Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/WJwkRIe0Rn2eRrergTqmbyjbI_g.roa
File: WJwkRIe0Rn2eRrergTqmbyjbI_g.roa (raw, json)
Hash identifier: GdVsQtkPm8WtCyE/n8zgABrlev7TAubkCm8BAIqgM7A=
Subject key identifier: 58:9C:24:44:87:B4:46:7D:9E:46:B7:AB:81:3A:A6:6F:28:DB:23:F8
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 018CCA296787A143528A2916EAE148B75268
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/WJwkRIe0Rn2eRrergTqmbyjbI_g.roa
Signing time: Tue 02 Jan 2024 12:32:40 +0000
ROA not before: Tue 02 Jan 2024 12:32:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211522
IP address blocks: 2a0e:8f02:f023::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:67:87:a1:43:52:8a:29:16:ea:e1:48:b7:52:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 2 12:32:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=589c244487b4467d9e46b7ab813aa66f28db23f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ec:ce:cb:8f:7b:94:94:01:a6:31:6f:75:35:
17:e0:31:d2:ed:da:0b:27:17:54:31:5b:b4:30:2d:
33:7a:f8:25:c4:ae:18:01:52:2f:1b:c9:21:7a:6d:
f2:71:17:ed:fb:6c:be:c8:26:8d:70:b3:fa:45:23:
07:f0:b5:9d:76:0e:37:43:29:72:6a:fe:e3:77:53:
ff:33:8b:a5:39:cb:ac:6a:b9:1a:df:9b:71:12:23:
fd:f5:ad:db:79:7a:a8:f7:11:08:b9:3d:38:4f:7f:
31:09:f9:3a:41:d8:88:cb:c0:1f:92:23:9b:96:5e:
81:12:e8:2a:b5:da:37:65:b1:84:50:02:5f:f4:6f:
1b:80:d0:e6:e0:13:5a:5b:9b:f7:3c:5d:6e:1c:96:
42:00:76:1b:19:98:a1:47:a9:6e:8e:59:26:c9:47:
a1:f0:14:65:8f:04:96:52:d9:d2:1d:dd:95:69:26:
45:21:c8:3d:07:a0:33:f0:27:12:ee:2d:5a:8a:ea:
b3:1a:d8:26:b2:a0:1f:21:cc:e6:83:17:41:43:a3:
fc:d2:11:65:5c:ed:ef:4c:ff:70:77:ed:85:cf:ad:
1c:fe:e7:93:49:1a:87:cc:65:9f:51:c0:e8:f2:70:
3f:70:30:5b:b4:08:bc:34:d6:77:19:18:1b:02:36:
34:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9C:24:44:87:B4:46:7D:9E:46:B7:AB:81:3A:A6:6F:28:DB:23:F8
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/WJwkRIe0Rn2eRrergTqmbyjbI_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f023::/48
Signature Algorithm: sha256WithRSAEncryption
96:74:bb:d3:0c:49:ea:44:af:e2:41:d5:3a:87:75:00:f7:04:
b0:b4:a5:96:71:0e:88:17:1b:d0:f1:a4:79:a1:13:42:91:23:
ea:b5:d3:95:f2:d3:57:3b:37:f1:0a:7b:10:40:66:da:f0:10:
5b:7c:30:78:5d:1a:6b:3d:ec:09:3b:db:4c:58:29:64:df:d3:
0a:93:1d:61:98:72:6c:68:1c:5e:90:6a:f7:60:e9:d4:d6:8a:
29:77:aa:c6:ee:60:cf:da:c1:f7:b9:8f:50:b3:f2:fd:79:28:
d8:a1:ef:8c:77:13:0e:a7:bf:26:18:51:0f:bf:cc:74:e1:e6:
5b:ee:02:bd:25:33:a9:a4:8a:79:b0:33:d0:b5:0a:78:ab:3c:
ac:f5:0c:4f:77:7e:cf:70:c1:5a:d4:f3:4e:7e:b0:e4:c4:55:
29:38:72:98:5e:cb:99:4f:60:88:05:1c:4c:ab:ca:6b:79:e3:
31:5e:d1:cd:a5:f1:f9:6f:a7:f7:29:bf:f5:3b:df:1f:b7:5a:
17:d9:83:16:f8:05:fa:09:21:88:83:f1:23:d7:70:f5:fc:14:
04:b3:99:41:41:9a:af:e0:f2:03:c5:1b:35:f8:a1:6f:6f:b4:
09:fa:7d:7b:c4:c0:60:41:21:c8:e4:2c:1c:c4:c4:51:cf:90:
35:fb:c2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 12:50:21 2024 by rpki-client on console-fra.rpki-client.org