Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/HDmdCgrKvYXHFV54sdJKfdP3x68.roa
File: HDmdCgrKvYXHFV54sdJKfdP3x68.roa (raw, json)
Hash identifier: 8lCjmEIpGd4dgZkcbO5lbbYiNsS+qvyfzD9v8P+2s8M=
Subject key identifier: 1C:39:9D:0A:0A:CA:BD:85:C7:15:5E:78:B1:D2:4A:7D:D3:F7:C7:AF
Certificate issuer: /CN=533b46e3a9dd5b7ea8a8bfda2f6e3bad15509113
Certificate serial: 018CC56F04F86A8BEE9B13E42239176C3FDD
Authority key identifier: 53:3B:46:E3:A9:DD:5B:7E:A8:A8:BF:DA:2F:6E:3B:AD:15:50:91:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UztG46ndW36oqL_aL247rRVQkRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/HDmdCgrKvYXHFV54sdJKfdP3x68.roa
Signing time: Mon 01 Jan 2024 14:30:36 +0000
ROA not before: Mon 01 Jan 2024 14:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208658
IP address blocks: 2001:678:aac::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UztG46ndW36oqL_aL247rRVQkRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6f:04:f8:6a:8b:ee:9b:13:e4:22:39:17:6c:3f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533b46e3a9dd5b7ea8a8bfda2f6e3bad15509113
Validity
Not Before: Jan 1 14:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c399d0a0acabd85c7155e78b1d24a7dd3f7c7af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c5:71:2a:e4:35:be:9f:ac:ee:8c:eb:96:90:
25:87:78:dc:8c:3f:9f:f9:f5:83:ff:05:ac:e5:f3:
90:d2:b1:c2:a8:05:e8:33:ff:34:39:91:94:a7:e0:
9f:c3:71:d6:fb:fc:ec:cc:13:8a:f8:14:51:23:84:
3b:4c:6e:76:a6:3a:a7:65:6f:65:68:6a:3f:29:60:
a8:33:b3:59:bb:67:bc:cf:e5:92:c4:b7:56:59:e1:
bf:91:1f:ea:82:85:3c:01:aa:c4:53:f5:f5:a8:61:
d9:a0:bd:0d:ed:27:5b:76:4d:20:12:bf:09:14:20:
15:b9:d5:61:7c:0a:b5:8c:d1:cd:db:92:c3:0f:25:
c4:c3:a7:10:c9:7a:ec:dc:98:c8:9e:2a:21:70:5d:
70:2a:37:71:2e:3a:32:93:c9:d9:c5:d6:0d:03:2c:
87:0d:a0:ec:71:9c:2a:b4:0a:df:4e:c2:5d:6f:c4:
e4:dd:79:ce:e8:a0:55:37:48:28:7b:4f:26:c6:af:
bf:d7:0e:41:82:13:17:7d:ef:67:4b:86:47:de:14:
ba:29:74:02:f9:c4:e7:e4:e8:54:ff:bd:c0:9b:7f:
8a:d6:2f:7a:a8:cc:e4:bf:57:74:08:b5:84:fc:8a:
91:83:57:a9:2d:3c:cd:dc:cb:24:28:de:f5:19:3e:
0e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:39:9D:0A:0A:CA:BD:85:C7:15:5E:78:B1:D2:4A:7D:D3:F7:C7:AF
X509v3 Authority Key Identifier:
keyid:53:3B:46:E3:A9:DD:5B:7E:A8:A8:BF:DA:2F:6E:3B:AD:15:50:91:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UztG46ndW36oqL_aL247rRVQkRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/HDmdCgrKvYXHFV54sdJKfdP3x68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f50e2d-e400-44f1-8832-e26960bf34e5/1/UztG46ndW36oqL_aL247rRVQkRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:aac::/48
Signature Algorithm: sha256WithRSAEncryption
95:7f:1d:99:a0:a1:82:4d:9c:ba:de:12:2a:24:de:a9:e1:bc:
7e:2f:4c:1e:76:e2:76:c7:7e:48:32:69:08:ac:62:df:7d:2c:
2e:8c:50:62:87:0f:73:5a:7a:50:42:09:b0:22:a7:dc:c4:f8:
52:66:4f:1e:f3:ee:fd:e8:d9:72:d0:86:02:20:ce:e7:5b:41:
49:92:6a:37:07:0b:53:9c:e3:42:12:3b:ec:85:09:5f:03:9d:
c9:94:e0:2b:74:b9:86:db:13:9c:78:1f:20:0b:f8:25:c7:5a:
d9:f8:f6:06:9b:e0:d6:35:1a:88:3f:10:a5:ea:7a:14:b9:6e:
b8:5b:b9:d3:78:9b:76:d0:f3:7e:f1:d5:e9:ce:e3:3c:4e:ef:
6a:49:94:da:d9:0e:7c:eb:b7:27:92:ea:29:d2:74:08:06:54:
52:3f:d6:30:89:97:c7:38:af:2c:fe:5a:b9:ce:10:d9:10:1c:
7c:83:0b:c9:de:71:50:ea:09:ce:64:d3:d9:64:f1:f5:3f:14:
af:da:54:55:d3:5d:35:70:d3:15:d2:0e:66:60:c0:33:f2:3f:
3a:f4:39:e1:20:60:db:0e:a9:e9:65:af:39:99:00:85:4d:1e:
b1:a2:81:b6:ae:5b:be:62:ef:53:6c:5b:4f:03:c0:67:61:56:
e2:36:19:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:47:42 2024 by rpki-client on console-ams.rpki-client.org