Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/CWVaxItyznCnLhd7J6EJMlaj_EY.roa
File: CWVaxItyznCnLhd7J6EJMlaj_EY.roa (raw, json)
Hash identifier: 3IYvVoVCe+5KUsYKcdpGyRedMNyJ68QsCA0JGXvOw9g=
Subject key identifier: 09:65:5A:C4:8B:72:CE:70:A7:2E:17:7B:27:A1:09:32:56:A3:FC:46
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 018CCA29619925E56E5998F600F0BE7B3EF3
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/CWVaxItyznCnLhd7J6EJMlaj_EY.roa
Signing time: Tue 02 Jan 2024 12:32:38 +0000
ROA not before: Tue 02 Jan 2024 12:32:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208763
IP address blocks: 2a0e:8f02:21a0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:61:99:25:e5:6e:59:98:f6:00:f0:be:7b:3e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 2 12:32:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09655ac48b72ce70a72e177b27a1093256a3fc46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0d:28:5b:7a:5a:8c:e3:0d:37:0d:4b:e1:2e:
8f:13:f3:0e:4c:e3:71:27:e8:2c:d0:2d:b5:ed:9b:
b1:0c:97:64:ab:c7:10:be:8d:f5:d7:1d:03:5a:f4:
ea:15:b3:73:20:a7:d2:c8:97:59:59:fe:12:1f:72:
70:0a:72:a7:b7:db:99:c4:00:03:cc:16:46:e5:84:
ae:38:e4:c4:94:4c:43:b2:b1:15:d3:17:00:8a:ec:
bb:40:f3:a4:02:a9:17:6a:c2:04:59:88:ac:51:d2:
55:8a:c0:9b:47:15:f2:ce:70:e7:f0:7c:b7:ff:11:
f3:48:ff:c2:fb:db:5f:46:7f:06:7f:2d:e4:a1:59:
67:cd:4c:8d:f0:9d:b7:e3:5d:bc:2e:e5:bf:6d:08:
85:fd:86:76:48:00:41:9f:f8:b5:d3:40:b5:46:e4:
f0:6c:2d:e6:0e:b1:2d:48:80:29:a4:02:c8:88:e7:
91:c3:1a:05:4f:16:62:f8:47:0b:b6:ed:ec:45:4e:
20:f2:c0:c1:83:02:ce:55:fa:f5:da:ed:4d:43:30:
c2:52:a7:a7:c4:e9:74:3c:6e:b8:53:51:fd:6d:f2:
aa:60:ca:ea:1a:b1:db:3d:c1:9b:3a:4e:c6:95:35:
84:ff:21:5f:6e:90:1f:4e:7b:b6:aa:0e:47:71:7a:
d5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:65:5A:C4:8B:72:CE:70:A7:2E:17:7B:27:A1:09:32:56:A3:FC:46
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/CWVaxItyznCnLhd7J6EJMlaj_EY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:21a0::/44
Signature Algorithm: sha256WithRSAEncryption
40:a7:c6:21:68:7a:7c:87:b3:8f:f6:14:97:75:8f:91:7c:cb:
5b:6e:c2:a8:a1:ab:98:08:ad:ab:de:c6:16:65:58:6c:48:d6:
9c:c0:d3:37:d7:bc:bc:c6:8c:4e:34:3d:a6:1b:81:92:7c:88:
1e:8c:ee:68:1a:c8:5c:20:e7:5e:d7:c3:5f:8a:cb:06:f2:89:
46:49:7f:ef:ca:df:c1:4f:79:6b:a8:4d:a8:80:36:a7:fa:c3:
bb:75:af:a6:99:82:3f:80:73:84:51:dc:5c:20:13:21:9c:26:
bc:36:ac:f8:0a:52:56:7c:06:2d:a5:a2:28:1e:9d:3c:f0:14:
8a:68:5b:1d:35:89:d5:bc:3d:42:9a:c0:da:2e:47:a4:14:f6:
ed:4c:de:47:c8:f5:97:21:95:6b:f6:96:d0:e4:d9:13:12:c1:
69:10:50:8b:ec:b7:ba:05:44:f9:94:76:7f:93:b1:65:f6:3a:
f9:85:c8:0e:ac:56:64:07:81:ae:30:de:ac:76:b7:21:c5:8d:
2b:53:b1:77:62:15:47:a1:34:0a:23:a7:3f:3c:3c:54:d2:72:
dc:ba:cf:6e:52:4e:5b:06:86:cd:27:f3:33:9b:11:3c:ef:dd:
87:d0:44:d0:39:06:98:d4:4b:cb:4c:9e:d0:31:a9:52:9f:07:
7f:45:82:df
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzKKWGZJeVuWZj2APC+ez7zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NmVmNDhlZDYxNTVkZDc4NDNlZWQzNjMyNDY5YWJhYTMx
MDBiZjMwHhcNMjQwMTAyMTIzMjM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTY1NWFjNDhiNzJjZTcwYTcyZTE3N2IyN2ExMDkzMjU2YTNmYzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2w0oW3pajOMNNw1L4S6PE/MOTONx
J+gs0C217ZuxDJdkq8cQvo311x0DWvTqFbNzIKfSyJdZWf4SH3JwCnKnt9uZxAAD
zBZG5YSuOOTElExDsrEV0xcAiuy7QPOkAqkXasIEWYisUdJVisCbRxXyznDn8Hy3
/xHzSP/C+9tfRn8Gfy3koVlnzUyN8J234128LuW/bQiF/YZ2SABBn/i100C1RuTw
bC3mDrEtSIAppALIiOeRwxoFTxZi+EcLtu3sRU4g8sDBgwLOVfr12u1NQzDCUqen
xOl0PG64U1H9bfKqYMrqGrHbPcGbOk7GlTWE/yFfbpAfTnu2qg5HcXrVjQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFAllWsSLcs5wpy4XeyehCTJWo/xGMB8GA1UdIwQY
MBaAFNVu9I7WFV3XhD7tNjJGmrqjEAvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgt
ZDJkN2YyYmI2NGRmLzEvQ1dWYXhJdHl6bkNuTGhkN0o2RUpNbGFqX0VZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgtZDJkN2YyYmI2NGRm
LzEvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6PAiGg
MA0GCSqGSIb3DQEBCwUAA4IBAQBAp8YhaHp8h7OP9hSXdY+RfMtbbsKooauYCK2r
3sYWZVhsSNacwNM317y8xoxOND2mG4GSfIgejO5oGshcIOde18NfissG8olGSX/v
yt/BT3lrqE2ogDan+sO7da+mmYI/gHOEUdxcIBMhnCa8Nqz4ClJWfAYtpaIoHp08
8BSKaFsdNYnVvD1CmsDaLkekFPbtTN5HyPWXIZVr9pbQ5NkTEsFpEFCL7Le6BUT5
lHZ/k7Fl9jr5hcgOrFZkB4GuMN6sdrchxY0rU7F3YhVHoTQKI6c/PDxU0nLcus9u
Uk5bBobNJ/MzmxE8792H0ETQOQaY1EvLTJ7QMalSnwd/RYLf
-----END CERTIFICATE-----
Generated at Tue May 21 16:55:18 2024 by rpki-client on console-ams.rpki-client.org