Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/VzQ-SWs7c7NrP8kxKz-KK41qghQ.roa
File: VzQ-SWs7c7NrP8kxKz-KK41qghQ.roa (raw, json)
Hash identifier: qjERGDxZ9zbeLGfnkAweMZNbw827ay3JKmK/2E2wHDI=
Subject key identifier: 57:34:3E:49:6B:3B:73:B3:6B:3F:C9:31:2B:3F:8A:2B:8D:6A:82:14
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 018CCA2963AA6CC9A2EE72164767E731F734
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/VzQ-SWs7c7NrP8kxKz-KK41qghQ.roa
Signing time: Tue 02 Jan 2024 12:32:39 +0000
ROA not before: Tue 02 Jan 2024 12:32:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210915
IP address blocks: 2a0e:8f02:f036::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:63:aa:6c:c9:a2:ee:72:16:47:67:e7:31:f7:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 2 12:32:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57343e496b3b73b36b3fc9312b3f8a2b8d6a8214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:82:9f:36:b1:41:58:ea:54:fb:41:65:01:df:
54:d3:09:ee:13:16:9c:75:80:57:5e:ee:7a:9a:ef:
44:26:98:c5:cc:e6:f0:64:bb:fa:48:4d:50:67:5d:
bf:31:ea:43:2d:c0:e7:b8:e7:20:e9:e2:48:7f:57:
c5:fe:3b:fc:af:9c:f5:93:2f:18:d9:42:3f:ac:ba:
86:40:b7:51:a0:02:b7:d8:cf:d6:0a:16:51:98:db:
1e:8d:29:09:db:df:0b:ed:28:4a:a9:98:2a:00:b0:
45:09:3e:05:07:72:7d:f7:fb:49:c4:18:76:24:31:
b1:a7:09:3e:8d:43:8d:1d:ef:3a:bf:5c:57:c1:d5:
2e:af:ce:7a:05:94:7a:2a:5e:6d:1a:66:4b:ae:d4:
20:1b:fe:9f:23:13:c2:d5:c2:13:bc:1d:e3:97:62:
d6:88:1a:af:e2:d7:af:f3:30:9f:10:ec:c5:12:f5:
af:28:3a:31:37:0a:58:db:e3:3f:18:45:8a:91:5f:
d3:a5:0d:4d:f6:56:8f:54:5d:c0:50:28:43:c2:db:
24:a6:04:2e:76:b6:f5:c5:8e:5e:ea:6f:30:a5:5d:
2c:e7:66:69:5a:d2:57:ee:52:49:5f:c7:03:a3:48:
b7:ee:62:72:bd:ae:25:2e:52:00:e8:10:f4:72:9c:
1f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:34:3E:49:6B:3B:73:B3:6B:3F:C9:31:2B:3F:8A:2B:8D:6A:82:14
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/VzQ-SWs7c7NrP8kxKz-KK41qghQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f036::/48
Signature Algorithm: sha256WithRSAEncryption
6f:25:5f:c3:11:b5:b4:7f:8f:fb:dc:10:df:5a:49:bb:8a:51:
73:ea:85:dc:30:26:b7:57:63:c8:2b:4b:27:d6:a0:5d:b2:3f:
4e:08:c5:ea:55:fc:59:ef:2e:95:09:4f:98:f4:36:5b:e6:5e:
5a:15:a9:06:a3:93:4b:9c:5e:c6:3c:f1:79:10:ae:86:31:eb:
86:f3:b5:e7:a8:50:5e:ee:05:99:eb:ee:a0:f4:30:4c:e9:f3:
6a:f7:38:6d:93:84:60:3f:3a:52:63:4b:0d:23:a3:c3:13:50:
da:28:44:37:33:ea:23:5f:a1:3f:eb:dc:98:df:ae:ef:af:2c:
9d:91:58:9a:5c:03:4b:db:51:7a:fa:cb:b8:1f:d9:d8:3f:6b:
e1:ce:c0:6d:0b:9b:a7:7e:a2:9c:10:2a:7f:11:b2:89:c2:35:
65:dc:83:fe:97:ca:ba:14:df:bf:1e:74:db:38:4a:45:0e:85:
d2:81:a8:04:cc:13:37:7b:9e:f6:bc:91:02:5a:a8:d0:27:62:
9e:a7:ec:ee:11:80:68:d7:da:ce:f4:8e:fd:c6:3f:3f:0b:02:
01:ac:23:1b:07:93:2b:b4:15:81:20:be:f4:07:c7:99:5c:fd:
dc:19:5e:a7:82:9f:93:c3:cd:bb:32:58:28:82:b4:16:b2:67:
63:1f:a1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 16:55:18 2024 by rpki-client on console-ams.rpki-client.org