Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/mV9UfpWqjQXmlvAMCS_birhU2x8.roa
File: mV9UfpWqjQXmlvAMCS_birhU2x8.roa (raw, json)
Hash identifier: csWsPyBLgXN5xEZdixXj83jgM2QzqeVL4LMoqygAgsA=
Subject key identifier: 99:5F:54:7E:95:AA:8D:05:E6:96:F0:0C:09:2F:DB:8A:B8:54:DB:1F
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 018CCA296C2C78F91E4F0574235FB71F8712
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/mV9UfpWqjQXmlvAMCS_birhU2x8.roa
Signing time: Tue 02 Jan 2024 12:32:41 +0000
ROA not before: Tue 02 Jan 2024 12:32:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212112
IP address blocks: 2a0e:8f02:f017::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:6c:2c:78:f9:1e:4f:05:74:23:5f:b7:1f:87:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 2 12:32:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=995f547e95aa8d05e696f00c092fdb8ab854db1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fe:36:18:58:3a:92:93:ba:8f:50:3f:a4:42:
5f:b6:1e:66:02:71:e1:fe:40:de:18:61:aa:52:94:
f3:6d:3e:f8:7f:89:52:04:b3:6f:f6:40:d5:40:15:
98:91:7d:2c:47:a5:50:97:1d:cb:8b:35:41:ee:13:
a1:f3:e6:41:24:aa:b8:14:b8:af:8e:ad:18:df:ab:
8f:42:82:48:d3:9f:0b:d9:c2:d4:58:64:06:15:d7:
d0:f4:aa:b2:cb:f0:02:0a:8a:10:fc:7f:e8:75:02:
a7:bd:b5:29:bc:3f:b3:bd:39:52:64:78:49:a3:40:
4d:1e:4d:bb:82:25:1c:5b:68:0e:44:3b:fb:60:39:
6c:2b:e1:9f:61:ae:95:e7:29:97:9f:0a:12:df:97:
ad:13:5f:b5:52:e0:a2:9c:e2:9b:43:82:5f:d1:20:
94:94:4f:76:4f:5d:b3:9e:ea:0b:8a:ee:94:b1:9f:
d0:b1:b1:25:0b:8c:c5:ab:39:c8:79:43:0a:4e:bc:
df:6c:2d:a4:93:be:5f:fb:46:6a:55:9c:76:98:9c:
e0:b2:8f:4b:30:e6:23:8e:a3:7b:4c:82:7a:da:c4:
59:55:77:49:5d:f9:88:62:ed:b3:2f:a8:fd:9e:92:
72:b0:87:ee:ea:0e:03:3e:d3:ea:8f:30:c7:e2:75:
10:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5F:54:7E:95:AA:8D:05:E6:96:F0:0C:09:2F:DB:8A:B8:54:DB:1F
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/mV9UfpWqjQXmlvAMCS_birhU2x8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f017::/48
Signature Algorithm: sha256WithRSAEncryption
6e:ca:d3:b1:e4:10:1b:4a:f0:fd:e3:e8:dd:13:68:cf:a0:85:
bf:17:da:4d:5e:03:af:e2:3b:ac:91:41:ab:70:06:24:44:31:
d4:59:a3:13:dd:94:d2:e4:71:7e:a0:4f:3f:e1:d8:b5:e3:91:
ae:4a:5a:c3:dc:a8:40:bd:fd:52:58:7c:4b:5e:41:c3:40:c8:
86:a9:01:7d:16:8f:47:95:5f:6e:90:29:47:2a:50:e0:dc:6d:
e6:99:56:e2:50:e7:3a:a7:c0:5b:16:32:aa:29:be:2a:6c:65:
ff:a9:7c:34:72:fd:6e:a2:1d:03:9f:99:0d:25:e7:7c:68:2e:
81:5a:e8:d5:5a:2c:ae:2f:9e:15:7a:ec:5b:e0:e2:eb:1a:67:
92:83:4d:40:a5:32:9c:d2:4c:98:ce:0c:87:24:8c:f3:5c:e9:
e8:0e:10:28:d4:ef:64:67:87:9b:d1:eb:64:38:51:26:8c:ed:
f6:42:d7:56:c2:25:6c:28:06:b8:ea:f5:12:e4:0d:c7:2e:fc:
a0:01:0d:a4:f1:c9:cb:93:85:f3:ef:76:1e:46:89:47:0c:c0:
c2:6b:c1:d9:b7:a2:a7:48:1e:59:f6:05:32:7e:9a:f1:66:ca:
f7:2a:1b:fe:43:3d:39:92:04:b7:41:3b:75:d6:ad:19:1e:4c:
88:9c:cf:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 22:31:55 2024 by rpki-client on console-fra.rpki-client.org