Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/Wf4sYF7T56q00fRjTPlLVJ5XGuU.roa
File: Wf4sYF7T56q00fRjTPlLVJ5XGuU.roa (raw, json)
Hash identifier: agfWCY0g+zqLqnELjvhtfELgoJ72e7StO988pce5Mdw=
Subject key identifier: 59:FE:2C:60:5E:D3:E7:AA:B4:D1:F4:63:4C:F9:4B:54:9E:57:1A:E5
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 018CC801367EA7849D570012D4C09BAD7615
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/Wf4sYF7T56q00fRjTPlLVJ5XGuU.roa
Signing time: Tue 02 Jan 2024 02:29:31 +0000
ROA not before: Tue 02 Jan 2024 02:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48261
IP address blocks: 2a12:4b40::/29 maxlen: 64
2a13:c400::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:36:7e:a7:84:9d:57:00:12:d4:c0:9b:ad:76:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: Jan 2 02:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59fe2c605ed3e7aab4d1f4634cf94b549e571ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1e:a9:d6:46:37:ec:2d:f4:27:53:e7:52:6e:
24:e7:c1:80:b4:d8:aa:ec:dc:33:18:21:2f:9f:c9:
d9:d3:d1:2b:21:02:80:71:2c:73:65:c0:d5:45:bc:
8f:9e:ad:b3:eb:ea:24:0b:be:7c:46:d8:3e:06:17:
44:e5:09:76:42:6c:26:36:fd:30:24:0d:1f:73:ed:
66:02:2d:cc:42:09:bc:da:df:b8:fb:fc:00:6f:fa:
f1:8d:aa:df:47:f9:af:49:df:fe:94:c1:fd:7b:da:
95:f5:5f:ba:2c:46:eb:52:34:f9:c4:36:ee:df:73:
01:de:f0:be:4c:76:eb:9f:dc:1f:d3:cd:c3:bb:82:
8c:b6:56:01:87:58:17:04:a3:02:4c:32:88:6d:e5:
04:bb:a8:d8:4c:4e:65:e4:12:d7:18:73:09:24:b3:
16:24:67:7c:dc:2b:28:08:11:a8:75:c6:03:7d:df:
fb:58:1d:f8:de:26:c9:1c:d9:4a:f2:31:1f:31:3b:
c3:32:90:3d:2f:da:14:c7:d1:8a:0e:98:15:b2:52:
dc:66:23:8c:d0:82:bc:ea:24:95:9c:c6:b5:65:48:
b4:7c:96:b9:8d:d5:49:64:c9:b1:ca:34:4c:40:db:
00:5e:45:0f:1f:2a:51:33:19:04:61:90:ac:6b:e7:
d6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FE:2C:60:5E:D3:E7:AA:B4:D1:F4:63:4C:F9:4B:54:9E:57:1A:E5
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/Wf4sYF7T56q00fRjTPlLVJ5XGuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:4b40::/29
2a13:c400::/29
Signature Algorithm: sha256WithRSAEncryption
5c:21:3c:6a:f3:59:43:ad:98:05:52:a7:e6:8e:7e:af:80:5b:
10:c1:cd:9b:4d:26:77:a7:1d:a5:91:86:de:90:f0:31:59:c0:
ac:12:3b:9d:da:cc:8f:0a:21:9b:af:22:ed:65:70:a3:7c:04:
f7:02:de:09:ab:da:c8:d5:81:aa:dd:dd:d4:bb:e5:b8:17:f3:
fe:3a:e5:a2:5c:97:33:0b:c2:ca:85:c7:b7:1d:ad:cd:a5:a9:
6b:53:66:9f:34:fb:89:8b:88:38:83:83:da:73:15:c7:6f:f4:
ec:45:38:69:b5:4f:15:60:ff:b2:20:16:19:8a:28:9b:ea:3f:
ee:92:04:b9:c2:cf:d2:d7:e4:94:1c:3f:f7:78:ae:57:d4:08:
4b:e1:5a:04:7e:f7:f9:b3:7f:87:5d:23:41:9d:a2:86:34:5f:
bf:0e:62:5c:30:d4:f0:7f:9f:b2:f4:ac:e7:68:52:cf:2b:65:
2f:71:19:68:3d:8d:43:4c:db:6b:96:e3:b5:80:db:dd:01:f7:
c4:fa:07:d2:da:71:42:8d:d2:fb:60:21:20:0e:03:5f:37:0d:
5a:7f:92:36:d5:95:70:c5:00:88:3a:9e:91:24:53:5e:d5:8d:
26:5c:44:74:70:ca:c1:fd:80:a0:01:c5:e5:f2:9a:40:ea:c4:
e8:33:ee:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:32:38 2024 by rpki-client on console-ams.rpki-client.org