Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/gB0Rilp7e7_qZbFlRiWzTJvMJJw.roa
File: gB0Rilp7e7_qZbFlRiWzTJvMJJw.roa (raw, json)
Hash identifier: 0rwxIclYRayxt7eIeEZLEutgtUUFWtwoETSqZmOLfjs=
Subject key identifier: 80:1D:11:8A:5A:7B:7B:BF:EA:65:B1:65:46:25:B3:4C:9B:CC:24:9C
Certificate issuer: /CN=e81d2dcf2b69abdbd609436440115a9e4ea19a05
Certificate serial: 018CC4939A96A1EC0322745128EA796DE0F9
Authority key identifier: E8:1D:2D:CF:2B:69:AB:DB:D6:09:43:64:40:11:5A:9E:4E:A1:9A:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6B0tzytpq9vWCUNkQBFank6hmgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/gB0Rilp7e7_qZbFlRiWzTJvMJJw.roa
Signing time: Mon 01 Jan 2024 10:30:56 +0000
ROA not before: Mon 01 Jan 2024 10:30:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205016
IP address blocks: 2001:67c:198c::/48 maxlen: 48
2001:67c:2660::/48 maxlen: 48
2001:67c:2628::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/6B0tzytpq9vWCUNkQBFank6hmgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 May 2024 16:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:9a:96:a1:ec:03:22:74:51:28:ea:79:6d:e0:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e81d2dcf2b69abdbd609436440115a9e4ea19a05
Validity
Not Before: Jan 1 10:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=801d118a5a7b7bbfea65b1654625b34c9bcc249c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:5f:82:21:29:e9:e2:d7:0b:c5:3d:2e:74:70:
9c:28:09:50:ac:e8:74:ad:6e:1b:3e:b4:59:0a:93:
2b:33:ed:eb:4a:fc:53:f1:a5:d8:40:30:ea:ad:f0:
32:d6:07:c3:59:1b:1e:47:d9:b8:b2:8d:f4:8d:8b:
3d:cd:a5:b0:fd:0a:63:01:bc:ee:eb:6f:cb:39:ef:
e7:17:53:6c:ea:7e:d0:88:c5:9b:27:c9:c1:94:20:
de:54:f1:f6:4e:7c:ed:61:4d:15:d7:02:81:2a:bb:
21:2a:c7:10:61:3d:0a:42:e5:a2:45:0b:2a:0f:58:
9c:90:05:a4:2a:56:a1:e0:9b:e9:18:85:06:84:06:
0f:0f:e4:95:51:33:a1:c7:0d:00:0e:96:e1:1b:8a:
b3:f1:43:7f:24:68:7d:8f:6a:6a:88:47:db:9a:60:
20:e1:bc:72:ca:b6:b1:ca:f6:91:96:4e:b0:c6:39:
34:e7:b9:de:fe:46:34:13:27:17:ec:57:7f:a5:47:
78:19:54:b5:03:23:33:dc:3f:7f:e3:2b:d7:aa:9d:
8a:0e:27:ff:bf:f3:c4:0e:88:e5:03:87:d0:56:d2:
05:e0:24:61:32:82:d2:1d:8a:24:fb:49:49:f2:28:
1f:c7:39:1c:ef:6e:0e:c3:15:11:3b:66:12:02:f8:
0a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1D:11:8A:5A:7B:7B:BF:EA:65:B1:65:46:25:B3:4C:9B:CC:24:9C
X509v3 Authority Key Identifier:
keyid:E8:1D:2D:CF:2B:69:AB:DB:D6:09:43:64:40:11:5A:9E:4E:A1:9A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6B0tzytpq9vWCUNkQBFank6hmgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/gB0Rilp7e7_qZbFlRiWzTJvMJJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:198c::/48
2001:67c:2628::/48
2001:67c:2660::/48
Signature Algorithm: sha256WithRSAEncryption
93:79:c7:e3:17:da:3d:a0:bd:c9:e4:d7:1d:6e:3b:78:f8:55:
71:55:ea:25:62:db:d4:da:9f:ba:ef:26:21:ae:bb:f0:87:c5:
5c:d6:0c:30:77:ae:94:7b:4f:be:1c:d2:4a:d4:7b:cb:f9:5a:
51:b3:2b:86:7a:2e:21:5b:d8:88:ff:fc:3d:e2:9e:23:cc:66:
70:c0:99:82:6c:33:8a:4d:19:58:a8:59:18:4d:99:67:f8:6a:
72:ce:9b:45:29:39:fc:7c:6c:3c:ea:3a:20:cb:c3:57:f8:a2:
b0:a5:d7:89:d5:d3:cb:a9:e6:39:ca:25:47:0e:58:a2:d0:99:
63:5c:1b:ba:ea:d0:39:ba:aa:03:f4:31:b1:c3:1d:63:4e:ad:
9e:67:e3:3c:29:73:dc:71:0b:c5:9a:65:90:d4:c2:49:5e:64:
c9:a6:b5:d5:75:46:4b:81:48:69:fe:e4:56:9f:f6:f0:00:67:
6c:11:77:0f:30:0e:23:dd:c6:11:5c:c0:f4:68:96:5a:00:5b:
4a:49:a6:f8:b0:0f:3d:10:8d:00:0f:42:29:37:7b:8b:6a:1d:
b0:e4:1d:97:ec:73:50:24:dd:e2:cc:6d:43:dc:90:1d:f0:39:
09:b9:fd:a5:60:a4:e8:62:a7:0d:e8:1f:01:3c:2e:ad:b7:01:
23:e7:00:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 21:40:45 2024 by rpki-client on console-ams.rpki-client.org