Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/XAI2UqrMpufn-4VDS0I-zHzSApE.roa
File: XAI2UqrMpufn-4VDS0I-zHzSApE.roa (raw, json)
Hash identifier: TO23SsXBjJW/ueHqPFts3VaqwklMyMCyjFHDJmUSNeU=
Subject key identifier: 5C:02:36:52:AA:CC:A6:E7:E7:FB:85:43:4B:42:3E:CC:7C:D2:02:91
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 018DB84230ABBEB2606C446E65A1927B559B
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/XAI2UqrMpufn-4VDS0I-zHzSApE.roa
Signing time: Sat 17 Feb 2024 18:09:21 +0000
ROA not before: Sat 17 Feb 2024 18:09:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201386
IP address blocks: 2a13:b487:5300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b8:42:30:ab:be:b2:60:6c:44:6e:65:a1:92:7b:55:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Feb 17 18:09:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c023652aacca6e7e7fb85434b423ecc7cd20291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:63:34:ad:df:b9:b9:ce:29:c1:d6:76:61:74:
af:35:77:64:09:97:44:95:1d:9b:e0:7b:f5:69:3e:
7c:e5:35:a9:2a:94:a3:bc:da:52:eb:f7:59:73:8a:
fb:42:04:cb:61:0b:88:21:db:48:06:10:1b:93:e8:
d7:bd:3f:24:44:c8:56:b3:a7:8f:4b:3e:87:fc:fa:
81:ca:f1:6a:b0:c3:3f:9f:88:2d:72:75:9f:11:60:
ff:d7:e1:62:d2:b7:35:b6:e4:f8:6c:c2:1a:9b:9a:
a5:88:86:57:f0:cf:8f:63:79:13:ed:4e:ee:f2:0e:
bf:95:26:6a:33:e8:99:ae:2e:e1:87:87:ad:30:f2:
21:b7:5e:f6:7d:6f:84:bf:26:16:95:0e:f3:97:6e:
cb:d0:e0:81:ba:84:d1:76:c4:9d:39:df:aa:a5:ef:
ee:c3:dc:8e:b3:77:06:df:ed:35:4f:09:98:16:94:
19:88:52:8c:d1:c3:12:b9:63:73:83:96:48:da:3f:
94:fc:39:58:b5:ac:ad:8d:d7:5f:37:b8:f7:c9:43:
fe:f7:24:35:b3:0a:3c:b0:d4:a5:7d:41:de:b0:db:
c6:4f:ce:4d:53:40:7e:fc:46:47:25:7a:cb:dc:a4:
26:36:2d:47:5b:0b:90:b5:2b:8e:22:3c:4b:d3:ed:
b8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:02:36:52:AA:CC:A6:E7:E7:FB:85:43:4B:42:3E:CC:7C:D2:02:91
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/XAI2UqrMpufn-4VDS0I-zHzSApE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b487:5300::/40
Signature Algorithm: sha256WithRSAEncryption
97:3a:56:cf:ae:32:66:fb:83:71:8f:be:0a:36:f3:f6:fc:cc:
41:f6:f4:c7:13:8b:ad:2a:e8:b1:71:b5:3f:bf:ca:53:de:a5:
11:06:22:14:4d:db:24:c4:f9:24:d8:22:4b:b3:d3:c2:69:81:
6b:25:36:45:a2:4a:e3:ef:84:68:d4:7f:6e:0a:10:56:06:52:
54:5f:54:ad:ea:f1:cd:f8:3e:11:b9:05:22:ce:76:70:f5:ca:
d9:55:98:11:00:94:08:18:0d:35:36:a5:33:6f:c5:bc:59:d3:
63:ff:2a:41:c4:a5:27:fe:a2:34:05:79:4d:b1:5f:de:a3:0a:
97:71:4f:d4:dc:bf:e6:34:e7:a2:7f:83:5b:34:4a:ad:87:d7:
36:8e:6a:fe:d3:fe:20:3b:80:0c:23:34:df:c3:85:97:22:f7:
77:02:4e:c9:22:d2:69:0c:c7:6a:43:37:6c:a5:e7:c7:26:74:
a7:6b:7f:4c:81:9d:34:cd:25:2e:fc:42:76:9a:f1:51:6b:1c:
f9:b1:80:e5:43:a5:e4:6d:bb:5b:14:bd:11:48:73:24:ad:72:
9c:77:0a:17:36:95:6c:a9:16:ff:3d:cb:1a:0f:65:66:ae:ba:
1a:4a:a2:12:0e:36:eb:0a:3d:71:a7:5f:9a:f8:eb:ac:a7:f5:
7e:5d:6a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:40:44 2024 by rpki-client on console-fra.rpki-client.org