Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/m2s95b-1_ZEgRJjD_uOhKRO4W8s.roa
File: m2s95b-1_ZEgRJjD_uOhKRO4W8s.roa (raw, json)
Hash identifier: NcS3id4JsjklXpxPLmneh+iS/Mre/YyN9Q/zzm/49HY=
Subject key identifier: 9B:6B:3D:E5:BF:B5:FD:91:20:44:98:C3:FE:E3:A1:29:13:B8:5B:CB
Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Certificate serial: 018CC5DCDB2EC372DC0BBC7CD28611F3C31A
Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/m2s95b-1_ZEgRJjD_uOhKRO4W8s.roa
Signing time: Mon 01 Jan 2024 16:30:34 +0000
ROA not before: Mon 01 Jan 2024 16:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206186
IP address blocks: 2001:678:3b0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:db:2e:c3:72:dc:0b:bc:7c:d2:86:11:f3:c3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Validity
Not Before: Jan 1 16:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b6b3de5bfb5fd91204498c3fee3a12913b85bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1b:7a:19:29:d1:82:4a:ca:23:7d:ec:e0:96:
4f:b8:ea:bf:0a:4d:1b:84:3a:26:32:a1:35:58:32:
6c:53:a3:6e:07:63:ae:d7:8c:8c:c1:74:18:5c:15:
ca:8f:34:d5:8b:c7:f9:0d:7b:5e:ca:e2:e1:0e:3e:
30:b2:32:c1:53:eb:bd:5b:c0:f7:f9:b0:fa:05:12:
4b:92:83:1d:45:1e:25:d3:3a:2b:4a:4a:32:e0:be:
41:89:ff:66:78:78:9b:7d:15:7b:d6:ab:c5:7e:66:
1b:96:75:3c:7b:f1:30:29:b9:ec:4a:ea:f5:a8:cc:
a4:fd:59:77:a4:53:cd:18:a7:6e:f8:9e:90:c1:09:
36:7c:ea:a6:09:90:88:0c:8b:92:77:86:91:73:14:
54:c0:79:5d:6b:1a:34:4a:a7:7b:de:f1:a4:f0:19:
34:2c:73:7d:2e:c7:6d:0c:0a:f3:53:5d:c0:59:b0:
74:74:0e:08:0e:db:23:37:da:c5:61:c2:0d:34:2a:
c5:c8:13:f8:db:55:7a:a9:47:fa:81:b9:79:89:3a:
d3:f0:4e:25:73:92:01:93:df:7b:70:f8:24:b6:af:
a9:48:34:23:6e:eb:d9:94:fa:8b:89:49:57:75:ea:
98:8f:2b:5f:94:58:f7:c5:2e:28:c5:cb:af:75:c3:
17:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:6B:3D:E5:BF:B5:FD:91:20:44:98:C3:FE:E3:A1:29:13:B8:5B:CB
X509v3 Authority Key Identifier:
keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/m2s95b-1_ZEgRJjD_uOhKRO4W8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:3b0::/48
Signature Algorithm: sha256WithRSAEncryption
3c:dd:22:84:da:50:b5:aa:cc:00:e9:db:41:e5:24:99:ec:8c:
81:2b:25:f5:0d:38:0e:b0:0b:32:3b:ea:8e:f6:d0:93:bf:a4:
a7:42:17:13:29:18:83:ce:a3:16:ba:91:27:18:62:16:b2:84:
80:36:a9:5e:9f:ca:f4:55:67:e0:66:92:d6:a5:1c:24:af:af:
67:7a:55:19:5e:f5:10:99:08:1d:80:84:54:86:10:ed:4c:fe:
90:be:0e:92:0a:d2:75:3f:7f:3c:ff:13:cb:e1:01:a6:8f:d0:
be:b0:70:50:24:b7:0c:2b:93:47:8f:23:95:4a:b8:57:7c:61:
18:cf:90:4e:44:c6:f3:d5:57:7d:8c:87:ad:cc:b8:34:94:3d:
ed:49:3e:9c:10:b1:ee:5e:5c:52:b7:45:45:78:2a:0a:cb:12:
45:2b:c4:97:a5:2b:6f:93:1d:97:83:89:e0:ab:1a:75:07:0b:
a0:76:7d:bf:4a:eb:eb:d6:93:2d:67:a8:e3:41:0c:e4:a6:e0:
8e:88:10:d4:47:7d:b3:cb:6b:08:5a:96:1a:d6:3d:7d:a5:67:
75:d7:a0:9c:26:a8:6b:05:35:74:99:33:cb:b2:09:b0:07:bf:
7f:c5:1f:c6:67:49:a8:d4:a9:8c:da:4b:71:92:1a:3c:4e:7e:
2f:e4:36:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 10:59:09 2024 by rpki-client on console-fra.rpki-client.org