Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/X2Ia7VQuIccijh3-MlN89LxX2Lc.roa
File: X2Ia7VQuIccijh3-MlN89LxX2Lc.roa (raw, json)
Hash identifier: kXGLD34HSL7++bF8nXAAeSixk1nxWdRMDfJ7kC++qPc=
Subject key identifier: 5F:62:1A:ED:54:2E:21:C7:22:8E:1D:FE:32:53:7C:F4:BC:57:D8:B7
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 01902CCC24683E2A2A08756D6478D6A7A314
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/X2Ia7VQuIccijh3-MlN89LxX2Lc.roa
Signing time: Tue 18 Jun 2024 19:21:34 +0000
ROA not before: Tue 18 Jun 2024 19:21:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214967
IP address blocks: 2a0e:7780::/29 maxlen: 32
2a12:ec0::/29 maxlen: 32
2a12:f0c0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jul 2024 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2c:cc:24:68:3e:2a:2a:08:75:6d:64:78:d6:a7:a3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Jun 18 19:21:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f621aed542e21c7228e1dfe32537cf4bc57d8b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:81:91:54:83:2d:27:a4:b1:a6:d4:c1:00:e4:
1f:ed:98:7a:30:4a:ad:26:5f:d7:9e:19:43:a4:77:
84:c6:dc:1b:b0:45:6a:a2:bf:99:0c:69:ca:8c:1d:
fc:55:c0:24:c3:2e:6d:f7:69:54:e0:f6:8e:2e:5c:
43:31:f1:a6:56:0d:1b:22:6e:f1:0d:bb:44:aa:99:
8d:b3:2c:1d:88:96:d3:81:c7:0c:e7:a2:c2:04:e7:
11:4d:db:c9:1d:3b:57:3e:92:b9:22:27:b3:a3:a1:
33:5e:bb:96:f6:ba:c6:64:8b:b1:b7:c2:e0:6d:48:
fa:50:a0:81:14:51:09:15:42:3b:bf:52:82:a6:39:
fc:9d:aa:fb:52:0e:e3:0f:33:51:5e:35:fa:bf:d6:
27:88:74:30:36:a8:d0:58:75:ff:7e:86:ba:7a:dd:
2f:3f:78:ef:bf:b1:fe:df:f4:29:f6:f7:87:95:4f:
05:45:b0:1b:6a:3e:be:2d:f3:bb:dc:41:54:75:14:
14:09:dc:25:c5:b4:07:63:bb:24:af:80:82:da:88:
df:b1:26:bf:b2:69:1d:ce:02:13:7f:fd:a2:d3:6a:
05:47:0a:cd:ff:87:c8:6a:15:e1:19:e0:df:16:98:
1e:4c:52:40:77:5e:b3:0c:58:30:43:82:c5:e2:d3:
b2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:62:1A:ED:54:2E:21:C7:22:8E:1D:FE:32:53:7C:F4:BC:57:D8:B7
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/X2Ia7VQuIccijh3-MlN89LxX2Lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:7780::/29
2a12:ec0::/29
2a12:f0c0::/29
Signature Algorithm: sha256WithRSAEncryption
37:42:40:b4:ab:2d:80:f2:56:48:49:08:8b:b2:af:37:1e:81:
10:54:61:80:52:db:ca:7e:e4:0f:09:ce:3b:51:d3:a5:45:7a:
db:b3:4d:97:37:12:e5:b6:95:f0:b1:5b:03:a5:ca:66:b3:ac:
5a:e6:06:0d:59:90:ee:c5:a2:d4:73:3f:f2:9f:5f:b8:48:2c:
a1:ad:dd:08:51:bc:8a:9b:35:d4:23:e4:fb:07:8d:6d:f7:6a:
7a:5c:3c:14:be:b4:8f:9c:38:a3:87:8e:da:3e:61:cb:eb:a1:
93:98:d0:5c:2c:17:27:a6:e1:e8:3a:68:ae:7d:4a:4e:3d:ef:
d6:c6:88:0e:95:f5:00:b8:4a:2e:6e:85:0c:a5:b0:31:f8:5c:
87:30:a3:19:a5:73:0a:e0:98:ac:56:37:78:2a:af:ab:e3:f0:
51:09:93:8e:4f:ad:f5:0a:c6:3b:9f:be:61:a7:52:5d:be:8c:
99:b1:0d:3e:2e:7c:a9:1d:04:b9:b1:b2:eb:41:9c:a2:c6:17:
73:8d:24:b2:e7:ba:4f:97:fd:b5:2e:c7:d8:75:09:f6:b9:6f:
3b:4a:0d:8d:2e:83:c0:d6:ab:13:53:9b:7e:ca:07:fa:e7:89:
7e:d7:5a:2f:75:e8:4f:43:2f:f7:17:48:5c:48:04:a0:d7:7b:
e2:1a:b3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 6 08:14:01 2024 by rpki-client on console-ams.rpki-client.org