Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/aZPKbwceTaUpZ8xWC5dZiSH7iLI.roa
File: aZPKbwceTaUpZ8xWC5dZiSH7iLI.roa (raw, json)
Hash identifier: 3F0bBzcsI0zMyqSpvZybnYFR/4crvFH7JbzH+wSWzfs=
Subject key identifier: 69:93:CA:6F:07:1E:4D:A5:29:67:CC:56:0B:97:59:89:21:FB:88:B2
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 018CCA296D7CF62994C13BA1EB716C1ECD6D
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/aZPKbwceTaUpZ8xWC5dZiSH7iLI.roa
Signing time: Tue 02 Jan 2024 12:32:41 +0000
ROA not before: Tue 02 Jan 2024 12:32:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212243
IP address blocks: 2a0e:8f02:f015::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:6d:7c:f6:29:94:c1:3b:a1:eb:71:6c:1e:cd:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 2 12:32:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6993ca6f071e4da52967cc560b97598921fb88b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d2:d3:79:17:27:25:cc:b0:0b:82:12:ad:5f:
4b:db:3d:45:e5:a9:b1:95:56:42:c2:2e:3e:44:5d:
86:d3:02:78:1c:8c:0b:6e:65:7b:0e:80:99:78:83:
9d:84:ad:6b:09:81:76:ae:c5:08:1e:fa:91:2c:de:
cb:84:bf:c1:1c:ae:3b:23:33:00:4a:6f:0e:d3:60:
f8:50:b0:83:44:84:06:72:f7:cc:1e:72:de:bf:80:
b6:1d:8d:34:b1:71:39:ea:e3:0e:55:56:bd:3f:9a:
95:29:72:d6:c3:dc:e5:9a:8a:d5:b2:64:b9:30:64:
07:38:5e:68:66:9a:64:0c:f9:2d:e8:1b:e5:0e:31:
8c:8b:be:5c:19:d2:64:3e:ce:60:ba:cf:98:b5:8c:
6c:cc:bf:d9:42:ce:c5:b0:cb:bf:fa:3f:ad:06:34:
be:44:53:5b:e6:84:78:25:05:dd:42:ef:9b:98:eb:
46:28:b9:fa:7b:67:67:2c:d3:7f:8c:ca:32:d1:90:
7d:a7:b9:96:6d:b3:75:3a:a0:dc:4b:98:c6:56:04:
eb:14:de:b0:8a:93:ca:64:92:ae:d4:0b:c3:36:13:
65:d8:08:06:6c:f5:da:26:8c:10:f8:d8:f3:0b:1e:
5d:34:89:c1:1a:1c:fc:0c:97:7d:e6:b1:e5:35:16:
f2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:93:CA:6F:07:1E:4D:A5:29:67:CC:56:0B:97:59:89:21:FB:88:B2
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/aZPKbwceTaUpZ8xWC5dZiSH7iLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f015::/48
Signature Algorithm: sha256WithRSAEncryption
a6:57:63:59:65:37:8d:42:ed:7c:88:17:79:f3:cf:e9:7c:f3:
24:8b:03:96:c5:10:9e:ae:01:62:b7:2b:11:23:b9:8b:f0:1e:
3b:ec:89:81:a4:1e:51:51:64:04:36:54:e2:9d:f9:a6:bd:07:
da:62:59:00:9f:20:f8:5e:d4:ec:53:84:af:35:68:d0:11:05:
4d:2d:44:cf:61:24:a6:41:fb:c7:d6:69:2a:8f:57:7a:63:25:
58:fc:44:cf:4c:9f:d9:ba:2e:71:db:7f:71:a5:36:d5:a8:50:
c3:02:4e:2f:9b:70:e2:33:49:da:69:e2:f5:cd:8f:30:67:d3:
82:cc:08:d4:69:d6:a2:6e:78:c9:23:2b:0a:6d:c9:b0:1f:75:
2a:38:52:ba:32:a5:eb:50:d1:2a:8f:46:62:3d:f6:56:a4:de:
6f:22:05:a1:bc:f9:89:27:f3:d9:9d:de:92:49:2b:19:a5:7f:
54:9d:3f:50:f4:4f:8d:02:36:47:fc:1e:99:57:4c:19:b0:24:
44:bf:61:51:6a:f8:95:ce:74:c3:cb:e9:2a:eb:d6:86:89:20:
4b:68:5e:80:19:4f:0f:c1:e5:e5:46:50:f6:e0:48:af:e5:3e:
46:74:12:ba:7d:e7:49:ae:70:25:f8:17:6a:2c:b7:03:0a:3c:
48:0f:c6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 22:31:55 2024 by rpki-client on console-fra.rpki-client.org