Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2f3904-3898-42ed-8f40-97345ca17d7f/1/0Fg9Wi4EjDi5dnU-79lfwveq-M8.roa
File: 0Fg9Wi4EjDi5dnU-79lfwveq-M8.roa (raw, json)
Hash identifier: M5B0SkG9hWwwlfig08E3JzP7e25LB4D53pzU2Ly/ANE=
Subject key identifier: D0:58:3D:5A:2E:04:8C:38:B9:76:75:3E:EF:D9:5F:C2:F7:AA:F8:CF
Certificate issuer: /CN=d71fbe3820f6f18ea1b3336da9f072b8fd2a0df2
Certificate serial: 018CC64AEBD456A5A00830D6A07314425D5C
Authority key identifier: D7:1F:BE:38:20:F6:F1:8E:A1:B3:33:6D:A9:F0:72:B8:FD:2A:0D:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1x--OCD28Y6hszNtqfByuP0qDfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2f3904-3898-42ed-8f40-97345ca17d7f/1/0Fg9Wi4EjDi5dnU-79lfwveq-M8.roa
Signing time: Mon 01 Jan 2024 18:30:47 +0000
ROA not before: Mon 01 Jan 2024 18:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213199
IP address blocks: 2001:67c:285c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/2f3904-3898-42ed-8f40-97345ca17d7f/1/1x--OCD28Y6hszNtqfByuP0qDfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/2f3904-3898-42ed-8f40-97345ca17d7f/1/1x--OCD28Y6hszNtqfByuP0qDfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1x--OCD28Y6hszNtqfByuP0qDfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:eb:d4:56:a5:a0:08:30:d6:a0:73:14:42:5d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d71fbe3820f6f18ea1b3336da9f072b8fd2a0df2
Validity
Not Before: Jan 1 18:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0583d5a2e048c38b976753eefd95fc2f7aaf8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c7:51:78:15:14:c4:00:b2:bc:94:64:db:e2:
8d:13:df:50:ac:e5:98:28:61:b0:26:01:9f:f3:35:
e4:e6:78:7c:e2:68:69:47:48:1b:d7:63:75:a5:19:
5b:88:f7:48:51:97:7a:cb:55:c0:9f:92:1f:40:56:
40:21:a8:78:61:a3:0a:89:60:88:73:19:b2:77:ef:
c4:01:bb:f4:ee:0c:90:98:f3:57:8d:68:7f:8e:e8:
f3:54:a7:cf:58:17:3a:b7:1a:60:1f:23:87:69:69:
9b:4a:a3:05:de:c0:8c:69:2c:c1:bd:fb:31:ed:b5:
01:92:b6:d1:18:5f:e4:d1:e4:09:fa:8f:49:78:bc:
2f:53:dc:a4:f0:7d:e0:a6:9e:65:51:71:b5:92:6c:
30:a5:06:3a:04:55:2e:78:d5:0b:bf:c9:12:68:28:
2d:ba:78:4c:13:46:07:97:cd:38:de:fb:eb:33:9d:
c4:fa:87:d4:dd:2a:b7:3d:02:45:bc:69:c7:82:57:
26:00:6f:cb:19:45:47:d1:3b:04:52:cf:38:b2:a4:
35:f3:89:33:c4:04:b3:99:83:d6:69:4c:fe:18:18:
0b:44:a0:7c:7f:3b:d1:f6:6b:08:c9:34:d9:2e:43:
a3:f7:af:9a:98:62:65:d5:35:f8:67:81:0c:9c:8c:
79:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:58:3D:5A:2E:04:8C:38:B9:76:75:3E:EF:D9:5F:C2:F7:AA:F8:CF
X509v3 Authority Key Identifier:
keyid:D7:1F:BE:38:20:F6:F1:8E:A1:B3:33:6D:A9:F0:72:B8:FD:2A:0D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1x--OCD28Y6hszNtqfByuP0qDfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2f3904-3898-42ed-8f40-97345ca17d7f/1/0Fg9Wi4EjDi5dnU-79lfwveq-M8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2f3904-3898-42ed-8f40-97345ca17d7f/1/1x--OCD28Y6hszNtqfByuP0qDfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:285c::/48
Signature Algorithm: sha256WithRSAEncryption
1b:4c:63:f7:f3:7f:37:f0:51:d0:3d:30:fc:b9:8f:24:74:b7:
15:13:ac:24:51:29:85:bc:29:13:3d:dd:dd:9a:9c:29:19:28:
8d:98:a5:20:9a:4c:2a:89:8a:24:12:f0:72:55:37:83:2e:75:
ec:ea:ca:1a:f2:18:ac:3a:e5:89:b0:cb:61:23:50:35:b8:a0:
44:32:97:42:48:c6:39:7d:fd:31:99:59:3f:e2:42:85:56:58:
4c:26:9e:a8:8f:fa:5a:29:ff:d0:36:28:7c:19:05:df:c1:6b:
69:10:b0:e2:91:e5:85:7e:2c:ab:d2:b2:4f:94:bd:5e:13:f9:
15:e0:98:cf:0f:72:dd:3d:29:32:f4:1a:bb:08:c8:01:dc:ff:
a0:0c:2d:4b:33:22:b8:ca:40:34:06:5d:17:6a:f2:cc:cf:d0:
0d:ab:04:3b:a8:7d:88:e1:d6:57:24:96:ec:cd:29:90:b7:cf:
e0:0d:d7:17:a8:e1:6b:7b:74:1b:8b:be:e4:4b:0a:fd:0f:fd:
09:fe:4d:03:b8:c5:a4:79:bd:ae:05:d7:19:2f:a4:53:d7:64:
cd:d3:03:c0:97:0e:be:09:05:de:9f:27:9c:4b:99:92:f5:24:
7b:e5:72:61:2b:77:6a:2c:fd:6e:96:6e:e2:f5:e4:d9:f2:67:
9b:74:0b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:12:07 2024 by rpki-client on console-fra.rpki-client.org