Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/gE4Qw_he90OiJoWyEEZzwfGozZM.roa
File: gE4Qw_he90OiJoWyEEZzwfGozZM.roa (raw, json)
Hash identifier: OEj93Ra0pIks3M5p0yd30tOuPyMbPC43UZHJ8cb7RYw=
Subject key identifier: 80:4E:10:C3:F8:5E:F7:43:A2:26:85:B2:10:46:73:C1:F1:A8:CD:93
Certificate issuer: /CN=c1173f47ec1d92e7886ea2907ff927ee17cbf2f4
Certificate serial: 01924271AF0A7EDC8D20C55569D3B29A03DA
Authority key identifier: C1:17:3F:47:EC:1D:92:E7:88:6E:A2:90:7F:F9:27:EE:17:CB:F2:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRc_R-wdkueIbqKQf_kn7hfL8vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/gE4Qw_he90OiJoWyEEZzwfGozZM.roa
Signing time: Mon 30 Sep 2024 10:19:59 +0000
ROA not before: Mon 30 Sep 2024 10:19:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6730
IP address blocks: 2001:67c:444::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRc_R-wdkueIbqKQf_kn7hfL8vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:42:71:af:0a:7e:dc:8d:20:c5:55:69:d3:b2:9a:03:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1173f47ec1d92e7886ea2907ff927ee17cbf2f4
Validity
Not Before: Sep 30 10:19:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=804e10c3f85ef743a22685b2104673c1f1a8cd93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:75:e7:cd:34:06:7d:5c:75:55:79:25:a7:4f:
dc:b0:5f:29:3b:2d:bc:7b:2f:f4:d8:43:7e:0b:7e:
0f:44:49:0c:3a:49:b4:45:7f:9d:38:23:84:4d:01:
8b:36:69:04:15:d7:6b:83:3d:14:35:36:c3:34:64:
f2:73:c0:5f:cf:aa:a4:71:b9:c0:bf:12:ee:14:c8:
e4:85:50:65:aa:b6:0d:46:2e:ad:f2:d5:cd:88:52:
5f:a0:42:3f:a6:bb:bc:45:0b:09:de:ae:6a:2f:33:
99:2a:cd:9c:74:f3:d3:f3:3a:0d:40:e6:26:42:bf:
b1:68:ac:3a:4c:c6:3a:7f:be:f7:2d:2d:21:b0:e0:
c4:25:3f:29:9b:54:d2:d7:d6:29:d4:aa:3b:ba:f8:
82:e2:3a:40:c6:33:7a:09:40:18:51:f9:cd:bf:75:
16:37:20:55:eb:14:d2:22:52:41:00:07:98:4e:f1:
f3:98:d4:26:2c:cb:7b:64:32:7f:78:ca:cb:62:eb:
bc:61:1a:94:40:b5:d4:2d:9a:71:76:f1:b3:fd:10:
b3:8e:0c:ca:4d:e1:fe:7c:44:4a:c4:a9:03:9d:9d:
34:b5:fa:a0:a8:e0:fe:3f:01:fb:71:9a:13:24:2e:
46:ba:91:a9:5b:73:26:52:87:03:5b:61:45:c0:b8:
4b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4E:10:C3:F8:5E:F7:43:A2:26:85:B2:10:46:73:C1:F1:A8:CD:93
X509v3 Authority Key Identifier:
keyid:C1:17:3F:47:EC:1D:92:E7:88:6E:A2:90:7F:F9:27:EE:17:CB:F2:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRc_R-wdkueIbqKQf_kn7hfL8vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/gE4Qw_he90OiJoWyEEZzwfGozZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:444::/48
Signature Algorithm: sha256WithRSAEncryption
10:10:2a:d8:69:96:33:3a:9c:ec:55:b1:38:18:c3:4c:a7:61:
2f:ed:5f:b5:15:6f:1b:b5:27:b0:cf:3c:83:7d:a1:dd:51:62:
bb:d0:8d:84:97:9a:b8:ed:14:ff:17:a3:40:73:a2:f0:a1:39:
ef:3e:69:78:a8:29:6f:2e:42:a9:ac:b1:c4:2c:bd:f1:30:77:
b7:af:c4:4b:a6:36:e1:ba:1d:76:11:65:b9:44:9b:0a:a9:26:
14:3b:72:26:26:ba:5b:a5:df:e1:4d:af:2d:cc:7e:98:3a:10:
83:45:6d:e4:95:a4:73:66:29:0c:ef:68:33:c9:d9:8f:27:a5:
32:fa:dc:1b:05:9a:03:12:54:76:58:7f:2d:0c:27:59:27:b9:
8e:85:ad:72:ec:2e:a3:5a:36:33:4c:3e:b2:0e:c2:a7:d5:54:
79:9e:b3:26:cc:9a:86:3e:0f:5c:8b:72:ff:88:50:f9:71:c8:
35:8a:20:0c:c4:e0:d1:fb:a6:76:52:a3:41:86:70:bb:3e:49:
a4:3d:23:b1:e3:5e:2b:c4:bb:06:5e:05:a3:19:7e:74:68:30:
59:d4:78:ae:ca:2b:6b:19:30:ca:75:c4:de:90:d1:07:84:73:
26:80:d1:b5:61:60:78:3c:29:7b:05:21:bd:69:12:31:93:37:
34:6d:ec:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:47:12 2024 by rpki-client on console-ams.rpki-client.org