Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/aOr6yLQc8WtykjtnT8VfYRS1HmA.roa
File: aOr6yLQc8WtykjtnT8VfYRS1HmA.roa (raw, json)
Hash identifier: u5sN2aSnW8buedkb7tcKg5Wlt0VuNSSqfnrMNFGQfbM=
Subject key identifier: 68:EA:FA:C8:B4:1C:F1:6B:72:92:3B:67:4F:C5:5F:61:14:B5:1E:60
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 018CCA2B33BD7FCFD9C02BBF36BEA3323893
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/aOr6yLQc8WtykjtnT8VfYRS1HmA.roa
Signing time: Tue 02 Jan 2024 12:34:38 +0000
ROA not before: Tue 02 Jan 2024 12:34:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209844
IP address blocks: 2001:67c:2960::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:33:bd:7f:cf:d9:c0:2b:bf:36:be:a3:32:38:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Jan 2 12:34:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68eafac8b41cf16b72923b674fc55f6114b51e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:37:ff:47:a0:25:8d:95:e1:eb:22:73:82:da:
9c:5c:60:8f:73:81:6b:e7:2b:f0:eb:15:0a:42:dd:
6a:52:00:d5:81:aa:14:a1:4d:3c:8d:4b:6d:02:e2:
81:bd:26:fa:76:ce:55:86:25:54:b4:a2:48:11:40:
3e:87:79:0e:b5:a5:26:12:66:9f:41:19:e6:b7:77:
33:d0:7f:f9:05:1d:d6:4a:c8:be:3c:ea:55:b7:31:
80:7b:3f:9c:8a:40:aa:3f:6f:9e:fa:72:63:cb:00:
9d:5a:bd:98:4e:25:3d:9d:09:a3:f0:f6:8a:c7:f1:
8e:8c:c9:cc:b6:68:ab:b5:57:5c:0a:33:78:09:26:
db:52:32:46:4c:2a:23:42:29:cf:07:3f:44:bd:ba:
82:dc:19:4e:17:c3:a4:16:01:4d:5d:4a:04:a9:6b:
38:ec:0b:9b:96:e4:ae:44:60:41:5c:d2:46:51:8b:
66:8e:e1:dd:ad:17:14:94:ac:e3:7b:49:ed:02:0f:
d8:54:21:41:93:04:79:d8:80:f9:48:42:39:96:7a:
f0:d5:25:1c:14:19:3e:54:b9:3d:ee:72:db:e2:e0:
1b:35:e6:45:87:fd:22:c1:a2:0f:78:f1:18:b1:e7:
b5:79:10:12:ab:b6:ee:33:f7:42:4b:e4:4c:3b:5b:
0b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:EA:FA:C8:B4:1C:F1:6B:72:92:3B:67:4F:C5:5F:61:14:B5:1E:60
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/aOr6yLQc8WtykjtnT8VfYRS1HmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2960::/48
Signature Algorithm: sha256WithRSAEncryption
18:7b:22:aa:10:a9:56:7c:42:34:0d:3d:5f:a8:28:c5:43:fd:
48:eb:e9:f7:aa:bb:c3:cf:56:77:8c:4e:5d:ce:42:c2:18:96:
f3:7a:24:6c:0d:e7:d2:94:68:62:b7:71:01:18:06:8e:2b:47:
3b:29:95:db:10:9a:ad:86:66:9b:ad:5e:89:81:e7:ee:1e:87:
68:e3:80:88:67:e2:fa:19:71:d8:bb:c2:1c:6c:03:32:66:e5:
5d:80:34:58:2e:0d:e9:6b:8f:f9:d8:b9:ca:81:bb:91:fd:45:
78:e4:8f:d7:ac:63:f0:c7:ef:88:cb:bb:28:79:32:a6:05:66:
4b:7c:ae:e2:0f:00:be:ce:fb:d9:b4:a8:eb:a0:95:90:cb:c7:
7b:8a:eb:fa:39:b1:51:f3:0a:07:33:dc:68:8f:76:67:1a:ba:
f9:13:ec:d3:97:3c:e6:9b:70:a3:17:09:a9:57:90:d0:59:ae:
4f:af:5a:29:22:b8:af:d5:1b:35:3c:52:d3:c4:b4:b1:86:41:
36:c9:20:9c:da:fb:90:64:14:f0:8c:ed:16:be:65:75:a1:b2:
82:ac:13:a3:f6:da:87:81:f5:27:8c:5c:82:36:ce:53:5c:21:
e5:e3:7c:f0:16:31:7f:79:4e:02:ca:4c:58:13:4a:c3:16:11:
96:b2:25:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 03:35:55 2024 by rpki-client on console-fra.rpki-client.org