Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/xUSySMxx-UQLj9FeHRSQV3KwwAY.roa
File: xUSySMxx-UQLj9FeHRSQV3KwwAY.roa (raw, json)
Hash identifier: UsvZof6+HEGhlHCWIM98WX4NzTdn6PghYHD7SDDqNrM=
Subject key identifier: C5:44:B2:48:CC:71:F9:44:0B:8F:D1:5E:1D:14:90:57:72:B0:C0:06
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 018E5D46CFE2DEE79F90093C44876BB2D3D5
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/xUSySMxx-UQLj9FeHRSQV3KwwAY.roa
Signing time: Wed 20 Mar 2024 19:11:45 +0000
ROA not before: Wed 20 Mar 2024 19:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215288
IP address blocks: 2a05:4140:56::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5d:46:cf:e2:de:e7:9f:90:09:3c:44:87:6b:b2:d3:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Mar 20 19:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c544b248cc71f9440b8fd15e1d14905772b0c006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b6:77:dd:34:2b:f0:55:88:70:11:cd:44:c7:
dc:46:ee:d7:22:df:95:94:54:f4:6a:05:ab:b4:06:
68:a1:d7:09:44:ff:88:a9:07:7f:90:d9:e4:07:da:
bd:c6:b5:4c:19:c3:9e:56:20:91:50:5a:de:22:4d:
fe:34:5c:59:8d:cd:24:eb:77:d4:86:6f:91:1b:da:
26:96:9d:2d:f4:c8:56:d6:dd:06:ae:96:06:2c:df:
27:b3:b2:2b:e3:01:fe:ef:7c:7c:ca:45:9c:ef:4e:
31:78:91:a3:40:8f:14:83:39:e4:64:54:d2:20:2c:
37:ac:42:cf:75:e7:c4:cd:df:a7:b0:5a:59:85:da:
ed:b8:f1:74:68:63:7d:3c:fa:dc:42:9e:f5:0a:fa:
a6:bb:ab:07:2a:0e:84:e0:d0:c1:3b:76:4c:45:3f:
6e:6b:80:8b:fb:a3:9f:f3:11:a2:47:55:8d:11:b7:
a6:65:53:2e:e5:f0:a5:c3:33:e0:64:06:bb:04:4b:
69:6f:4e:1e:53:18:1e:91:c6:93:93:18:81:66:26:
e5:ab:e3:c1:9f:ff:b3:22:d4:95:1c:80:14:1a:9b:
9e:67:e9:60:81:cd:fa:9d:ae:60:28:be:9b:65:66:
f1:95:36:7a:b3:71:4b:de:b3:cd:a2:95:e7:28:8c:
ab:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:44:B2:48:CC:71:F9:44:0B:8F:D1:5E:1D:14:90:57:72:B0:C0:06
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/xUSySMxx-UQLj9FeHRSQV3KwwAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4140:56::/48
Signature Algorithm: sha256WithRSAEncryption
37:32:9b:25:7d:8a:1b:98:19:84:45:6f:03:b0:85:01:2b:fe:
51:ee:d8:16:f1:f1:2b:bd:45:ab:8a:bd:28:ed:df:0e:f5:66:
f7:e9:5d:6f:99:56:2b:44:85:ac:ae:14:18:ad:bf:b7:e8:ac:
e7:ea:19:80:ef:64:b5:e4:d9:e2:0d:a2:76:2a:69:af:18:ee:
01:09:3b:d5:4f:da:7c:23:c0:6f:28:6f:66:17:a0:40:0c:6c:
27:7f:c9:0d:ef:4a:3b:ae:5f:ba:e0:38:87:08:15:73:a3:13:
bf:62:d6:9a:d1:c5:76:c5:15:6d:39:36:1d:17:bc:21:5d:43:
e8:e9:ed:92:a6:27:de:f0:fb:94:2b:0f:fe:a5:8d:46:c6:c3:
b6:0e:f6:47:f2:11:b6:d5:93:e2:5e:24:60:83:4a:12:3b:34:
22:c9:7a:3b:b7:54:96:e0:35:e3:08:b2:d1:03:4a:53:0d:35:
3b:6b:6e:44:a6:65:1c:76:b5:c2:8b:75:bc:ea:dc:ed:cb:30:
05:36:5f:b7:5e:9c:04:b2:96:01:6a:89:97:6b:d6:e5:0a:d1:
af:f1:24:d1:4f:dd:ef:e4:f7:21:98:ba:41:6a:53:68:c8:d5:
9c:63:78:e2:a4:45:52:00:e6:1f:8c:ae:e6:af:ba:ea:43:03:
9a:c5:10:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:08:53 2024 by rpki-client on console-ams.rpki-client.org