Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/IZRmQc4_MfZEnSwzUeRV6f65tx4.roa
File: IZRmQc4_MfZEnSwzUeRV6f65tx4.roa (raw, json)
Hash identifier: c8kM2qtb3irFRLm1AxaO5aJfuLxQwPkVWBmw2jdrmqA=
Subject key identifier: 21:94:66:41:CE:3F:31:F6:44:9D:2C:33:51:E4:55:E9:FE:B9:B7:1E
Certificate issuer: /CN=4691bfd3cfec5a1108f1c86854764e2b903d7888
Certificate serial: 018CC8025A35D70A1D62FE4EA52C35F2EBAA
Authority key identifier: 46:91:BF:D3:CF:EC:5A:11:08:F1:C8:68:54:76:4E:2B:90:3D:78:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/IZRmQc4_MfZEnSwzUeRV6f65tx4.roa
Signing time: Tue 02 Jan 2024 02:30:46 +0000
ROA not before: Tue 02 Jan 2024 02:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205597
IP address blocks: 2001:678:ad0::/48 maxlen: 48
2001:678:ad4::/48 maxlen: 48
2001:67c:2d00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:5a:35:d7:0a:1d:62:fe:4e:a5:2c:35:f2:eb:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4691bfd3cfec5a1108f1c86854764e2b903d7888
Validity
Not Before: Jan 2 02:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21946641ce3f31f6449d2c3351e455e9feb9b71e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e3:63:e3:87:ae:06:88:8d:1f:ae:18:5e:15:
32:a9:e8:a5:d9:2d:e0:24:31:ef:e0:3f:4d:c5:72:
20:0b:37:30:e2:f6:1a:16:23:e8:a0:61:95:cf:b5:
2d:b9:f5:71:af:bb:0d:1e:e7:b2:1e:09:a1:6d:88:
a5:60:53:9e:bb:ad:c0:cd:d3:0a:c0:b5:39:e2:0c:
ce:7f:eb:ab:ca:44:8e:cd:ea:6b:c4:f5:a9:af:bc:
79:12:e4:56:54:b0:ec:90:a8:e9:2a:c3:4e:93:c6:
19:7b:f6:c0:be:ce:df:99:a8:e1:ed:b3:59:86:b2:
c1:87:9a:c2:f4:9b:af:c6:d0:a4:58:7c:b1:c7:05:
e5:95:a9:f2:11:09:82:46:ea:fe:31:7e:62:fd:88:
fa:db:21:d1:1f:05:72:20:39:7b:f2:72:f8:7b:b3:
d4:8a:76:ec:5d:fe:0d:d7:ab:f7:a6:7b:a4:47:6b:
9c:51:1b:64:d8:ab:a4:d3:eb:fb:00:74:26:50:21:
31:dd:fb:08:aa:de:cb:65:6f:7b:4d:3d:9b:2a:24:
db:0f:b1:86:eb:1c:c0:1a:21:6e:c1:c0:bc:56:88:
cd:bc:77:bc:dc:cf:9c:55:2b:8b:33:13:15:94:ae:
e9:0f:f4:38:97:21:ef:25:19:37:23:4a:a5:ca:d3:
81:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:94:66:41:CE:3F:31:F6:44:9D:2C:33:51:E4:55:E9:FE:B9:B7:1E
X509v3 Authority Key Identifier:
keyid:46:91:BF:D3:CF:EC:5A:11:08:F1:C8:68:54:76:4E:2B:90:3D:78:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/IZRmQc4_MfZEnSwzUeRV6f65tx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:ad0::/48
2001:678:ad4::/48
2001:67c:2d00::/48
Signature Algorithm: sha256WithRSAEncryption
3b:82:8e:71:25:8f:c0:88:a8:a5:f6:c0:ad:87:31:4e:22:3a:
be:44:a6:ff:f8:19:a7:af:6e:75:54:f2:b5:6a:ac:71:bd:c1:
ab:20:6b:fb:b8:8e:d1:8b:e8:89:b3:c3:b3:e9:16:4b:a3:c6:
39:12:8f:e5:86:17:38:4d:5e:9d:1d:c8:05:ca:82:5d:52:03:
b4:5d:0b:fe:fe:0a:27:da:ef:d6:36:5d:c0:6b:a7:03:e1:6d:
08:6c:03:e3:57:19:16:c9:f3:a4:44:bf:c5:7f:99:ea:73:b6:
2b:3c:46:6c:51:eb:86:88:4f:96:ff:4a:e4:18:c3:1e:f3:55:
78:10:54:9e:ac:7e:75:e2:2f:e5:e1:b4:f2:b4:98:c8:d7:c6:
22:b5:ae:5c:f8:9b:f3:8e:a3:4e:c2:94:a9:9f:3a:8e:db:24:
c6:08:01:4a:2a:62:00:85:49:10:19:cc:51:ab:8e:76:37:b4:
5d:4c:ad:fd:e6:76:28:d4:68:29:c5:92:39:37:b8:96:66:94:
e5:f9:7e:41:3d:3a:b8:5c:84:1e:0d:bc:11:1c:f2:c5:3b:66:
a1:d6:47:df:a1:e3:73:29:25:40:e0:36:bf:9b:3b:fd:b3:af:
b3:2e:6b:d0:06:8c:ba:51:6d:b7:ab:b2:2a:1a:16:f0:bc:98:
04:35:6b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 07:53:06 2024 by rpki-client on console-fra.rpki-client.org