Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/hY9M2QeeTwiRu68HDF_CqD_J6hk.roa
File: hY9M2QeeTwiRu68HDF_CqD_J6hk.roa (raw, json)
Hash identifier: ZKXcCWK/ttM6DEvxrgBvlnwtXLr2gVoCzFpUYkJei/o=
Subject key identifier: 85:8F:4C:D9:07:9E:4F:08:91:BB:AF:07:0C:5F:C2:A8:3F:C9:EA:19
Certificate issuer: /CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Certificate serial: 018CC3B728D03C4AC52FC30FCD8F06199BB7
Authority key identifier: FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/hY9M2QeeTwiRu68HDF_CqD_J6hk.roa
Signing time: Mon 01 Jan 2024 06:30:09 +0000
ROA not before: Mon 01 Jan 2024 06:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59570
IP address blocks: 2001:678:d30::/48 maxlen: 48
2001:678:d34::/48 maxlen: 48
2001:67c:2148::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:28:d0:3c:4a:c5:2f:c3:0f:cd:8f:06:19:9b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Validity
Not Before: Jan 1 06:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=858f4cd9079e4f0891bbaf070c5fc2a83fc9ea19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d0:96:03:15:b7:7f:7b:a8:ca:59:19:de:5e:
2a:f4:23:62:da:07:dd:39:f0:de:8e:77:fe:f3:80:
89:9c:a1:8e:b8:40:ce:c1:00:8c:8f:12:8b:77:8e:
f1:b0:92:33:5e:8f:74:a7:f2:a8:ff:4d:a6:2e:03:
4a:a7:05:c0:4d:b2:36:67:19:7a:35:7d:9b:a8:8a:
76:d2:a4:6a:a8:84:7b:f5:e0:7e:c2:42:d9:f2:86:
c1:20:d4:93:14:55:b9:96:45:d0:bf:85:78:b9:c2:
d6:c1:8d:9d:a7:09:92:19:5c:b3:e1:f8:cd:05:cd:
77:8f:77:81:01:12:94:9d:af:6b:ea:93:25:69:91:
5b:a9:6c:75:fb:13:b3:28:02:33:b8:59:e9:9e:ae:
a8:dc:98:01:86:ba:1b:cf:6a:54:ad:1f:db:88:7d:
a6:1b:da:b9:bd:14:36:c6:66:5d:53:19:01:12:48:
1a:15:62:9f:c1:86:ae:6f:24:a9:80:11:47:a5:cb:
06:a9:a7:ce:0f:31:27:c5:2f:71:9e:ec:e0:61:da:
5d:54:ba:36:df:ed:78:7a:a6:6c:e2:0e:42:11:12:
94:2e:0e:6b:b3:7f:37:32:b8:8d:5d:fe:57:43:25:
8b:43:b8:21:b6:dc:d1:37:cc:cf:ba:3d:ab:b9:7b:
2c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8F:4C:D9:07:9E:4F:08:91:BB:AF:07:0C:5F:C2:A8:3F:C9:EA:19
X509v3 Authority Key Identifier:
keyid:FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/hY9M2QeeTwiRu68HDF_CqD_J6hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:d30::/48
2001:678:d34::/48
2001:67c:2148::/48
Signature Algorithm: sha256WithRSAEncryption
b0:25:0e:c0:16:c0:ba:8b:de:fc:bd:79:25:b5:16:54:e1:76:
68:58:4d:eb:61:fd:4e:d0:66:58:cb:71:32:05:4f:de:7e:7e:
6c:b2:62:0f:4d:d4:d1:88:ed:92:fe:78:34:bb:a4:11:16:05:
97:3c:32:60:3d:9b:5c:43:72:95:66:b3:cc:86:69:6c:ae:a6:
81:11:ec:4f:d2:cf:75:df:09:98:4c:df:6f:12:a8:53:11:58:
c9:b8:0f:6d:47:6e:e3:5e:8f:27:ac:9f:1e:cb:a4:c5:cf:46:
a4:dc:3e:bd:67:c9:ba:32:02:b9:18:7b:7c:15:c2:b4:a1:af:
40:77:57:db:22:d4:95:05:b0:21:64:66:e5:66:68:83:e4:6d:
51:7d:26:ab:75:89:c1:cd:26:26:16:b4:68:51:73:e5:4b:0a:
fb:60:8c:22:4f:d0:ab:3a:21:0c:1d:c7:ab:e6:79:55:79:3d:
04:c9:d2:65:f7:fa:35:7d:0a:93:77:66:01:83:ea:e5:79:23:
82:14:be:f0:d1:3c:39:bc:ca:b1:fc:3e:31:52:41:9a:f3:47:
e3:6d:9e:13:07:4b:d5:59:84:67:7d:34:a7:42:d2:10:db:7a:
28:b2:0a:dd:62:6f:63:40:1a:2e:27:90:05:e6:d1:ef:5c:20:
33:03:c2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 21:44:36 2024 by rpki-client on console-fra.rpki-client.org