Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/RWIb7-DjKos6d2TaHRNWUeANJPk.roa
File: RWIb7-DjKos6d2TaHRNWUeANJPk.roa (raw, json)
Hash identifier: mXTk42a4ICXbBMRH5J4ilFNhJwCfbrVnfvEPAoCKJYo=
Subject key identifier: 45:62:1B:EF:E0:E3:2A:8B:3A:77:64:DA:1D:13:56:51:E0:0D:24:F9
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 018CC3B67674492F1BB163A4B2F9DA9570F6
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/RWIb7-DjKos6d2TaHRNWUeANJPk.roa
Signing time: Mon 01 Jan 2024 06:29:24 +0000
ROA not before: Mon 01 Jan 2024 06:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202726
IP address blocks: 2a05:4140:1f80::/43 maxlen: 43
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:76:74:49:2f:1b:b1:63:a4:b2:f9:da:95:70:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Jan 1 06:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45621befe0e32a8b3a7764da1d135651e00d24f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:25:6a:5f:8c:b3:09:85:3e:fa:a2:40:6a:63:
e4:16:a7:a5:63:e3:07:83:e8:13:1d:e0:4d:f7:b5:
aa:dd:3f:4e:2c:71:f9:23:53:df:f1:34:0a:98:63:
2d:45:22:36:c7:da:3b:24:59:28:f6:24:63:cc:68:
9f:f6:89:dd:25:4a:d9:52:11:fd:67:1a:0f:fd:7b:
7b:68:dc:c7:ef:0e:c3:41:b4:d5:ac:3a:a0:32:77:
c6:01:54:32:8c:ee:09:79:13:63:cc:ff:0c:a2:48:
f1:bd:9f:c6:2d:98:98:1a:ce:a4:68:8c:fb:37:86:
97:3f:53:58:2c:25:05:fd:16:5a:32:1b:c3:90:26:
94:6c:eb:70:05:57:0d:df:fd:94:b7:8d:8e:07:d5:
49:b6:8c:ec:4b:7f:56:ea:e5:4d:7c:2d:07:b0:df:
ab:75:04:54:8d:37:2f:3b:ce:05:95:12:bc:80:cb:
42:ab:70:14:ba:66:0b:b4:33:5f:37:aa:c8:32:d1:
5b:60:db:bf:95:29:ce:f4:0d:e5:26:47:a2:b8:e2:
dd:4c:34:21:e7:0e:a5:7c:8c:06:37:60:b6:2c:13:
01:38:1e:aa:6d:e0:ae:3d:2e:57:b8:3f:fe:f6:cd:
a0:29:0f:59:58:d7:01:35:15:48:39:54:e6:38:33:
aa:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:62:1B:EF:E0:E3:2A:8B:3A:77:64:DA:1D:13:56:51:E0:0D:24:F9
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/RWIb7-DjKos6d2TaHRNWUeANJPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4140:1f80::/43
Signature Algorithm: sha256WithRSAEncryption
35:1c:1e:3a:a2:73:ad:f1:a3:87:33:ad:38:fc:06:42:79:a0:
b4:46:59:63:02:d6:49:2d:84:2e:6d:cf:38:5c:ee:26:09:59:
d8:2a:33:2c:fa:6e:94:5e:fe:49:30:4d:ed:d7:57:d3:91:8e:
b5:26:d8:72:fc:3c:be:04:4a:24:00:ca:c1:75:2f:63:ae:e3:
bf:ef:86:ec:2d:9d:53:4e:ae:50:a1:a1:44:13:f0:02:ae:82:
e3:16:d2:d0:f2:01:d4:2d:2f:6f:40:a2:59:59:73:fb:81:13:
e7:7f:ca:fd:f9:6e:9d:63:9f:67:3a:a2:e4:5d:97:db:f3:40:
79:d1:9d:81:50:c2:ed:61:1f:5d:f7:63:07:f2:7c:10:99:02:
72:83:e3:21:b0:54:8c:8b:15:68:1a:ac:0c:94:a7:a5:2a:92:
17:a2:6c:ca:e3:0c:89:50:1f:5c:8f:55:d0:da:42:1a:91:97:
3c:76:c1:ca:e5:ac:81:24:f5:c7:ea:c1:ef:2a:7b:ba:d8:b8:
eb:31:e4:35:d6:01:42:8c:5a:2c:82:50:78:10:2f:a9:50:97:
44:a3:78:58:fa:e7:53:34:00:b7:ba:b7:a5:e7:58:ad:00:81:
5d:8e:88:ae:92:5f:06:66:64:b2:33:68:1d:93:b8:77:4e:9b:
29:a8:8a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 06:12:11 2024 by rpki-client on console-ams.rpki-client.org