Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/MkHCqKkI38YvH1NpNtcrMRmHQ0g.roa
File: MkHCqKkI38YvH1NpNtcrMRmHQ0g.roa (raw, json)
Hash identifier: LI1WZyg3w9DiP9ud6bvdoDXrXMnWRgFu+5UWB8cEp9c=
Subject key identifier: 32:41:C2:A8:A9:08:DF:C6:2F:1F:53:69:36:D7:2B:31:19:87:43:48
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 018CCA2966C0CBE212745980247FB50D0587
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/MkHCqKkI38YvH1NpNtcrMRmHQ0g.roa
Signing time: Tue 02 Jan 2024 12:32:40 +0000
ROA not before: Tue 02 Jan 2024 12:32:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211521
IP address blocks: 2a0e:8f02:f024::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:66:c0:cb:e2:12:74:59:80:24:7f:b5:0d:05:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 2 12:32:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3241c2a8a908dfc62f1f536936d72b3119874348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ce:54:fc:eb:08:39:0f:24:19:c4:94:56:dd:
57:ec:42:21:9c:70:df:2b:c5:53:aa:e4:2e:14:f5:
b2:b3:e5:af:a3:9c:75:30:c9:b7:2b:fd:72:b1:5f:
9c:50:d6:39:f3:ee:e3:42:76:67:55:71:15:c5:bf:
4f:77:af:2b:e0:fe:8b:85:c6:d1:47:65:09:9f:3f:
d3:bf:c9:79:1f:ff:ae:a0:41:02:9b:1d:46:2d:80:
1f:cc:4a:3a:53:30:8d:7d:04:01:2f:ea:f2:54:05:
9f:34:c5:f7:32:82:c9:78:0f:ae:32:1f:da:58:22:
7f:83:f3:72:96:d9:e6:d0:55:cf:d6:60:45:b3:04:
d1:97:79:b6:bb:0f:4a:d0:1c:a1:64:b3:c7:35:f9:
ab:e2:cc:91:98:2b:e8:eb:48:40:a7:29:98:df:ff:
94:37:1d:6b:d7:dc:63:e2:fe:75:11:c3:4e:b2:60:
bf:ee:08:3b:a7:bf:0b:ac:9b:71:82:20:bf:71:e8:
0e:82:01:0b:2e:e8:ea:0e:5d:b5:aa:4f:90:d9:53:
b9:7e:fb:13:57:a8:17:eb:72:fd:cf:d2:93:2e:4a:
7e:34:0d:3e:2a:c8:85:fb:be:5e:a4:44:98:2a:f3:
0b:d7:5f:e1:9d:61:4b:e1:a8:50:b8:eb:5f:55:37:
e7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:41:C2:A8:A9:08:DF:C6:2F:1F:53:69:36:D7:2B:31:19:87:43:48
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/MkHCqKkI38YvH1NpNtcrMRmHQ0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f024::/48
Signature Algorithm: sha256WithRSAEncryption
30:f0:cc:c5:0b:59:b8:3c:6b:ac:ee:e0:82:33:4d:59:cf:a0:
65:34:f8:65:b7:c6:70:68:8d:22:2e:5c:5f:c1:db:b3:24:28:
7d:ca:b0:7f:44:62:1a:07:9d:34:32:ea:18:45:c1:e0:45:ea:
fa:2c:e3:ef:c9:17:99:90:5b:e9:a2:7f:cd:b3:bd:a7:ab:27:
90:30:65:bc:53:7c:b0:73:d4:c0:16:02:84:ca:d1:ef:70:5a:
be:ce:58:6d:b2:99:75:41:a3:60:20:bd:1f:83:c3:04:3f:cd:
9e:c3:8c:02:4b:3a:ee:67:22:38:c5:9b:7b:2b:b4:08:e9:3b:
eb:b8:3e:3a:d2:2e:0c:87:08:d2:07:aa:1e:cc:1e:54:88:b8:
af:78:c5:d8:46:e2:07:81:5b:90:f8:56:33:49:bc:b3:90:6d:
88:f5:ae:82:a7:9a:c8:24:18:57:0f:7c:fa:51:81:5a:01:53:
29:5a:ec:ba:8f:ad:58:84:bb:f0:4b:ce:54:52:d2:13:48:1e:
d4:43:49:31:19:84:66:e1:16:e2:02:48:80:17:f0:ff:c3:e8:
c1:fc:b7:60:0a:58:b1:a7:c3:df:f8:79:32:76:53:fd:a0:b2:
ca:90:8e:56:2c:b5:59:ef:69:18:1b:fa:61:8c:3c:2f:08:6c:
99:88:c3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 20:28:28 2024 by rpki-client on console-ams.rpki-client.org