Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/0k-L4BS5BIf0VcTCwK2kehyP0nM.roa
File: 0k-L4BS5BIf0VcTCwK2kehyP0nM.roa (raw, json)
Hash identifier: /Y70NfCt//tJaOdzpN+PkkoonXRKjnwd4+NKyJ669fI=
Subject key identifier: D2:4F:8B:E0:14:B9:04:87:F4:55:C4:C2:C0:AD:A4:7A:1C:8F:D2:73
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 018CCA297180E5239B9FA5FE4DF7D582B990
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/0k-L4BS5BIf0VcTCwK2kehyP0nM.roa
Signing time: Tue 02 Jan 2024 12:32:42 +0000
ROA not before: Tue 02 Jan 2024 12:32:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212360
IP address blocks: 2a0e:8f02:f00d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:71:80:e5:23:9b:9f:a5:fe:4d:f7:d5:82:b9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 2 12:32:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d24f8be014b90487f455c4c2c0ada47a1c8fd273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:52:f6:10:0a:0a:5d:e6:90:a0:a7:7f:05:95:
73:95:fd:3c:d9:66:39:c9:12:46:4d:e0:a2:e0:81:
03:c7:8b:bf:08:c5:74:0d:c2:6a:7c:f6:4c:8a:6f:
c5:1f:90:d0:a7:db:51:3e:73:f8:90:db:f7:5e:13:
91:ef:02:ef:ef:d0:41:01:1f:cb:f5:43:a9:ed:60:
26:49:60:fd:4d:26:4d:a8:91:79:61:7d:83:c9:51:
8a:6d:5c:51:06:04:4e:60:e8:d3:3f:ec:3e:06:fe:
e7:38:32:5d:2b:59:8c:34:f7:2d:8c:b8:b1:30:f4:
ad:d6:39:dd:2c:e1:7b:82:35:28:9d:f3:9b:76:5f:
aa:94:7a:a4:5c:73:84:91:de:b4:93:39:13:0a:7f:
4f:40:07:67:37:a0:80:39:81:46:06:90:13:1d:d7:
e6:e7:4c:f2:0b:f4:19:71:97:7d:66:ce:b5:3e:be:
d4:e9:74:db:f4:91:fd:f6:c2:81:62:00:a2:54:18:
ce:11:a1:49:87:02:02:b4:0b:88:37:20:87:1b:1f:
43:a5:19:92:72:6f:d4:3a:66:d5:f9:e5:d0:3a:c3:
31:9c:fb:59:09:37:09:3e:d6:ad:d0:cb:07:c8:a2:
a9:80:71:83:21:bb:f5:26:d5:1e:03:fd:d8:1b:59:
f6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:4F:8B:E0:14:B9:04:87:F4:55:C4:C2:C0:AD:A4:7A:1C:8F:D2:73
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/0k-L4BS5BIf0VcTCwK2kehyP0nM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f00d::/48
Signature Algorithm: sha256WithRSAEncryption
63:83:5b:16:e2:76:be:a1:f3:7f:59:a1:c5:5b:97:ca:26:b4:
c6:6a:73:ec:df:6b:00:9a:4e:2e:bb:85:95:f6:37:ae:e0:a1:
a6:19:85:2e:e1:06:e3:d7:61:c3:98:41:bd:b4:3a:c5:07:4a:
86:c0:60:02:fe:c2:9a:b9:ec:aa:b9:ef:a0:1e:6d:30:4b:ae:
b3:31:96:11:45:ec:7f:01:d1:cf:df:33:d7:1d:b5:44:81:9c:
b9:b1:87:54:07:ac:08:a4:c6:52:a3:11:19:7f:6e:8a:d4:e2:
94:91:e8:ab:10:bb:8a:30:34:4e:1a:e8:30:71:b1:ce:a4:03:
3d:22:ac:94:9e:be:1d:02:c4:e2:85:78:c9:3e:d7:fe:8f:95:
ef:27:d9:e4:58:f9:bf:c1:6d:48:19:07:3a:f4:88:f6:96:3b:
de:92:ce:9d:21:e1:c6:ea:67:1c:a2:e5:36:fa:82:e3:9b:24:
b8:d5:e0:57:2f:2f:a3:15:0e:84:e4:52:77:aa:20:b6:9e:64:
fa:c0:ac:91:46:9e:5f:37:97:8c:9f:19:18:6d:ea:8e:8d:4a:
4c:1f:c1:e1:6d:da:8f:b4:2b:ef:12:f3:43:fd:58:f3:a1:d1:
f8:be:64:c8:86:c2:59:7c:52:59:74:ef:ab:dd:f6:fe:b0:5f:
ba:61:0d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:26:38 2024 by rpki-client on console-ams.rpki-client.org