Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/VjWbi91n7LVPAsOvJIj6SDhybEM.roa
File: VjWbi91n7LVPAsOvJIj6SDhybEM.roa (raw, json)
Hash identifier: +aZd4751GrEj983OsK468CvW3x5ttqqW0m/fkxTtXTY=
Subject key identifier: 56:35:9B:8B:DD:67:EC:B5:4F:02:C3:AF:24:88:FA:48:38:72:6C:43
Certificate issuer: /CN=17db8bdff22e1a37b0f4a6953424b65169b03429
Certificate serial: 018CC56DDCD2F458DDF94A4A51833193DD87
Authority key identifier: 17:DB:8B:DF:F2:2E:1A:37:B0:F4:A6:95:34:24:B6:51:69:B0:34:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/VjWbi91n7LVPAsOvJIj6SDhybEM.roa
Signing time: Mon 01 Jan 2024 14:29:20 +0000
ROA not before: Mon 01 Jan 2024 14:29:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197942
IP address blocks: 2001:67c:9c4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:dc:d2:f4:58:dd:f9:4a:4a:51:83:31:93:dd:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17db8bdff22e1a37b0f4a6953424b65169b03429
Validity
Not Before: Jan 1 14:29:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56359b8bdd67ecb54f02c3af2488fa4838726c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5b:3d:98:7d:43:94:ec:85:b3:ce:6e:c1:cf:
f4:27:f0:8b:ec:12:6b:e0:d3:9e:db:58:aa:63:b6:
b5:6c:0b:95:0a:aa:5f:8b:f4:de:e5:45:ce:20:19:
73:2a:40:2f:5a:a3:79:02:65:5f:e2:c4:c2:07:af:
89:7d:53:9a:3c:61:45:c5:37:91:bf:0d:06:85:35:
81:b3:4a:53:58:c5:57:90:86:be:59:c8:87:ab:ad:
cd:a7:4a:24:d7:5a:ec:1b:05:22:4c:4e:31:e4:9e:
4a:ca:6b:ad:d6:d7:1d:b5:91:74:9e:d0:f6:1a:02:
16:17:fb:76:d5:9b:94:01:48:f7:c7:e5:1d:f1:68:
de:19:3a:37:94:1f:9a:90:cd:2b:25:13:c6:22:c0:
da:18:d2:3f:95:77:21:c9:a6:61:71:5a:e5:07:b4:
68:a8:b6:78:98:0a:7c:35:d2:b2:43:21:c4:f8:36:
a7:74:c8:d2:04:6d:3f:3e:68:a5:8b:c4:75:fe:b8:
5b:87:44:f8:0c:f9:f1:54:23:5b:bc:f6:f1:64:e5:
01:d3:5e:4f:f4:72:3d:7c:48:70:d4:78:14:64:d4:
34:70:6f:07:5c:51:f9:97:8b:5d:99:69:2c:ce:71:
2c:c1:2e:b6:ee:82:ab:11:e2:f2:56:84:81:78:6b:
d4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:35:9B:8B:DD:67:EC:B5:4F:02:C3:AF:24:88:FA:48:38:72:6C:43
X509v3 Authority Key Identifier:
keyid:17:DB:8B:DF:F2:2E:1A:37:B0:F4:A6:95:34:24:B6:51:69:B0:34:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/VjWbi91n7LVPAsOvJIj6SDhybEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:9c4::/48
Signature Algorithm: sha256WithRSAEncryption
64:9b:72:b6:5b:68:d4:d7:72:22:5a:b3:cc:c6:81:64:af:3d:
a1:9a:92:50:49:21:81:68:6a:e7:06:59:45:cd:e4:cf:08:11:
cb:13:1d:e8:c3:fa:ec:2d:9b:9b:83:75:41:d8:c2:42:c1:e3:
66:e9:5c:e1:95:17:23:65:1c:2b:64:0b:9a:7f:f0:98:20:0c:
80:9d:29:64:e6:54:9b:0d:b8:39:57:42:3e:8b:ff:4b:f6:f4:
9f:39:e4:3b:48:72:bd:71:da:50:f2:cf:37:d6:12:2a:35:50:
db:d4:be:26:10:b5:f0:3e:9e:ab:fa:f8:bb:5d:3e:48:9b:72:
70:42:82:47:9c:7e:a1:d8:73:f1:42:7d:76:d8:d2:76:3e:cb:
a9:5a:8c:e4:d9:77:5c:d2:6a:6c:ec:5d:bc:cb:19:0b:43:e9:
91:21:0f:9c:f2:b1:c0:0c:51:50:39:4c:80:75:b5:4d:92:6f:
19:3d:52:94:f6:fd:6e:82:4f:f2:c7:4c:2a:e9:59:5f:b8:5b:
68:27:c5:c4:87:48:e2:89:4b:d4:35:1b:00:02:ab:87:12:cc:
e1:53:5a:22:df:6c:1d:2a:31:22:dc:b4:80:5d:39:49:12:e4:
23:fc:26:15:70:d5:69:7e:67:d4:01:c4:5d:b3:92:c8:be:f4:
fa:8c:f9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:49:11 2024 by rpki-client on console-ams.rpki-client.org