:0D:DC:59:F2:A4:05:B5:66:92:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/mV9BdmYQdL5DOMSHI7CQggt-JV0.roa
Signing time: Tue 02 Jan 2024 06:31:09 +0000
ROA not before: Tue 02 Jan 2024 06:31:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213366
IP address blocks: 2001:67c:a50::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:6d:55:87:e8:ef:f9:21:74:b0:eb:22:ee:c9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae7953e9459dc09486f0ddc59f2a405b5669250
Validity
Not Before: Jan 2 06:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=995f4176661074be4338c48723b090820b7e255d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c1:8f:ec:df:19:18:a0:06:b0:8f:66:ff:87:
77:da:85:6c:a6:2d:87:43:5d:04:c3:bf:1a:6e:52:
00:1b:23:08:0c:c9:0b:ab:4f:07:ee:cc:fd:f9:96:
61:20:66:49:9d:58:af:1e:6b:44:96:84:12:d6:4f:
72:3a:19:3d:9c:50:b4:62:a1:4e:72:ab:4e:61:fc:
51:55:89:b9:62:e4:38:2e:1a:ef:aa:f3:48:0b:02:
ee:41:11:26:d3:62:18:36:a9:76:9f:51:ad:f2:fb:
43:25:35:02:98:70:5c:ef:5f:ce:25:37:10:6e:2f:
21:2c:16:aa:f3:3f:a5:f6:7b:85:7e:ac:95:d6:32:
cb:e7:aa:55:03:73:f3:1d:da:af:40:0d:fd:dc:10:
42:83:f6:ce:4b:a9:b3:2c:86:fe:1b:10:bc:52:11:
03:b6:c0:5c:c4:10:21:d2:65:64:ff:c1:ec:c5:53:
bd:88:86:fd:56:52:fb:2d:f4:e9:e6:5c:c7:7b:50:
3d:77:5c:25:01:df:65:8d:fa:eb:54:9a:e5:01:af:
7b:2f:cf:74:aa:98:71:d3:63:f3:8f:75:b6:fb:f1:
80:ad:76:d0:df:8e:34:56:13:98:f7:43:c6:80:ae:
ed:f3:4a:49:9d:ad:d2:13:57:38:74:ad:e7:b7:8d:
cf:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5F:41:76:66:10:74:BE:43:38:C4:87:23:B0:90:82:0B:7E:25:5D
X509v3 Authority Key Identifier:
keyid:5A:E7:95:3E:94:59:DC:09:48:6F:0D:DC:59:F2:A4:05:B5:66:92:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/mV9BdmYQdL5DOMSHI7CQggt-JV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:a50::/48
Signature Algorithm: sha256WithRSAEncryption
0a:49:d4:4f:d7:32:85:92:c5:f1:62:52:fe:b1:5f:4d:a8:bf:
51:6f:83:e4:13:3c:9e:72:e4:a8:4a:7c:60:f6:3e:b5:65:78:
21:79:08:e9:52:52:3b:31:19:63:6d:ea:37:19:8d:56:fa:d7:
c2:1c:41:7e:1e:2f:ce:07:91:58:4a:82:9b:a4:64:a3:8f:66:
b6:7a:99:f4:2a:c3:e8:8c:2e:5a:04:d6:b7:63:96:63:a4:9f:
25:7e:0f:2f:8f:ee:97:77:40:e2:4b:74:aa:52:cf:25:ff:4f:
f8:f0:81:b3:a1:b1:1c:ba:65:8e:2c:e3:b1:83:98:b6:23:e0:
a1:a9:b4:f4:2e:73:ad:0b:63:8e:6f:f2:49:41:b9:37:ec:92:
0a:33:9e:2b:ef:4b:86:09:bf:8c:87:34:a7:5f:7b:83:c5:3b:
87:07:5c:72:d8:71:05:66:ed:22:da:45:3e:95:8e:76:3a:b2:
eb:92:9a:43:71:68:b7:26:00:61:ec:f4:fb:be:b5:cf:d4:43:
63:e3:ce:6f:b3:73:24:c7:f9:23:42:b7:da:00:f8:10:ed:d4:
f0:96:c5:d2:83:5e:2f:c6:72:56:f1:e5:bf:25:c2:4b:e2:0d:
ca:f5:59:55:85:cb:d3:d9:aa:46:2d:2c:4e:4a:89:44:5d:b5:
49:11:3f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:57:21 2024 by rpki-client on console-fra.rpki-client.org