Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/HdjQUa57Z007bGgwM2AC07zC5OE.roa
File: HdjQUa57Z007bGgwM2AC07zC5OE.roa (raw, json)
Hash identifier: +k/8vcyG2cjFaNiheelNXyJzON4H5TK3SYgJ/4+UfY4=
Subject key identifier: 1D:D8:D0:51:AE:7B:67:4D:3B:6C:68:30:33:60:02:D3:BC:C2:E4:E1
Certificate issuer: /CN=e8ed602fd0d46d38cde1e732c652ea9958e97691
Certificate serial: 018CC425159BFFCE03494186F3CF199FAD09
Authority key identifier: E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/HdjQUa57Z007bGgwM2AC07zC5OE.roa
Signing time: Mon 01 Jan 2024 08:30:13 +0000
ROA not before: Mon 01 Jan 2024 08:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207488
IP address blocks: 2001:678:c10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:15:9b:ff:ce:03:49:41:86:f3:cf:19:9f:ad:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8ed602fd0d46d38cde1e732c652ea9958e97691
Validity
Not Before: Jan 1 08:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1dd8d051ae7b674d3b6c6830336002d3bcc2e4e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2a:cb:28:61:0a:6b:4b:d2:81:0a:1e:83:83:
e0:a9:26:23:e9:4b:52:18:15:e1:1c:bc:77:bc:c8:
9e:6d:76:71:c9:ec:5d:6a:24:0e:80:6f:c1:7a:a8:
33:15:93:e2:f3:ce:98:ab:36:64:70:9f:6b:0f:ce:
14:d2:09:3b:9e:2a:b5:51:85:3a:91:43:22:0f:91:
7e:7a:7a:f1:6f:8a:df:66:82:51:31:8a:c9:06:28:
50:f9:f5:56:c0:8f:9a:39:e5:ae:cb:86:54:ba:c6:
b4:fb:cb:a1:e1:83:5b:b8:f0:30:37:71:19:fa:7f:
d0:a1:5f:96:aa:31:92:a3:2b:f1:3a:60:e8:fb:4e:
33:55:ac:b1:c6:7b:93:0b:3c:8b:6d:75:9e:d2:fe:
d7:cf:f9:6f:bd:6a:36:6e:32:bf:28:a0:09:d4:c6:
96:4b:c8:32:c9:22:7d:1a:b8:7a:8d:d4:73:14:1d:
66:f8:a2:a7:bb:5c:0d:57:44:c2:7d:80:52:20:e4:
11:46:13:d2:97:72:7c:d4:48:a9:bd:ec:ec:cf:16:
01:1c:6f:24:9e:70:88:4a:e8:65:a1:f5:a3:ea:90:
0b:ad:a5:4a:1a:a6:9c:09:6a:08:15:c2:bd:8b:21:
36:dd:33:9f:89:a9:25:17:74:b2:b3:70:bb:06:c6:
9e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D8:D0:51:AE:7B:67:4D:3B:6C:68:30:33:60:02:D3:BC:C2:E4:E1
X509v3 Authority Key Identifier:
keyid:E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/HdjQUa57Z007bGgwM2AC07zC5OE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:c10::/48
Signature Algorithm: sha256WithRSAEncryption
1b:cb:8e:2b:82:cd:96:07:bb:66:e6:15:dc:27:ee:6f:d9:c3:
b4:35:ad:93:20:e8:ad:42:13:f4:0b:19:bb:ac:30:18:e3:c8:
89:6f:58:47:6a:ec:c3:bd:70:94:84:d4:1e:90:60:90:86:6b:
0f:2f:97:d9:80:8b:56:4f:03:40:3d:9f:97:aa:48:f3:d9:ba:
1e:42:eb:da:d1:ff:0e:be:2e:6a:8f:95:67:c7:df:22:86:77:
a5:fd:07:be:e4:10:a0:ff:59:6d:b5:27:36:69:61:3e:8a:d1:
3b:1c:ac:ef:bb:68:9a:c2:08:67:a0:73:6a:9f:75:2f:ee:47:
e0:c4:ab:20:bf:47:39:13:7a:a3:03:85:44:3e:76:79:d6:7f:
2a:16:a3:06:92:7f:e3:20:22:b7:37:80:10:38:6c:c8:10:15:
81:3b:d1:d6:65:90:40:12:d5:79:77:0f:f5:03:00:5c:08:70:
30:cd:fb:96:cc:0a:77:15:f3:59:e0:da:19:ee:a7:12:38:e9:
5b:b7:90:38:93:64:93:80:6a:f6:88:4f:fb:71:51:c8:66:93:
e7:c2:e2:03:28:19:8b:98:73:65:b3:95:a6:a7:71:53:45:0b:
c8:83:f7:8b:cd:8c:87:ef:9c:18:35:34:98:ad:0f:57:d1:0c:
9c:cf:2e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:50:26 2024 by rpki-client on console-fra.rpki-client.org