Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/DjaGdy4UGD0LzuyWwc6L42Zv_F0.roa
File: DjaGdy4UGD0LzuyWwc6L42Zv_F0.roa (raw, json)
Hash identifier: 3/0SJRaZypqmlPtL3B1QMpU/oFKO/L/izRYmq+RgToU=
Subject key identifier: 0E:36:86:77:2E:14:18:3D:0B:CE:EC:96:C1:CE:8B:E3:66:6F:FC:5D
Certificate issuer: /CN=22edf0d881aeea2e59999b81d2975113e14055f5
Certificate serial: 018CC6B8240DC2F23D05AF79B9782AEEE7A9
Authority key identifier: 22:ED:F0:D8:81:AE:EA:2E:59:99:9B:81:D2:97:51:13:E1:40:55:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/DjaGdy4UGD0LzuyWwc6L42Zv_F0.roa
Signing time: Mon 01 Jan 2024 20:30:05 +0000
ROA not before: Mon 01 Jan 2024 20:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206290
IP address blocks: 2001:67c:9e0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 10:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:24:0d:c2:f2:3d:05:af:79:b9:78:2a:ee:e7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22edf0d881aeea2e59999b81d2975113e14055f5
Validity
Not Before: Jan 1 20:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e3686772e14183d0bceec96c1ce8be3666ffc5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b2:e2:7a:40:0b:20:e1:f7:c3:9e:fc:d1:ec:
2f:18:f7:a5:fb:cf:f6:45:01:3c:5a:0c:e2:45:65:
6a:f1:4d:2f:cb:ea:b0:02:13:01:b8:7b:fa:8e:04:
6c:68:cb:5c:cb:d1:1a:c4:a7:29:f4:86:2c:b3:02:
72:2e:dc:19:be:2f:8d:28:db:61:8f:c4:5a:b5:79:
d8:c7:5f:36:ae:b3:d3:70:8d:21:42:d1:70:ab:24:
e8:dc:90:3d:e0:ab:7a:5e:2f:10:2d:12:70:a4:42:
07:73:ed:1e:db:a7:9b:eb:f2:73:49:b5:f4:dc:b5:
56:74:54:d8:93:86:32:08:be:df:ed:84:38:95:82:
f6:ba:82:82:c9:e8:cc:e9:c4:2b:37:a8:24:d5:1d:
99:ac:b2:5f:41:af:8a:01:ea:3e:72:f0:d0:80:73:
9f:c7:17:e0:47:f7:f7:ba:79:e0:51:1d:22:72:54:
53:ad:5c:f0:b3:e6:f7:b1:d0:99:fc:89:52:7e:68:
67:88:c6:80:a1:5b:52:6e:e7:91:28:39:8e:c2:f0:
8f:58:b4:84:47:32:63:77:4c:d9:af:ca:86:40:68:
da:ce:7d:9f:46:2f:63:c7:e2:f3:f1:f4:19:d9:b8:
ce:65:9e:bc:f3:f7:62:78:16:7c:87:a8:2f:cc:2d:
e1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:36:86:77:2E:14:18:3D:0B:CE:EC:96:C1:CE:8B:E3:66:6F:FC:5D
X509v3 Authority Key Identifier:
keyid:22:ED:F0:D8:81:AE:EA:2E:59:99:9B:81:D2:97:51:13:E1:40:55:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/DjaGdy4UGD0LzuyWwc6L42Zv_F0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:9e0::/48
Signature Algorithm: sha256WithRSAEncryption
4b:64:77:c4:2c:e0:9c:25:ef:f3:2d:ce:f4:6e:3c:da:7a:39:
80:6b:fb:91:8b:be:5b:51:f8:07:1a:d0:8d:21:a6:6c:cb:66:
2c:98:38:37:1a:8b:fb:a2:f2:0f:f6:9b:e4:7a:86:4a:c7:55:
0b:3a:b8:b4:e7:3a:c9:41:35:82:53:1e:b0:33:a4:1f:40:55:
65:13:9e:82:ef:6d:55:16:c5:78:8a:e3:d9:96:14:81:47:ba:
70:dd:88:26:60:73:fc:a4:5d:49:f5:ef:7c:e0:ae:f0:fd:67:
43:7d:91:cf:a2:84:28:e1:17:94:1e:8f:73:1d:c0:15:e6:1c:
55:18:b6:89:f2:be:72:90:1f:08:06:e5:34:f5:b7:3e:2c:0e:
05:c6:74:78:1d:f2:c2:49:e8:0e:11:93:ef:2f:7a:fe:d9:98:
bc:04:4b:52:18:cf:ca:a2:58:bf:c0:09:2e:b2:0d:0e:97:c3:
b7:3d:e0:5c:9a:63:b7:3f:c7:a2:c4:7f:fa:10:ab:7f:ee:00:
0b:1d:77:b2:02:80:1c:76:2f:66:bb:dc:ef:21:f1:fc:49:db:
73:66:bb:80:52:5f:e3:3d:67:d0:fe:3d:be:42:7e:9a:09:86:
5b:cd:b1:75:a6:af:de:e4:8e:31:4f:0f:bb:90:f2:06:f7:7d:
55:9a:9e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:43:42 2024 by rpki-client on console-fra.rpki-client.org