Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/LHCsJFt6g2SJOgvMF31Fho8RdcA.roa
File: LHCsJFt6g2SJOgvMF31Fho8RdcA.roa (raw, json)
Hash identifier: CeGsaq5bNd09dWeMuFA3rgnt9YBu0RkcxN0HKdYTN7g=
Subject key identifier: 2C:70:AC:24:5B:7A:83:64:89:3A:0B:CC:17:7D:45:86:8F:11:75:C0
Certificate issuer: /CN=a3b47fa92b72c49ea0ac5371de353b1e271dc5d0
Certificate serial: 01927834142213320DB7F5D2E1C0ECBEBC12
Authority key identifier: A3:B4:7F:A9:2B:72:C4:9E:A0:AC:53:71:DE:35:3B:1E:27:1D:C5:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7R_qStyxJ6grFNx3jU7HicdxdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/LHCsJFt6g2SJOgvMF31Fho8RdcA.roa
Signing time: Thu 10 Oct 2024 20:52:11 +0000
ROA not before: Thu 10 Oct 2024 20:52:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58299
IP address blocks: 2001:678:d00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o7R_qStyxJ6grFNx3jU7HicdxdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:78:34:14:22:13:32:0d:b7:f5:d2:e1:c0:ec:be:bc:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b47fa92b72c49ea0ac5371de353b1e271dc5d0
Validity
Not Before: Oct 10 20:52:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c70ac245b7a8364893a0bcc177d45868f1175c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8f:b6:ee:70:14:be:a9:b9:e1:8d:de:6a:41:
f0:aa:9c:e7:a7:ff:07:ca:a4:75:05:17:4d:c6:33:
68:e0:6e:af:08:d6:54:b9:f7:a6:35:e4:11:0c:f9:
c0:4d:ed:89:1f:7e:28:4f:1c:43:1e:af:70:39:d7:
64:ea:ac:a3:b1:c3:04:2d:ab:86:2c:74:fd:bc:2f:
56:e7:cc:5c:22:a6:a6:65:9c:3f:f4:be:1b:a9:f1:
60:ff:1a:b1:97:93:2a:76:d1:ed:6d:1b:cf:a8:f2:
74:4b:2d:ad:6f:4a:a2:3c:fc:da:c0:e6:75:51:13:
36:29:53:85:28:b6:6e:37:47:32:58:80:25:94:bd:
94:db:eb:a7:6a:1a:cc:5d:c8:c0:9e:d6:f8:92:40:
05:1e:59:1e:9c:7a:01:1b:58:c7:97:59:0f:6b:51:
cd:da:77:76:04:e4:72:6d:f4:86:33:6f:d0:5f:34:
50:81:b9:01:34:bf:14:5f:f9:b8:b4:57:26:29:11:
2a:cb:eb:02:4f:cd:87:e0:dc:4b:37:41:c2:73:97:
cb:23:d6:37:cf:8a:b0:16:ea:06:e9:5a:e2:c9:30:
4b:5f:31:90:7d:66:f4:d6:70:4d:1c:a1:48:97:c9:
d0:dc:59:de:4e:a8:d0:5b:c4:b7:ef:b5:2f:3f:20:
2b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:70:AC:24:5B:7A:83:64:89:3A:0B:CC:17:7D:45:86:8F:11:75:C0
X509v3 Authority Key Identifier:
keyid:A3:B4:7F:A9:2B:72:C4:9E:A0:AC:53:71:DE:35:3B:1E:27:1D:C5:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7R_qStyxJ6grFNx3jU7HicdxdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/LHCsJFt6g2SJOgvMF31Fho8RdcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:d00::/48
Signature Algorithm: sha256WithRSAEncryption
9e:a0:fd:12:fb:b4:59:d2:88:06:66:5e:de:77:76:7e:24:85:
68:e0:ee:48:d1:eb:52:f2:aa:eb:03:03:d1:35:e7:f1:5d:9c:
4e:31:f9:29:cc:d9:2a:64:74:4b:1d:46:4b:0a:66:c6:7b:e0:
d2:00:a0:94:b2:7b:66:a9:5a:18:e3:e2:c7:14:60:b2:ef:48:
7f:61:e2:ee:d6:27:c0:27:d8:0f:75:ef:18:97:67:3f:e6:fd:
68:f3:c7:f4:a0:cc:b5:b7:83:f5:17:48:d1:35:c0:88:22:42:
f1:21:80:93:8c:3c:7b:f1:7c:a7:98:72:16:69:25:1c:81:8e:
4f:12:95:8b:ac:38:27:54:61:cf:d5:da:9c:50:2c:48:ce:c7:
0c:6b:d4:22:d6:17:02:73:69:22:07:63:82:41:10:10:23:95:
75:b9:3d:d8:60:6d:40:27:29:2d:22:52:76:39:2f:5d:6b:d3:
68:7c:7f:34:03:3d:6c:56:a1:09:ef:88:43:be:05:9d:71:fe:
9c:6b:76:18:c1:8d:61:ac:29:62:2c:a5:4a:72:8e:f5:60:9f:
14:aa:6f:24:2d:af:7d:6a:3f:f4:af:0a:f2:35:de:ea:f3:5e:
44:f2:a8:13:b0:35:3c:4a:a9:8b:63:f4:c3:1e:ed:0f:01:8e:
1a:2f:5e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:53:13 2024 by rpki-client on console-fra.rpki-client.org