Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/T2VU2xJNxB3lC1k77tijfPlpM_w.roa
File: T2VU2xJNxB3lC1k77tijfPlpM_w.roa (raw, json)
Hash identifier: Xk24ngZautxf6D4Q7B4qp8a8AzNFqqqm7n9TEv2dRXU=
Subject key identifier: 4F:65:54:DB:12:4D:C4:1D:E5:0B:59:3B:EE:D8:A3:7C:F9:69:33:FC
Certificate issuer: /CN=b249ae69b3a72ec2e6e9adb99090d812a1d29951
Certificate serial: 018CC4922E48AFC730624E8E329964CBCAF2
Authority key identifier: B2:49:AE:69:B3:A7:2E:C2:E6:E9:AD:B9:90:90:D8:12:A1:D2:99:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/T2VU2xJNxB3lC1k77tijfPlpM_w.roa
Signing time: Mon 01 Jan 2024 10:29:23 +0000
ROA not before: Mon 01 Jan 2024 10:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51531
IP address blocks: 2001:67c:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:2e:48:af:c7:30:62:4e:8e:32:99:64:cb:ca:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b249ae69b3a72ec2e6e9adb99090d812a1d29951
Validity
Not Before: Jan 1 10:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f6554db124dc41de50b593beed8a37cf96933fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ed:2c:40:66:6a:e5:31:fc:28:0a:57:b2:af:
cc:5d:74:ef:62:59:b1:be:76:96:c4:6f:ac:f2:37:
42:6a:5d:64:4d:40:79:55:32:d6:5b:6b:1f:cc:e5:
e5:2f:e5:9d:33:5d:9b:e7:82:85:74:92:b9:e6:e8:
f8:56:d1:5c:83:61:57:82:1f:66:ce:ca:7e:1f:99:
10:3a:7f:e4:7f:ea:2a:6e:ba:26:93:03:66:9e:fb:
53:b2:47:3a:bc:18:6b:01:14:85:b2:45:1c:59:43:
78:89:ab:e8:aa:7c:c5:cc:89:ce:5c:c7:7c:25:d0:
ca:22:7c:b7:ac:32:45:0d:6e:62:aa:94:b3:fd:92:
89:26:d9:8a:21:02:95:8f:d3:55:12:99:ed:fb:db:
df:c2:d6:39:a4:87:0a:4f:b9:65:e4:45:7a:17:5d:
e4:4a:f8:7a:37:e3:fa:07:c1:3c:6c:1d:03:d9:9c:
3f:10:46:85:84:dc:65:ef:b2:1e:66:fc:bd:6d:d1:
c2:91:a0:3f:3f:e8:3c:b8:a8:63:48:75:9d:8d:90:
cd:3a:3d:3f:71:a8:a7:13:f3:a7:a9:6a:40:d5:5c:
fc:62:8a:dd:e0:75:c6:02:4f:85:13:08:0f:f0:2b:
6b:08:c9:d6:1b:0c:e9:8e:0c:d3:22:50:40:8c:7e:
c2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:65:54:DB:12:4D:C4:1D:E5:0B:59:3B:EE:D8:A3:7C:F9:69:33:FC
X509v3 Authority Key Identifier:
keyid:B2:49:AE:69:B3:A7:2E:C2:E6:E9:AD:B9:90:90:D8:12:A1:D2:99:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skmuabOnLsLm6a25kJDYEqHSmVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/T2VU2xJNxB3lC1k77tijfPlpM_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/685b5a-fa27-41ec-adf9-9df2f79bef10/1/skmuabOnLsLm6a25kJDYEqHSmVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:4::/48
Signature Algorithm: sha256WithRSAEncryption
5f:d5:c6:02:35:b4:00:a6:54:0d:53:ac:ee:78:b8:14:58:ed:
8e:12:d8:e3:78:8e:b1:9a:ca:ee:e7:79:66:d5:c6:44:6f:8b:
ba:20:a6:b0:1d:3b:c5:1f:c6:9f:bf:69:46:d8:f8:fa:5a:14:
f2:9d:c7:46:0f:ea:26:e4:35:b0:a7:ee:97:47:17:9e:6e:8a:
d5:28:b6:80:76:77:b6:46:de:29:56:f5:24:5c:f6:7d:6c:c5:
c0:6a:4b:97:72:ef:67:83:d7:24:b3:ed:17:84:16:85:6a:af:
3b:5a:e5:ba:ea:4a:d6:f0:1f:b4:45:c1:21:c0:55:34:8d:d3:
60:04:af:b9:ae:b8:9f:88:76:08:91:1d:e3:c5:59:c6:21:9b:
5c:04:84:f0:c3:18:7a:66:99:fb:f5:4f:21:f7:78:73:fa:ab:
5a:c8:36:4a:99:f2:38:fc:ac:5a:87:73:26:1b:bb:47:84:c0:
64:32:b8:03:99:90:57:f8:97:1c:67:74:ad:5b:39:13:ed:c6:
47:8f:5f:6d:9e:d3:66:96:47:e3:cd:c9:30:c9:bc:78:b5:3b:
6c:8c:3b:ca:94:68:ca:8a:42:a2:de:aa:09:8b:73:ed:66:61:
4d:ce:1f:34:7d:5c:91:82:1d:4b:4b:65:1c:c1:a9:a2:dc:5c:
0e:29:9f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:49:01 2024 by rpki-client on console-fra.rpki-client.org