Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/G0hsxQzdLR_AJC2MsN40qKSROz4.roa
File: G0hsxQzdLR_AJC2MsN40qKSROz4.roa (raw, json)
Hash identifier: PA+7EM3Gl1XEfnqVt2uffIHNSX4mEcbXJTbl8qkYe2E=
Subject key identifier: 1B:48:6C:C5:0C:DD:2D:1F:C0:24:2D:8C:B0:DE:34:A8:A4:91:3B:3E
Certificate issuer: /CN=948948f0dd5e2fb0a902b979ca9c5c1a44f98fa1
Certificate serial: 018CCA2A42D80753B9F49247274D5B3B30D7
Authority key identifier: 94:89:48:F0:DD:5E:2F:B0:A9:02:B9:79:CA:9C:5C:1A:44:F9:8F:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/G0hsxQzdLR_AJC2MsN40qKSROz4.roa
Signing time: Tue 02 Jan 2024 12:33:36 +0000
ROA not before: Tue 02 Jan 2024 12:33:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212977
IP address blocks: 2001:67c:1298::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:42:d8:07:53:b9:f4:92:47:27:4d:5b:3b:30:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=948948f0dd5e2fb0a902b979ca9c5c1a44f98fa1
Validity
Not Before: Jan 2 12:33:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b486cc50cdd2d1fc0242d8cb0de34a8a4913b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e5:43:fe:c4:a7:78:39:1a:fd:ad:d0:55:f5:
e2:21:ba:15:09:b0:e3:59:96:8f:ce:71:f9:9c:d3:
27:d7:8f:20:48:2e:4d:87:4d:a2:b7:d3:8b:4a:a5:
d2:da:26:41:eb:33:98:77:34:e6:21:9b:78:d8:bd:
d3:17:1e:a7:be:c8:64:e0:bf:28:8c:81:0c:51:1f:
cf:98:bb:74:ae:35:0b:70:0a:fb:4c:f4:83:bf:a1:
c1:1e:09:0c:a7:46:f8:8a:9b:18:ae:e8:ec:6d:f7:
17:30:08:0e:6e:9b:cf:da:89:af:a0:4e:97:7b:1b:
79:e3:1c:64:69:ef:de:42:8b:58:73:5f:c4:8e:8b:
31:6d:eb:26:a2:6a:7f:63:bf:e9:b7:bf:76:88:27:
3a:10:98:85:47:5b:da:56:df:35:20:04:d3:58:af:
59:a9:19:24:3e:84:f4:63:e4:28:0b:ac:f1:ec:f2:
d6:63:5f:49:8b:86:9c:55:7b:a7:46:b8:92:c6:3f:
44:c9:16:bb:a9:85:6e:dd:ba:89:7c:26:8c:a5:9c:
a2:5c:4d:a9:fc:6c:ea:46:f5:79:87:de:b5:a2:c7:
65:ab:67:a4:fd:4b:04:d4:82:1d:ce:e5:46:6a:1c:
41:54:e7:51:dc:85:5a:84:9c:ec:71:aa:a9:5b:95:
61:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:48:6C:C5:0C:DD:2D:1F:C0:24:2D:8C:B0:DE:34:A8:A4:91:3B:3E
X509v3 Authority Key Identifier:
keyid:94:89:48:F0:DD:5E:2F:B0:A9:02:B9:79:CA:9C:5C:1A:44:F9:8F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/G0hsxQzdLR_AJC2MsN40qKSROz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1298::/48
Signature Algorithm: sha256WithRSAEncryption
12:4c:7a:ac:c2:6e:e7:28:d4:d6:34:b5:7b:e5:47:0d:1e:c7:
48:2b:68:0b:52:d1:98:80:b8:76:3b:80:e6:ed:a5:af:1b:a8:
d3:60:fc:aa:0b:8c:43:3f:83:a3:c1:de:41:8e:25:55:22:b4:
7d:b9:32:f4:e0:0a:64:b2:63:bb:06:ad:95:6f:c1:07:42:54:
2d:d3:01:08:fc:33:10:11:c4:90:1a:88:d9:4b:ff:b1:21:de:
6a:5f:29:9b:6a:fb:cc:2b:01:40:90:f5:be:0e:52:17:83:36:
a6:a7:d7:d6:22:df:0d:c4:ac:51:7d:db:e4:b8:ea:d0:c8:3f:
76:98:34:1c:2f:4e:fe:3f:f7:81:bc:58:50:5b:29:0f:c9:f8:
b7:f4:28:f6:db:43:05:75:bb:8b:ca:6e:ae:72:85:4b:60:8c:
46:1d:a7:a4:79:f0:31:c5:93:dd:95:44:36:23:5a:23:69:a0:
05:85:3a:e9:a2:ba:c3:73:74:2b:23:2c:6b:d6:8b:6c:a2:98:
0b:b0:7a:2d:7d:fb:16:59:a2:7e:4e:16:2f:60:34:e5:3e:6b:
a2:ac:42:f4:7d:d6:d6:58:f5:f0:85:25:1b:7d:0e:ab:8a:d0:
c6:b3:5a:3b:ea:11:2a:b3:d6:f8:96:5b:98:1c:73:f7:68:a3:
1c:b1:dc:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 14:42:22 2024 by rpki-client on console-fra.rpki-client.org