Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/kR5UVFXhuvScm7g_ZHv3sXadasE.roa
File: kR5UVFXhuvScm7g_ZHv3sXadasE.roa (raw, json)
Hash identifier: TpEN3ZRuLDG8iuThhbwdgzSUP7PfeF9HJBoNN6jrfJE=
Subject key identifier: 91:1E:54:54:55:E1:BA:F4:9C:9B:B8:3F:64:7B:F7:B1:76:9D:6A:C1
Certificate issuer: /CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
Certificate serial: 018CC86F52C66A7B7E961CFBF49895AE251E
Authority key identifier: FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/kR5UVFXhuvScm7g_ZHv3sXadasE.roa
Signing time: Tue 02 Jan 2024 04:29:48 +0000
ROA not before: Tue 02 Jan 2024 04:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206362
IP address blocks: 2001:678:fdc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:52:c6:6a:7b:7e:96:1c:fb:f4:98:95:ae:25:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
Validity
Not Before: Jan 2 04:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=911e545455e1baf49c9bb83f647bf7b1769d6ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:72:25:08:e9:cd:cc:f6:fc:cd:8f:81:5d:04:
4f:7e:62:50:91:dc:f2:b3:dd:d4:be:b6:ec:c0:95:
cc:71:0b:42:7d:08:1a:a9:51:91:5d:db:16:e7:40:
27:04:79:08:8f:50:8b:10:ca:1b:93:1d:50:5c:ca:
fa:6c:77:35:8d:c8:40:87:73:b4:da:21:69:48:40:
14:91:a7:34:cc:9b:95:2e:a7:3e:d9:b5:e1:36:e8:
30:8a:74:31:29:d9:b9:6e:f1:06:3e:19:d9:77:94:
60:22:61:e9:b9:6c:88:68:b6:f3:1d:43:dd:98:b5:
1d:a6:66:9f:75:95:b7:ba:0a:19:e1:9c:a0:91:c2:
1b:e8:30:0f:5e:06:a7:ba:82:31:41:ce:09:64:25:
77:79:57:81:0c:f3:94:fa:cc:0b:04:62:93:f5:93:
27:ec:90:97:b7:49:16:a8:e5:80:90:a0:c4:a5:2f:
7f:f6:45:a6:1f:6d:ef:c2:58:d9:e0:09:30:50:86:
99:5a:b4:64:0e:ed:3a:e3:5c:28:2d:ba:11:43:fd:
4a:0e:e3:ed:97:24:0a:de:4a:24:6d:1c:86:1f:1d:
d7:78:c2:87:18:c8:4a:7b:93:86:0b:3f:35:22:fd:
3e:b6:12:ca:24:c5:cf:ad:04:06:b5:55:b5:a1:aa:
94:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:1E:54:54:55:E1:BA:F4:9C:9B:B8:3F:64:7B:F7:B1:76:9D:6A:C1
X509v3 Authority Key Identifier:
keyid:FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/kR5UVFXhuvScm7g_ZHv3sXadasE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:fdc::/48
Signature Algorithm: sha256WithRSAEncryption
1e:40:8d:60:d5:f3:3d:75:86:aa:41:c9:d0:9a:69:03:da:ec:
bd:23:8a:93:ea:2f:33:f3:25:b6:30:be:98:23:0c:ab:29:0b:
99:82:36:c2:a8:fc:24:17:c1:25:7c:3a:44:cf:bc:04:40:a0:
90:ac:25:48:52:6e:2d:b2:2f:22:20:c3:0a:74:aa:36:ec:5a:
32:8e:46:ba:9b:10:fe:32:73:86:42:d4:66:85:8b:64:3b:0f:
c7:ff:ec:4f:2f:a4:dd:3b:47:f7:91:7b:e7:78:e4:0b:22:15:
08:ef:04:e8:98:07:96:28:d0:06:36:29:d2:7b:32:58:0d:e3:
9b:e5:f6:96:55:18:da:77:04:f0:07:b1:db:06:d8:1e:70:db:
7f:ac:22:8d:81:2f:25:78:dc:d5:2d:b5:fd:35:f3:48:65:83:
cb:8f:7d:5b:42:a1:24:71:ca:e0:96:2d:8d:87:3d:6e:dd:9d:
bf:81:df:da:3f:97:76:a2:c0:2a:a4:30:c4:67:af:b8:9b:3d:
94:77:73:b7:8f:e7:c0:b4:3d:b3:8d:68:7f:ba:df:bb:9f:9e:
38:46:15:e0:35:4b:b0:3d:82:c2:8b:12:1e:d8:c5:29:be:9e:
30:08:00:e3:1d:4f:b1:4f:62:32:05:e6:be:8e:b7:b8:d1:cd:
f4:20:77:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:38:16 2024 by rpki-client on console-ams.rpki-client.org