Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/ejsBWX8uCzydbKpQBp9kqumOC1g.roa
File: ejsBWX8uCzydbKpQBp9kqumOC1g.roa (raw, json)
Hash identifier: 5DaHtX0tr0xC/jWNXJXWc8lD+7xXZE87PIyOghSGSGs=
Subject key identifier: 7A:3B:01:59:7F:2E:0B:3C:9D:6C:AA:50:06:9F:64:AA:E9:8E:0B:58
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 018CC64A7E7FED9E5A8160A98315F3850AA3
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/ejsBWX8uCzydbKpQBp9kqumOC1g.roa
Signing time: Mon 01 Jan 2024 18:30:19 +0000
ROA not before: Mon 01 Jan 2024 18:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61335
IP address blocks: 2a00:fd40:c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:7e:7f:ed:9e:5a:81:60:a9:83:15:f3:85:0a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 18:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a3b01597f2e0b3c9d6caa50069f64aae98e0b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:24:43:ea:e0:4f:6f:5b:5b:1b:3f:9a:91:c6:
1d:8c:d8:ac:9b:73:a6:fd:86:9d:bb:75:f6:23:7b:
d9:a3:04:4a:df:ab:f1:dd:43:c6:0d:51:83:83:76:
9e:9d:16:ff:dc:be:02:06:d4:07:b5:bb:56:26:12:
40:b7:7c:15:89:82:3e:91:52:54:36:4e:57:17:fc:
0a:31:2f:3f:d0:7e:c9:16:84:a1:62:df:68:63:7b:
2c:27:05:d5:19:cd:a2:49:66:f0:7a:70:cb:e5:8c:
33:4e:8f:b5:de:72:42:c4:c1:fe:0c:d6:ff:76:e2:
99:cf:21:d9:2f:35:26:b9:13:07:be:a5:56:78:26:
6f:79:1c:96:ca:96:9a:ee:21:31:23:86:22:f1:a1:
7b:50:62:39:34:f2:2a:f2:77:79:e4:0f:bd:2d:00:
e2:f2:cb:38:13:25:87:ea:4c:c4:25:e0:38:7d:8b:
f4:fb:b5:60:cb:46:0d:80:a8:58:f6:16:e6:8c:d7:
37:6b:fd:3c:57:24:d8:62:2f:b6:84:78:20:ca:42:
75:9f:3b:19:35:c9:58:c0:09:4e:f2:3e:5a:db:b4:
84:97:e3:66:02:fd:50:49:de:74:af:a0:3a:44:b2:
d1:66:d2:5b:e9:3f:d7:f1:66:bb:31:2f:4f:90:b3:
1b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3B:01:59:7F:2E:0B:3C:9D:6C:AA:50:06:9F:64:AA:E9:8E:0B:58
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/ejsBWX8uCzydbKpQBp9kqumOC1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:fd40:c::/48
Signature Algorithm: sha256WithRSAEncryption
72:99:53:df:dd:4b:25:be:73:bb:4b:6c:a1:04:83:ca:e1:7d:
64:bf:47:66:14:09:b2:d1:ce:06:b5:b9:bf:9f:9e:fd:0a:32:
f5:18:19:2a:01:04:43:9d:6e:06:04:86:f0:46:7b:2b:23:a0:
16:af:3d:65:d7:5d:c1:57:aa:ff:1c:87:a9:a0:8d:c5:1b:1d:
d6:c1:1f:0d:d7:91:40:d3:84:23:f0:a8:2e:87:5c:4f:e2:89:
c2:74:0d:0c:cf:da:18:e9:66:86:58:a0:77:32:5a:3d:f1:25:
1c:55:2c:87:8e:16:df:b5:e4:6a:8b:46:fb:c2:0c:fb:2f:00:
a0:63:52:47:16:a2:7a:4a:2c:e0:30:00:9b:38:4a:bd:aa:57:
90:36:9c:fe:e3:67:87:08:60:55:1b:bf:6a:69:a0:cd:39:42:
77:f0:db:dc:e6:15:ca:9e:9b:df:56:af:95:8c:02:9c:40:8c:
b4:e8:cd:10:7b:0a:d6:33:5a:56:36:92:a4:85:6b:24:97:f0:
b0:d4:d7:0f:23:d8:c4:e6:ac:69:d0:d1:8b:c3:ce:94:f2:f7:
19:33:ca:2f:95:34:3a:c4:62:ea:d9:31:ab:97:07:4c:46:a4:
88:4e:21:20:12:c3:5c:26:4c:ab:e5:ce:98:39:f2:6a:a0:67:
22:05:d6:1e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzGSn5/7Z5agWCpgxXzhQqjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0
NzA2N2UwHhcNMjQwMTAxMTgzMDE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTNiMDE1OTdmMmUwYjNjOWQ2Y2FhNTAwNjlmNjRhYWU5OGUwYjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCRD6uBPb1tbGz+akcYdjNism3Om
/Yadu3X2I3vZowRK36vx3UPGDVGDg3aenRb/3L4CBtQHtbtWJhJAt3wViYI+kVJU
Nk5XF/wKMS8/0H7JFoShYt9oY3ssJwXVGc2iSWbwenDL5YwzTo+13nJCxMH+DNb/
duKZzyHZLzUmuRMHvqVWeCZveRyWypaa7iExI4Yi8aF7UGI5NPIq8nd55A+9LQDi
8ss4EyWH6kzEJeA4fYv0+7Vgy0YNgKhY9hbmjNc3a/08VyTYYi+2hHggykJ1nzsZ
NclYwAlO8j5a27SEl+NmAv1QSd50r6A6RLLRZtJb6T/X8Wa7MS9PkLMbzwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHo7AVl/Lgs8nWyqUAafZKrpjgtYMB8GA1UdIwQY
MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt
OGM5NTgxZDk2ZDhmLzEvZWpzQldYOHVDenlkYktwUUJwOWtxdW1PQzFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm
LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgD9QAAM
MA0GCSqGSIb3DQEBCwUAA4IBAQBymVPf3UslvnO7S2yhBIPK4X1kv0dmFAmy0c4G
tbm/n579CjL1GBkqAQRDnW4GBIbwRnsrI6AWrz1l113BV6r/HIepoI3FGx3WwR8N
15FA04Qj8Kguh1xP4onCdA0Mz9oY6WaGWKB3Mlo98SUcVSyHjhbfteRqi0b7wgz7
LwCgY1JHFqJ6SizgMACbOEq9qleQNpz+42eHCGBVG79qaaDNOUJ38Nvc5hXKnpvf
Vq+VjAKcQIy06M0QewrWM1pWNpKkhWskl/Cw1NcPI9jE5qxp0NGLw86U8vcZM8ov
lTQ6xGLq2TGrlwdMRqSITiEgEsNcJkyr5c6YOfJqoGciBdYe
-----END CERTIFICATE-----
Generated at Mon Jun 17 12:31:40 2024 by rpki-client on console-ams.rpki-client.org