Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/vbboNFpS-Obkyx99W9ULiV2RFgU.roa
File: vbboNFpS-Obkyx99W9ULiV2RFgU.roa (raw, json)
Hash identifier: wDPDJr/u9RTc2Lf4069SomNEjnjW/a0MGVuDcv9Z3G8=
Subject key identifier: BD:B6:E8:34:5A:52:F8:E6:E4:CB:1F:7D:5B:D5:0B:89:5D:91:16:05
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 018CCA29623701F7EF3B68C98389BAFDBF0B
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/vbboNFpS-Obkyx99W9ULiV2RFgU.roa
Signing time: Tue 02 Jan 2024 12:32:38 +0000
ROA not before: Tue 02 Jan 2024 12:32:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210707
IP address blocks: 2a0e:8f02:f03a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:62:37:01:f7:ef:3b:68:c9:83:89:ba:fd:bf:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 2 12:32:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bdb6e8345a52f8e6e4cb1f7d5bd50b895d911605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2e:24:4e:de:53:a5:17:79:54:4c:1d:b3:a1:
eb:52:08:3a:24:f4:e7:b1:1f:83:9b:fc:30:8d:a7:
03:4b:e5:eb:1f:bc:e8:89:44:08:e2:af:3d:52:40:
dd:27:59:e6:08:5f:90:ad:16:d5:bf:5c:d9:b2:14:
ac:f3:b7:f6:15:e1:c0:f1:4f:b2:74:98:b2:46:f6:
be:4c:bf:1a:6b:3a:da:02:f4:92:9e:d1:39:47:a0:
b3:06:61:39:51:72:c4:24:b7:9a:db:82:dd:60:e7:
ea:5d:3e:52:0f:12:a0:45:32:cc:73:0e:c9:33:56:
e3:d2:01:ee:e8:3b:6b:bc:94:0f:e0:50:45:61:86:
89:5c:6b:2f:70:47:0a:0b:3c:51:44:16:eb:a9:d0:
da:1b:15:8f:40:f0:84:f8:25:29:d7:83:fe:0e:8c:
31:4d:a1:88:7f:26:76:ac:da:22:20:f9:ad:e8:78:
17:bc:1f:7b:79:2b:b4:ea:a5:18:44:d6:80:13:be:
0f:45:e9:13:34:1e:7f:65:f7:b1:22:0b:b4:aa:6a:
66:21:21:85:18:a8:06:4e:5f:31:41:69:46:9c:a0:
9c:35:b0:e6:42:5d:51:00:e6:16:1f:15:6b:56:1c:
2b:3b:89:34:a9:2e:02:39:ab:ff:5a:12:18:7a:e9:
9e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B6:E8:34:5A:52:F8:E6:E4:CB:1F:7D:5B:D5:0B:89:5D:91:16:05
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/vbboNFpS-Obkyx99W9ULiV2RFgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f03a::/48
Signature Algorithm: sha256WithRSAEncryption
9b:b5:c6:60:f4:5c:5a:dc:ff:af:ad:d4:06:fa:84:78:16:35:
ac:38:5c:5b:14:9e:79:19:dd:ad:d2:7b:88:8d:27:37:52:75:
98:eb:41:60:ed:8f:e7:23:97:bf:25:44:50:ab:2f:8c:e8:3c:
9b:f7:c5:41:ec:c8:04:60:d6:16:d8:51:a2:99:36:76:da:1b:
9d:4c:22:49:1d:93:db:7f:dc:73:4c:82:fd:a4:f1:b3:01:9e:
97:75:f1:55:2d:b3:af:d4:19:03:36:0d:9a:99:c5:42:2b:5e:
75:75:e5:1c:f8:91:bc:a7:98:07:7b:43:54:73:c9:0c:66:29:
27:76:10:35:fc:e0:7b:d2:57:5e:f8:b6:90:22:ce:c7:10:fc:
44:8b:1d:78:7f:34:8a:ca:2c:b2:e1:f7:ba:76:80:ac:54:34:
57:ba:c2:2c:4c:37:0d:0a:b6:95:1f:a9:cf:93:83:b4:ec:3b:
67:da:47:5d:c3:f1:f5:0c:f6:eb:d9:5a:11:ba:32:06:bd:63:
b5:0a:a3:32:1b:e0:66:90:8d:e1:76:bd:ad:7f:ec:79:0e:00:
71:f7:7b:18:76:05:58:35:c2:dd:af:90:49:b6:cd:d8:d3:2f:
72:1f:77:41:1f:fb:55:bb:2d:b5:c3:e7:aa:fb:c2:dd:e2:f3:
dd:d4:7f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 19:01:56 2024 by rpki-client on console-fra.rpki-client.org