Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/u_GkTVMjpM9IWmvK2G4ajtpVi1M.roa
File: u_GkTVMjpM9IWmvK2G4ajtpVi1M.roa (raw, json)
Hash identifier: DEozJloZDIWjTjcarj4kcqR9O6q0jCgSIFBzitRiSPY=
Subject key identifier: BB:F1:A4:4D:53:23:A4:CF:48:5A:6B:CA:D8:6E:1A:8E:DA:55:8B:53
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 018CCA29661CC9C45F9C171F2497CB011F83
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/u_GkTVMjpM9IWmvK2G4ajtpVi1M.roa
Signing time: Tue 02 Jan 2024 12:32:39 +0000
ROA not before: Tue 02 Jan 2024 12:32:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211498
IP address blocks: 2a0e:8f02:f021::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 13:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:66:1c:c9:c4:5f:9c:17:1f:24:97:cb:01:1f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 2 12:32:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bbf1a44d5323a4cf485a6bcad86e1a8eda558b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:77:a7:f4:18:c6:23:bf:34:99:87:47:a9:14:
c4:25:bb:0f:84:1a:ba:cd:1e:e1:e8:a6:7d:87:3c:
b0:b4:f0:16:9a:54:af:ed:43:15:f8:c9:d5:ba:31:
02:7c:f9:45:b4:62:c4:ca:af:a9:43:0c:96:57:f8:
76:e1:3a:e9:6d:52:da:01:3e:2a:45:95:8c:8f:61:
fb:d2:64:0d:da:a0:21:80:1e:ca:4a:3f:e0:db:54:
18:a7:75:fb:de:59:19:11:fe:83:6a:d8:31:fa:aa:
ef:17:54:52:8d:08:39:4c:00:83:cf:5f:75:64:4a:
7a:9c:54:6d:ef:57:45:95:e8:e1:9c:32:13:35:5b:
ca:f9:97:c7:4d:73:22:a9:48:82:98:d6:2b:cc:2f:
b6:cf:61:09:7c:6f:1f:78:75:cc:cd:ab:da:b5:12:
0b:8f:5c:ba:4c:66:3e:63:57:08:84:76:0f:65:70:
0a:f4:2b:e5:40:c1:c8:fe:18:99:ae:d2:87:67:34:
a0:82:14:dd:d0:f5:b1:21:ce:bd:07:42:3f:bd:0c:
fc:b6:9c:1a:f9:44:fa:f7:d6:68:11:44:1a:9a:4c:
41:ec:19:bf:70:d5:8d:2a:22:56:f1:c4:c9:fb:a7:
88:c6:f2:3a:b9:15:01:2f:aa:39:75:60:47:9e:c8:
55:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F1:A4:4D:53:23:A4:CF:48:5A:6B:CA:D8:6E:1A:8E:DA:55:8B:53
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/u_GkTVMjpM9IWmvK2G4ajtpVi1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f021::/48
Signature Algorithm: sha256WithRSAEncryption
90:49:c3:e0:6b:b3:6a:27:fc:93:d0:89:2d:81:66:52:ff:b3:
26:53:b6:a6:f4:f9:3b:d0:39:06:21:92:a0:94:ed:9d:08:6c:
6b:d2:2e:6f:32:a8:ec:cb:05:32:fb:17:34:78:73:49:52:8b:
b5:f7:ee:1b:7a:bf:bd:43:c5:a7:d4:e6:80:38:b7:43:19:9a:
14:54:51:f4:91:8f:80:04:8c:8c:83:72:fa:32:e7:24:0d:c7:
2d:7d:03:4b:c0:da:76:3b:a8:be:54:b3:99:f1:c9:1b:13:e8:
bc:82:7c:12:02:b7:f1:73:59:74:ba:14:37:eb:1b:ac:2b:13:
2a:38:3d:5a:6b:30:3d:8f:fe:63:a0:45:5a:cd:a8:b8:89:37:
03:62:e6:05:89:c3:8b:6c:95:69:67:9b:d0:bf:b0:fa:c6:e3:
6d:2e:c8:64:0a:06:6b:d7:9c:b1:1d:78:00:10:a4:5b:d6:22:
3e:fe:79:80:73:d0:c5:32:86:23:7f:db:5a:7c:04:f5:83:c9:
a8:a4:15:b9:12:8b:1e:e1:3a:55:a8:1d:ed:5c:d6:dd:d6:fc:
e5:9e:69:ac:3f:1c:40:3c:6a:d2:b8:48:bc:9a:09:3a:2d:86:
65:6c:03:f1:4c:70:cf:5f:bb:57:e0:d7:6a:2d:83:75:b0:02:
5f:4e:31:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:20:43 2024 by rpki-client on console-fra.rpki-client.org