Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/51e59e-2cff-4765-b6a8-a113aca38183/1/wQzyjAnS4CSbJAzrZzUwXOaG6Lk.roa
File: wQzyjAnS4CSbJAzrZzUwXOaG6Lk.roa (raw, json)
Hash identifier: /2SQAfHwxixzIJD38ZGTF9bcOvjJhsFk/RP2IpmCvk4=
Subject key identifier: C1:0C:F2:8C:09:D2:E0:24:9B:24:0C:EB:67:35:30:5C:E6:86:E8:B9
Certificate issuer: /CN=b4768ca3f71b13172794121ada78b359a36b855a
Certificate serial: 018CCA2A28113399198E5FD8C71980D146AB
Authority key identifier: B4:76:8C:A3:F7:1B:13:17:27:94:12:1A:DA:78:B3:59:A3:6B:85:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHaMo_cbExcnlBIa2nizWaNrhVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/51e59e-2cff-4765-b6a8-a113aca38183/1/wQzyjAnS4CSbJAzrZzUwXOaG6Lk.roa
Signing time: Tue 02 Jan 2024 12:33:29 +0000
ROA not before: Tue 02 Jan 2024 12:33:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209619
IP address blocks: 2001:678:8f0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/51e59e-2cff-4765-b6a8-a113aca38183/1/tHaMo_cbExcnlBIa2nizWaNrhVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/51e59e-2cff-4765-b6a8-a113aca38183/1/tHaMo_cbExcnlBIa2nizWaNrhVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHaMo_cbExcnlBIa2nizWaNrhVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:28:11:33:99:19:8e:5f:d8:c7:19:80:d1:46:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4768ca3f71b13172794121ada78b359a36b855a
Validity
Not Before: Jan 2 12:33:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c10cf28c09d2e0249b240ceb6735305ce686e8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6c:12:eb:33:ec:02:61:eb:76:62:b9:ce:d6:
66:44:91:e8:8a:72:d6:e3:da:12:d3:dc:d0:f9:f4:
b3:d1:4d:69:5b:bb:c1:6f:9d:91:63:64:5b:ee:d8:
ce:88:a5:2d:c1:6f:97:61:21:3b:82:8a:b4:61:3f:
4c:59:0a:f9:b7:ae:e3:2b:9e:02:43:5a:d7:a7:14:
5b:f5:cb:35:26:32:bc:b0:df:b9:38:88:ae:d1:e3:
d8:f3:26:a7:aa:78:1c:a8:ec:21:9e:7b:dc:e6:44:
1f:18:68:91:7a:82:a6:3e:94:45:fc:33:97:43:2e:
67:be:85:4b:6d:10:47:a9:3e:05:40:ee:8d:4c:e5:
da:aa:ef:4d:88:b7:89:34:89:40:e0:88:39:38:d6:
d5:e5:d3:1f:3a:ab:b5:87:46:b5:f5:9b:22:40:fd:
60:66:cd:ba:31:90:d9:d1:73:62:b4:90:c5:44:2e:
73:8f:f9:17:d6:44:61:93:32:35:ca:a9:d6:03:a6:
4f:ef:fd:09:0b:4a:9a:24:1c:fa:eb:8d:6b:d9:16:
31:89:9e:0b:e2:6e:3f:86:23:fd:5b:52:a1:f2:f4:
6d:b4:ed:4d:99:c8:b9:bd:59:1c:ed:f4:23:85:39:
fd:d4:a9:7a:fc:13:32:1c:5d:25:7f:05:87:d9:c6:
4b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0C:F2:8C:09:D2:E0:24:9B:24:0C:EB:67:35:30:5C:E6:86:E8:B9
X509v3 Authority Key Identifier:
keyid:B4:76:8C:A3:F7:1B:13:17:27:94:12:1A:DA:78:B3:59:A3:6B:85:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHaMo_cbExcnlBIa2nizWaNrhVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51e59e-2cff-4765-b6a8-a113aca38183/1/wQzyjAnS4CSbJAzrZzUwXOaG6Lk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51e59e-2cff-4765-b6a8-a113aca38183/1/tHaMo_cbExcnlBIa2nizWaNrhVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:8f0::/48
Signature Algorithm: sha256WithRSAEncryption
68:c0:bb:2b:8a:ca:70:bd:1a:20:22:d9:2e:27:4c:7e:30:0b:
cf:aa:2b:b4:9c:7f:21:50:9d:6f:8e:62:c3:d4:db:d7:69:05:
ea:d2:63:cb:3e:99:29:c7:cd:4d:2f:88:47:13:8a:c2:51:31:
b9:6b:5b:ce:bd:9c:bf:bd:a6:9b:73:42:c9:fa:73:74:6b:25:
8a:06:48:20:36:70:83:56:ab:47:95:ed:36:c8:06:c2:af:69:
24:f4:15:6f:13:57:f0:a8:60:be:63:a3:6f:29:4a:56:ad:ce:
ef:b1:54:89:c7:27:82:e4:e2:3c:c1:15:ee:f1:cc:17:ba:dc:
e9:11:74:c0:ae:9a:40:93:46:55:5a:33:84:ab:65:5b:2b:44:
e3:c4:f2:3b:84:7b:50:82:5d:15:b7:3f:87:0f:e2:20:ff:86:
ca:c9:37:58:2b:c9:01:b4:ff:bf:dd:bd:b4:c0:8c:24:1a:27:
49:6d:cc:ef:15:26:e9:5a:07:88:e4:f4:d9:f9:b4:94:9e:c5:
72:19:08:f6:c2:19:ac:f0:b9:e0:8c:45:1b:da:eb:04:5f:eb:
36:0a:98:6a:94:46:38:e7:e2:1f:c9:8c:df:6b:1e:6a:7a:82:
c9:bf:ca:7a:94:75:4b:bb:2c:31:2f:dd:53:b9:ca:9e:e4:dc:
89:16:64:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 18:53:12 2024 by rpki-client on console-fra.rpki-client.org