Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/GohIaBQeqaCy1cXCgJ_ETwEXFfA.roa
File: GohIaBQeqaCy1cXCgJ_ETwEXFfA.roa (raw, json)
Hash identifier: 7Ocvt5UKgmDhUei1DpVYd2Gr7CiLjKTW2zRhNhMk+h4=
Subject key identifier: 1A:88:48:68:14:1E:A9:A0:B2:D5:C5:C2:80:9F:C4:4F:01:17:15:F0
Certificate issuer: /CN=2936f64328c1e66911409ea7c69722f8d26266b5
Certificate serial: 018CC794AB222CE177EE8D4A968C0EEB3FA7
Authority key identifier: 29:36:F6:43:28:C1:E6:69:11:40:9E:A7:C6:97:22:F8:D2:62:66:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/GohIaBQeqaCy1cXCgJ_ETwEXFfA.roa
Signing time: Tue 02 Jan 2024 00:30:58 +0000
ROA not before: Tue 02 Jan 2024 00:30:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200270
IP address blocks: 2001:67c:b68::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:ab:22:2c:e1:77:ee:8d:4a:96:8c:0e:eb:3f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2936f64328c1e66911409ea7c69722f8d26266b5
Validity
Not Before: Jan 2 00:30:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a884868141ea9a0b2d5c5c2809fc44f011715f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:4e:09:e2:f0:3c:2a:15:17:74:b8:79:70:ad:
4e:bb:05:72:9b:f7:c0:fc:de:34:97:ec:33:4e:2b:
7e:bc:4a:f1:75:4f:1d:00:38:5b:27:01:13:db:00:
4b:e9:97:97:41:2f:d4:0b:d1:78:15:7d:f5:14:cd:
94:fa:3c:66:3f:46:9b:0e:ca:23:10:a1:e4:ed:7d:
e8:6d:a2:23:25:5e:59:e5:bf:57:76:6d:e6:a0:77:
81:3e:e5:7f:b2:e5:5d:8c:c4:90:22:cc:02:f9:94:
bc:9e:9e:3a:7d:fb:56:65:d9:9b:3a:19:79:66:45:
d5:e7:d0:56:b2:32:0b:e2:70:90:a5:ad:8f:35:a7:
ea:9f:4c:78:16:11:13:46:03:92:91:72:29:1c:61:
46:ee:f4:3e:58:5a:69:0a:84:91:64:c1:09:d8:91:
64:d3:fa:af:ca:7e:28:a2:c9:81:7c:bd:6a:1c:b4:
02:e3:39:69:47:db:38:b1:e7:9b:4b:d4:a6:a3:83:
af:66:7e:2a:39:4b:a0:66:f6:c3:16:11:64:af:e1:
26:6e:de:d5:2b:66:e5:45:90:fd:74:2a:7a:e3:5a:
04:d7:a8:c6:5c:b1:b7:b1:cc:cc:90:af:71:3f:e4:
ea:eb:93:f4:62:ef:03:04:de:e1:87:95:7b:2b:0d:
0e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:88:48:68:14:1E:A9:A0:B2:D5:C5:C2:80:9F:C4:4F:01:17:15:F0
X509v3 Authority Key Identifier:
keyid:29:36:F6:43:28:C1:E6:69:11:40:9E:A7:C6:97:22:F8:D2:62:66:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTb2QyjB5mkRQJ6nxpci-NJiZrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/GohIaBQeqaCy1cXCgJ_ETwEXFfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7dc712-ff5d-4ff2-a2ae-39dc53e3782f/1/KTb2QyjB5mkRQJ6nxpci-NJiZrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:b68::/48
Signature Algorithm: sha256WithRSAEncryption
2c:82:fc:01:71:5b:de:e5:0b:cc:ce:ea:32:0b:c4:f5:a8:16:
e9:15:f0:d3:d7:75:5d:65:7d:db:10:25:e1:0c:a2:c1:02:ea:
da:fb:87:28:d3:de:8c:3b:93:b2:c1:61:e0:d8:76:09:7b:47:
57:f6:7b:fd:b9:4e:d3:b8:1b:cf:c0:70:0a:3c:5c:30:73:31:
65:0f:f0:ab:bd:a3:62:c9:8a:e2:65:ae:36:ae:6d:09:f6:c5:
d2:15:65:0f:8a:e8:f4:9f:42:59:61:54:fa:22:12:55:5d:5c:
67:72:47:2b:b6:70:0a:69:75:6e:27:d5:3b:2f:b5:ff:7e:9b:
16:e4:44:48:f9:36:55:0b:b6:71:c6:2e:47:9e:3e:eb:7d:18:
12:8f:5c:1d:97:a6:93:75:c8:d4:cd:0b:2d:85:94:0a:aa:cb:
4c:76:d1:24:9a:68:76:3b:4d:05:2f:19:64:cc:f6:61:13:65:
17:68:24:4b:8c:74:35:96:8b:6c:1e:e5:5f:62:1d:f6:e9:79:
b3:72:cd:e9:04:ca:e7:51:cd:70:49:2b:cf:a6:20:c4:1d:41:
c6:8f:06:b0:c8:4c:2f:66:14:09:eb:4d:17:65:ef:66:80:f2:
a7:98:68:10:29:6f:c2:31:bd:5d:22:cf:bb:a4:51:3d:90:a1:
53:8b:76:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 10:21:22 2024 by rpki-client on console-fra.rpki-client.org