Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/kh430Vnkr4XKM4T9B3-kUBrZjec.roa
File: kh430Vnkr4XKM4T9B3-kUBrZjec.roa (raw, json)
Hash identifier: y0Fp/AIwNmXKomzVskUgNoiX6JAUnSGlSU9Ch7o0oWA=
Subject key identifier: 92:1E:37:D1:59:E4:AF:85:CA:33:84:FD:07:7F:A4:50:1A:D9:8D:E7
Certificate issuer: /CN=c531b63d11a6cc2d1ce69e1311c87ac1a6a70733
Certificate serial: 018CF2C7F8783D02B98F67076E5E0BB1F813
Authority key identifier: C5:31:B6:3D:11:A6:CC:2D:1C:E6:9E:13:11:C8:7A:C1:A6:A7:07:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTG2PRGmzC0c5p4TEch6waanBzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/kh430Vnkr4XKM4T9B3-kUBrZjec.roa
Signing time: Wed 10 Jan 2024 09:50:40 +0000
ROA not before: Wed 10 Jan 2024 09:50:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210825
IP address blocks: 2001:67c:80c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTG2PRGmzC0c5p4TEch6waanBzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f2:c7:f8:78:3d:02:b9:8f:67:07:6e:5e:0b:b1:f8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c531b63d11a6cc2d1ce69e1311c87ac1a6a70733
Validity
Not Before: Jan 10 09:50:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=921e37d159e4af85ca3384fd077fa4501ad98de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f8:77:1d:c8:03:6d:e0:5d:68:df:4d:47:3a:
52:ad:bf:40:b0:2e:f5:a6:20:bb:9b:84:2a:b4:e4:
c6:83:c5:77:35:26:11:4b:8a:b5:73:44:83:42:2f:
33:d0:61:e6:1f:56:5a:42:11:48:b3:38:29:ee:8d:
68:44:9b:43:28:39:58:3d:b4:77:06:ee:b1:9f:74:
26:ea:39:98:bb:3e:83:6b:2f:3d:f8:2a:45:02:b9:
9c:7c:65:37:67:8c:cd:0e:7e:d7:bb:6b:54:43:f8:
76:b3:aa:81:c4:8e:d2:a5:0f:7a:c1:c6:2b:af:5e:
cc:d1:9a:1f:aa:f6:f9:0b:d1:96:90:08:f2:b9:b0:
23:f7:33:a2:8b:56:c4:cc:0b:d8:65:b2:2f:74:f9:
39:2a:a3:43:68:3c:98:19:e1:4c:8c:59:11:d3:cd:
f7:ef:bb:e3:4e:cb:ff:00:7f:8b:74:f2:f9:7f:d2:
7f:7f:f2:d9:f3:5b:1c:95:73:63:c3:3d:fe:95:9a:
d8:ca:10:72:f2:c5:3a:91:a0:6c:15:bd:26:aa:a4:
4e:fb:a7:6d:d9:89:ee:c3:9f:5b:5d:2d:59:f3:dc:
f3:63:bc:39:cc:27:84:3d:47:16:4f:65:26:b3:41:
32:2c:e9:93:6b:a3:65:79:23:d6:65:a5:d1:17:45:
47:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:1E:37:D1:59:E4:AF:85:CA:33:84:FD:07:7F:A4:50:1A:D9:8D:E7
X509v3 Authority Key Identifier:
keyid:C5:31:B6:3D:11:A6:CC:2D:1C:E6:9E:13:11:C8:7A:C1:A6:A7:07:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTG2PRGmzC0c5p4TEch6waanBzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/kh430Vnkr4XKM4T9B3-kUBrZjec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/86898e-e6e6-4b88-8811-db8cabcee21e/1/xTG2PRGmzC0c5p4TEch6waanBzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:80c::/48
Signature Algorithm: sha256WithRSAEncryption
09:d1:83:04:dd:ad:05:a5:e3:ba:2e:02:6f:21:b3:af:22:d6:
c6:5e:b9:6d:d7:e1:00:1e:9f:42:57:19:bb:cf:cc:6a:4c:b0:
f7:f7:31:80:ea:f4:04:ac:e7:4e:cc:f1:84:05:3c:12:13:5d:
19:06:96:58:ec:f8:2a:9e:da:e2:72:9a:f8:df:c4:5e:d0:52:
91:25:7e:ab:6b:fa:01:19:0a:6c:23:da:91:37:69:99:03:81:
92:4a:c3:43:fd:ed:61:f1:57:08:b5:2e:a8:a5:62:90:fd:85:
99:67:3a:0a:c3:cf:2c:d9:f0:d3:0d:bc:a0:cf:76:c1:fd:45:
d7:b0:61:20:7f:96:13:5c:5b:ee:a6:8e:c6:ad:f2:52:20:c9:
ee:82:1c:f6:a5:b2:7c:67:e8:e3:47:ef:74:de:5f:42:08:af:
bf:fe:3c:1d:a2:3f:e6:28:ee:91:60:ad:bf:a3:a9:a2:dd:c1:
4f:a2:9d:6d:0f:50:8d:09:7d:12:7f:6a:4f:f6:0c:cb:27:36:
4c:c4:5c:1b:85:a6:8a:39:ac:6b:d4:ec:84:f3:50:71:fa:9e:
69:64:87:fa:99:f0:62:70:63:af:ef:a5:32:4d:ca:7d:c8:c4:
23:cd:fe:3c:ac:0e:3f:46:c3:d0:33:b6:ef:f4:ca:2e:78:f6:
b8:dd:1d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:13:18 2024 by rpki-client on console-ams.rpki-client.org