Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/Vwb4UbUnCN0nhs5YG-MGoQlYmbE.roa
File: Vwb4UbUnCN0nhs5YG-MGoQlYmbE.roa (raw, json)
Hash identifier: RHkCpp6gAPNZSyQXYoEWuTSFdUr/G6OJpE0KtWHcquE=
Subject key identifier: 57:06:F8:51:B5:27:08:DD:27:86:CE:58:1B:E3:06:A1:09:58:99:B1
Certificate issuer: /CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9
Certificate serial: 018CCA99875B0F087D5BC757601C9EFC579C
Authority key identifier: BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/Vwb4UbUnCN0nhs5YG-MGoQlYmbE.roa
Signing time: Tue 02 Jan 2024 14:35:08 +0000
ROA not before: Tue 02 Jan 2024 14:35:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42927
IP address blocks: 2a07:a440::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 04:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:87:5b:0f:08:7d:5b:c7:57:60:1c:9e:fc:57:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9
Validity
Not Before: Jan 2 14:35:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5706f851b52708dd2786ce581be306a1095899b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:42:3a:18:af:bf:46:46:cb:65:63:79:e7:7f:
ec:30:3c:ef:59:28:07:ad:af:2a:f3:79:1e:8f:a2:
66:be:2e:ad:fe:5d:5f:06:62:49:cd:8c:46:5b:07:
83:99:6c:55:7f:17:27:12:2a:0a:b7:fb:aa:0c:e9:
09:7a:c7:bd:e6:85:c5:a2:84:d1:3a:c4:5a:47:90:
f0:c8:a2:8d:2a:fd:ba:83:d8:15:20:f0:e7:92:73:
ec:4f:b0:23:3c:8e:f8:62:8f:af:c3:d2:35:0f:e2:
89:14:f1:ff:ee:cb:86:15:44:d5:bc:42:86:9b:5f:
89:2b:b7:a9:e6:e0:90:76:57:aa:7d:e6:4a:b6:77:
7e:51:8b:a3:e4:5c:bc:2b:d3:18:1b:87:62:32:c4:
bb:9c:f1:df:6a:18:a6:d1:c3:ed:ed:30:f2:16:17:
49:b1:19:da:63:41:95:b8:aa:a1:06:e0:78:df:86:
0d:78:b9:78:d3:4e:a1:ae:3a:c7:f7:1a:c0:44:b3:
69:78:2b:34:7d:d0:aa:96:b2:19:b3:8e:6e:a4:f2:
d9:f9:ec:76:04:fc:20:77:11:67:62:1d:0d:1c:2b:
c3:46:01:ac:e5:85:5b:e9:d0:63:e8:1c:e9:48:af:
33:dc:67:4a:04:56:7e:5a:e6:e9:79:cd:95:71:69:
43:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:06:F8:51:B5:27:08:DD:27:86:CE:58:1B:E3:06:A1:09:58:99:B1
X509v3 Authority Key Identifier:
keyid:BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/Vwb4UbUnCN0nhs5YG-MGoQlYmbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:a440::/30
Signature Algorithm: sha256WithRSAEncryption
18:dd:99:d4:71:40:dd:bc:07:8f:f8:61:aa:b8:ba:c1:f5:89:
98:09:40:81:e3:0f:27:98:23:f6:6d:54:56:e3:8a:7f:c5:5d:
79:d3:58:37:e3:b4:6b:af:08:76:d6:77:5f:ab:66:05:fd:9b:
0c:45:06:ef:05:1e:50:95:ac:f2:77:bc:ef:6d:db:cc:47:fa:
76:df:52:2e:fc:8b:74:15:33:74:bb:f0:a0:90:01:0e:39:77:
3c:d2:ad:1c:bf:3d:31:b1:a5:45:2c:7f:30:84:c1:82:95:8d:
c6:59:d5:14:81:1a:2c:82:64:95:33:b1:9e:07:5c:a6:e7:0a:
4b:b1:d9:22:55:66:d7:01:67:4c:be:42:5f:a2:25:96:23:cf:
aa:a7:08:f4:3a:1d:10:87:64:f9:d1:de:1a:1d:6b:61:83:f9:
de:2d:7c:e4:31:0c:eb:7f:08:94:e7:af:f6:95:16:14:9c:ea:
39:30:00:e4:e7:8e:a9:5f:32:3b:61:87:a8:f5:a3:0d:85:33:
3d:e1:39:42:ea:b4:19:94:a7:22:20:c5:38:f9:d4:ef:de:d6:
ad:e5:f5:0d:b5:06:f1:13:08:12:63:eb:63:74:41:e9:87:24:
e4:42:4f:c6:82:6f:a5:a7:22:1b:22:50:1f:bc:c6:c8:34:2f:
d6:29:65:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:27:47 2024 by rpki-client on console-ams.rpki-client.org