Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/b2h4UjjoE7JyIvYZhmkPDpeAukQ.roa
File: b2h4UjjoE7JyIvYZhmkPDpeAukQ.roa (raw, json)
Hash identifier: wOdaSpEi7aOLG9piN337XzpA1M5O0d3IwaMABcnh54g=
Subject key identifier: 6F:68:78:52:38:E8:13:B2:72:22:F6:19:86:69:0F:0E:97:80:BA:44
Certificate issuer: /CN=f9a16d1f4c7a653e3e20f84d9ba59fdb27c2a61f
Certificate serial: 018CC5DC43C52B2CB6742056C408B13CA04D
Authority key identifier: F9:A1:6D:1F:4C:7A:65:3E:3E:20:F8:4D:9B:A5:9F:DB:27:C2:A6:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/b2h4UjjoE7JyIvYZhmkPDpeAukQ.roa
Signing time: Mon 01 Jan 2024 16:29:55 +0000
ROA not before: Mon 01 Jan 2024 16:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199552
IP address blocks: 2001:67c:2abc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:43:c5:2b:2c:b6:74:20:56:c4:08:b1:3c:a0:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a16d1f4c7a653e3e20f84d9ba59fdb27c2a61f
Validity
Not Before: Jan 1 16:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f68785238e813b27222f61986690f0e9780ba44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:11:1e:db:3d:a7:eb:95:74:2d:83:53:fb:55:
81:43:39:4a:ff:1c:1a:6f:c0:2c:b6:5e:8d:ee:87:
96:d4:31:fd:89:d2:ef:97:de:be:8c:dd:71:33:1e:
80:04:01:2c:35:81:f6:cc:af:4f:72:b1:49:77:d9:
05:18:ac:6b:0f:ba:2b:43:c1:1a:52:bb:0f:7f:5c:
87:c1:8a:88:fd:26:b3:8e:71:8b:2b:14:f3:ca:9b:
a0:39:c5:a6:41:c9:9d:d5:cf:7a:5a:b2:00:76:f9:
fa:c8:e4:4b:04:cd:ae:ed:dd:db:d6:bc:32:a6:46:
f6:29:7d:a9:62:b4:40:45:29:f0:60:a8:96:86:08:
a6:58:70:4c:b0:b8:47:11:97:28:2a:ae:f6:21:de:
e8:86:e5:a9:af:12:34:5d:72:93:43:1f:35:57:a3:
9e:7b:34:5b:a1:47:31:fd:78:22:43:aa:49:57:7c:
87:ec:bf:43:0e:26:9e:c3:81:e1:1d:0f:1c:22:75:
1c:bf:48:8a:8e:f9:d2:50:39:64:68:06:9d:53:f6:
d2:ed:d6:e8:71:01:1b:d7:4d:4e:df:f2:7d:11:18:
a6:a4:d0:3f:88:7e:7d:a1:77:76:8d:9a:7b:1b:6c:
25:8c:89:63:57:04:7f:98:50:05:b6:34:87:b3:d5:
7b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:68:78:52:38:E8:13:B2:72:22:F6:19:86:69:0F:0E:97:80:BA:44
X509v3 Authority Key Identifier:
keyid:F9:A1:6D:1F:4C:7A:65:3E:3E:20:F8:4D:9B:A5:9F:DB:27:C2:A6:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/b2h4UjjoE7JyIvYZhmkPDpeAukQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/98c1b5-3396-4d9c-bcac-992627eea9ea/1/1-aFtH0x6ZT4-IPhNm6Wf2yfCph8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2abc::/48
Signature Algorithm: sha256WithRSAEncryption
9f:81:a6:43:f1:15:9a:ac:a9:14:2f:7b:d7:0d:45:c1:2e:00:
73:54:3f:5d:3b:3e:6c:88:e3:2e:9d:41:84:5b:43:76:85:4c:
03:54:e9:52:ec:ec:e8:b2:cd:bd:dc:c9:16:52:66:f3:0c:dc:
19:b3:e3:dc:4e:89:8e:cd:a8:b9:fb:07:24:ac:49:d1:e3:03:
f1:61:0a:58:f6:d6:97:09:56:40:3c:57:80:41:bb:ac:84:18:
09:09:97:96:72:78:83:9d:31:c5:a6:63:66:8e:ac:48:77:d2:
d7:56:b2:42:87:0c:aa:14:16:54:34:d1:b1:51:e1:81:48:ba:
79:8b:82:65:8d:07:52:c5:2f:7b:ac:ff:8b:fd:cc:13:d9:08:
75:7b:96:b6:af:33:80:86:1a:9a:69:01:74:d7:31:8e:ab:28:
de:21:2f:0d:a2:2d:52:1a:3e:b2:32:b1:ec:44:23:77:58:dd:
67:2d:f6:51:e9:0c:aa:e8:2f:ee:a3:05:94:07:82:d4:4b:0f:
fe:a7:cf:91:04:8e:ed:9c:7c:be:3c:37:46:b5:05:b5:3e:19:
a5:34:14:ab:f6:2a:4a:a3:36:cc:45:cf:82:86:8e:87:13:4e:
7a:e7:b2:bc:df:8b:cc:5c:b0:a6:d5:57:5c:fc:d3:70:14:75:
5b:94:be:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:06:33 2024 by rpki-client on console-ams.rpki-client.org