Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/A-Zd4_9aF4S09kJIl0vC11cDMpM.roa
File: A-Zd4_9aF4S09kJIl0vC11cDMpM.roa (raw, json)
Hash identifier: y0gHprQed05XWlg86ICaSGj8lWdz8X083+nCCaMi5fE=
Subject key identifier: 03:E6:5D:E3:FF:5A:17:84:B4:F6:42:48:97:4B:C2:D7:57:03:32:93
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 018CCA2970B01B784309253FDC10E70D1B26
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/A-Zd4_9aF4S09kJIl0vC11cDMpM.roa
Signing time: Tue 02 Jan 2024 12:32:42 +0000
ROA not before: Tue 02 Jan 2024 12:32:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212358
IP address blocks: 2a0e:8f02:f00f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:70:b0:1b:78:43:09:25:3f:dc:10:e7:0d:1b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 2 12:32:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03e65de3ff5a1784b4f64248974bc2d757033293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9b:bf:9f:7b:81:70:cf:68:09:c4:b9:22:e3:
47:04:8e:e1:ae:be:d1:a5:a4:30:d4:a0:10:75:75:
16:09:7a:69:3f:a0:49:08:47:9e:7b:5a:c6:c3:da:
7d:08:67:66:eb:cf:9c:61:05:00:42:0b:04:80:9d:
78:d2:9f:0d:30:70:f3:a5:4b:0b:12:d3:35:30:85:
7c:7d:f2:fa:90:e3:a4:79:af:65:fd:9e:d4:4f:9d:
b3:3f:34:9c:1c:40:5f:23:05:86:cd:b7:0c:2d:c8:
39:3c:1c:2e:78:ee:60:a3:33:e4:f5:32:e5:91:3d:
4f:b7:7d:d9:6e:64:f2:34:06:2b:d5:6b:69:e0:24:
44:b2:23:1a:ff:d3:0d:18:06:d9:a2:ad:13:6a:7a:
79:4f:58:9d:e3:6b:07:1e:26:bc:c1:a3:63:44:45:
1b:fd:d4:4c:18:02:c7:0a:a2:a0:a8:0d:02:3d:8e:
a4:c1:65:55:78:2c:e0:c4:7d:dd:0c:0a:f0:ce:a2:
64:a9:6a:aa:9a:13:b3:7f:b5:38:29:71:6a:00:83:
a5:21:78:86:bc:cd:7a:21:7e:66:56:b2:45:dc:11:
c0:02:2b:7e:ed:8c:dc:3c:cd:cf:27:7d:bc:99:fc:
3f:8e:d9:fe:76:83:f1:9b:ae:35:a5:24:3a:bb:6e:
6b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E6:5D:E3:FF:5A:17:84:B4:F6:42:48:97:4B:C2:D7:57:03:32:93
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/A-Zd4_9aF4S09kJIl0vC11cDMpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f00f::/48
Signature Algorithm: sha256WithRSAEncryption
57:01:6d:19:e1:99:e0:a0:b0:6d:93:35:3b:c4:b7:fe:f0:0c:
5f:36:09:96:14:34:40:0d:21:40:f3:a9:48:61:a4:90:28:8f:
73:bd:b5:b2:49:08:15:ab:96:30:44:d5:b2:40:e8:07:16:4e:
57:2b:f9:92:1f:e3:7e:12:8a:91:b7:08:ad:e6:f4:16:d8:4f:
02:80:3f:9c:1c:d5:e4:e4:7d:0e:ae:cb:e0:91:41:59:45:86:
a4:5a:87:d2:80:6a:58:e6:17:49:9f:06:24:a1:2e:4b:87:95:
c8:94:6c:5c:0c:4e:6f:8b:68:2c:79:f3:60:1b:70:a5:ed:dc:
02:21:e9:0a:b1:e0:08:01:45:f5:da:8e:ae:19:01:fa:7c:15:
19:23:2a:29:70:b1:21:b6:dc:b2:05:57:ae:bf:b4:7c:af:58:
b9:89:b3:a7:24:e2:d4:4f:10:0f:30:8c:f9:2f:d4:fa:b3:56:
c5:0f:50:ff:6d:09:d1:b7:13:3a:a9:9a:14:0b:d8:c6:a8:b6:
15:45:29:a8:ff:6e:2b:5b:88:c7:bc:95:2a:be:57:95:02:72:
a6:7c:74:01:40:a2:41:8f:0a:f5:09:58:2b:0e:33:48:e7:29:
96:50:33:a7:04:8c:b6:2c:66:4a:91:9d:31:3b:18:04:71:82:
53:3d:aa:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 22:31:55 2024 by rpki-client on console-fra.rpki-client.org