Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/LhdZqypGCWbc02FqaLLqPGxhHek.roa
File: LhdZqypGCWbc02FqaLLqPGxhHek.roa (raw, json)
Hash identifier: TaZOYEcFi6vRiYkChF6ugLZDNsH7QZFrHk9CT5xkLDU=
Subject key identifier: 2E:17:59:AB:2A:46:09:66:DC:D3:61:6A:68:B2:EA:3C:6C:61:1D:E9
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018CC9BC22FF48A38DDFF7EB9DB7ED4FA48D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/LhdZqypGCWbc02FqaLLqPGxhHek.roa
Signing time: Tue 02 Jan 2024 10:33:19 +0000
ROA not before: Tue 02 Jan 2024 10:33:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 32613
IP address blocks: 2a0f:e8c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:22:ff:48:a3:8d:df:f7:eb:9d:b7:ed:4f:a4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 10:33:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e1759ab2a460966dcd3616a68b2ea3c6c611de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:50:78:14:71:42:b4:e2:65:fc:03:ee:fd:a2:
2f:7a:0b:9b:4b:56:08:56:a6:9c:03:18:79:c0:78:
c7:f5:98:7c:ba:67:5d:b6:3c:fe:40:b8:fb:51:34:
01:9d:87:ca:eb:ae:5d:24:58:e7:42:c1:92:13:1b:
c5:45:9b:f4:ed:b3:60:da:3f:cf:91:cf:37:cf:44:
c7:f8:43:f6:a9:ef:98:cf:25:2a:77:94:a2:d8:e7:
d8:4e:dd:81:d1:6e:dc:e9:cb:11:c2:ab:c2:6e:15:
77:0a:7c:8a:26:a3:70:6e:f3:a1:6e:b9:c5:64:16:
09:74:03:f8:9f:9c:90:17:d8:fe:fd:65:9b:7f:35:
50:7d:c8:17:c1:5b:4c:5a:3b:73:e7:f5:d9:32:97:
d2:c1:be:59:28:ab:3b:a5:22:17:6b:62:68:da:01:
8b:9e:07:b4:2f:84:9e:65:eb:e4:1f:db:3c:6d:cf:
e3:84:3e:05:f9:e7:97:09:b1:e8:51:26:77:94:4e:
38:ad:77:4a:dd:9f:b3:23:d9:2b:4b:d8:b2:67:5d:
72:fe:ec:d8:fc:61:4a:5c:3e:ca:db:7c:3d:af:89:
dc:6f:0f:5a:c9:d6:d6:bf:c2:3c:cf:65:cc:ff:70:
1d:b9:8c:93:e5:c7:83:79:c2:1a:9c:0e:43:d5:34:
9e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:17:59:AB:2A:46:09:66:DC:D3:61:6A:68:B2:EA:3C:6C:61:1D:E9
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/LhdZqypGCWbc02FqaLLqPGxhHek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e8c0::/29
Signature Algorithm: sha256WithRSAEncryption
c9:5a:7f:77:6e:41:01:b6:f6:01:1d:1c:22:27:30:83:25:8f:
e9:1a:21:39:c7:a9:df:15:ab:21:ad:b5:8b:69:04:ac:18:70:
32:f3:8e:4d:38:b4:6f:b3:ef:e9:73:08:fb:0d:81:91:8d:ad:
96:f6:77:c5:99:71:c2:49:dc:e2:1b:f0:ae:27:a2:c1:5a:a6:
e6:83:bd:4d:40:27:14:d7:df:6c:9d:46:55:ab:5c:c0:ee:87:
44:e2:99:44:8f:f8:19:ab:ba:f5:9f:ec:c5:05:55:ae:86:08:
9b:7a:06:64:fd:76:a8:6d:82:12:7c:59:77:16:ce:dc:20:80:
af:0d:b9:cb:31:8d:e5:fe:ff:2c:52:b8:96:d4:70:f0:61:03:
8b:d4:ba:42:c0:a1:ac:2b:6f:43:fd:d2:fc:e5:69:20:be:4c:
16:af:08:18:f3:8f:a8:87:2e:25:b6:48:c0:06:c9:08:0c:94:
0c:59:a0:fc:d8:c7:03:f9:be:d1:02:38:6a:41:d7:96:88:a1:
a2:8c:d1:9a:8a:77:4a:ca:9b:79:a3:b8:47:50:4b:23:2b:49:
b8:bb:63:10:f2:95:a5:8e:15:45:3b:ec:e4:aa:e8:94:68:8b:
ad:01:0e:53:4c:87:a6:2a:21:ba:31:66:e8:57:76:9c:4f:4e:
b0:25:eb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 05:36:40 2024 by rpki-client on console-ams.rpki-client.org