Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/I1mrsuCSf6Hlo9gUmEVXjJJMzns.roa
File: I1mrsuCSf6Hlo9gUmEVXjJJMzns.roa (raw, json)
Hash identifier: sb5SYzDtdK7PxDpm1DBC9FnVUETmUClkTY2omuJThe4=
Subject key identifier: 23:59:AB:B2:E0:92:7F:A1:E5:A3:D8:14:98:45:57:8C:92:4C:CE:7B
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 018CCA295CA93F6D4DF3C6A0F5E056459444
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/I1mrsuCSf6Hlo9gUmEVXjJJMzns.roa
Signing time: Tue 02 Jan 2024 12:32:37 +0000
ROA not before: Tue 02 Jan 2024 12:32:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203738
IP address blocks: 2a0e:8f02:f041::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:5c:a9:3f:6d:4d:f3:c6:a0:f5:e0:56:45:94:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 2 12:32:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2359abb2e0927fa1e5a3d8149845578c924cce7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:50:e8:30:72:f9:71:63:cb:58:bf:8b:72:e1:
26:0a:3c:6d:a4:bb:ae:f8:33:b7:f7:de:3a:95:6b:
8f:6d:ed:20:61:c6:99:be:3c:7b:a2:5d:55:4e:dd:
38:e6:ee:cb:45:15:83:7f:ff:de:7e:89:6f:66:8d:
51:fe:f4:1d:0e:44:11:39:b4:e4:70:0e:ef:32:8f:
af:85:8b:94:57:a0:65:01:9c:a9:4d:86:d3:cd:c2:
49:66:5a:69:05:7d:2f:35:86:db:99:a9:1d:9f:d7:
53:e0:18:05:1a:ea:09:dc:46:53:9d:f6:b2:86:4c:
b7:6f:94:c6:50:db:aa:2e:bb:c3:57:47:04:c8:12:
e0:ed:e3:c4:3d:6d:bf:64:e7:1d:e6:de:b6:cf:08:
eb:0c:44:b8:b5:07:1c:04:33:45:f4:c0:4f:64:b3:
4e:fd:08:23:d5:b3:e2:ce:05:23:69:6d:98:33:55:
e6:3e:92:ff:ab:8b:b6:a5:0e:ed:37:58:66:eb:35:
9b:e5:7e:b6:23:5f:0a:25:ae:46:30:45:4c:f7:9f:
a6:7c:9a:05:74:1e:5f:75:0f:84:68:1f:90:d3:12:
ea:04:7a:a9:5c:22:6a:cf:3d:52:8f:c2:3f:9a:82:
cb:e1:d9:13:2d:79:82:a7:72:a0:66:05:fc:48:28:
d9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:59:AB:B2:E0:92:7F:A1:E5:A3:D8:14:98:45:57:8C:92:4C:CE:7B
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/I1mrsuCSf6Hlo9gUmEVXjJJMzns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f041::/48
Signature Algorithm: sha256WithRSAEncryption
98:c9:69:03:5a:6a:ab:4a:b4:c1:64:71:fc:20:2a:35:2f:6a:
d4:f2:b5:62:f5:43:2f:0f:d4:81:84:8a:fe:23:69:3b:5f:47:
b2:4e:18:9c:17:b4:4d:3b:59:21:1c:eb:36:2c:c4:42:81:5f:
c2:1f:76:f1:40:82:34:28:1b:34:1f:98:79:99:93:63:23:5f:
4d:0b:e6:ba:05:8f:01:07:bc:77:b3:af:cb:30:8e:90:52:3f:
ae:98:be:72:34:d8:d0:b3:da:50:87:c2:af:6f:5d:ea:41:c3:
b2:5b:ad:65:79:76:ed:94:68:e3:4d:87:4c:9f:94:e0:85:b1:
0d:df:c6:14:2d:3d:e5:de:75:15:f2:2d:d3:bd:ac:88:2b:c8:
65:5c:46:27:22:6a:81:d2:5e:0d:95:57:33:b2:5a:43:6f:de:
69:ba:7f:d7:a1:a2:cb:32:05:2f:d8:02:d2:ec:e5:d3:44:b5:
83:7f:9e:ed:db:5c:cd:0c:6b:fb:c5:14:c2:39:e7:79:09:de:
3e:9e:ae:e5:a1:fc:03:c2:7a:b2:47:05:c8:9a:75:67:53:55:
7d:46:34:51:2f:9c:fb:fd:f4:3e:08:85:84:e6:7c:71:cc:02:
81:98:7e:89:10:a9:6b:e4:6e:42:f7:3d:f5:b3:39:2c:3a:b3:
5b:93:96:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 20:28:28 2024 by rpki-client on console-ams.rpki-client.org