Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/blXi-TL8gICqiz50Sw8SB1eYv70.roa
File: blXi-TL8gICqiz50Sw8SB1eYv70.roa (raw, json)
Hash identifier: eCXYLYJf+kJKOL+luJf2L4PJ4fypAZaHH3yYSsPUtZ4=
Subject key identifier: 6E:55:E2:F9:32:FC:80:80:AA:8B:3E:74:4B:0F:12:07:57:98:BF:BD
Certificate issuer: /CN=55b296d6b534fe3a32cc1c3a4e81358f216c93c7
Certificate serial: 018CC49321B0F6CF8B544845CAF00D767A59
Authority key identifier: 55:B2:96:D6:B5:34:FE:3A:32:CC:1C:3A:4E:81:35:8F:21:6C:93:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbKW1rU0_joyzBw6ToE1jyFsk8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/blXi-TL8gICqiz50Sw8SB1eYv70.roa
Signing time: Mon 01 Jan 2024 10:30:25 +0000
ROA not before: Mon 01 Jan 2024 10:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2a02:56a::/32 maxlen: 32
2a02:56d::/32 maxlen: 32
2a02:569::/32 maxlen: 32
2a02:56e::/32 maxlen: 32
2a02:56c::/32 maxlen: 32
2a02:56b::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/VbKW1rU0_joyzBw6ToE1jyFsk8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/VbKW1rU0_joyzBw6ToE1jyFsk8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbKW1rU0_joyzBw6ToE1jyFsk8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Apr 2024 07:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:21:b0:f6:cf:8b:54:48:45:ca:f0:0d:76:7a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55b296d6b534fe3a32cc1c3a4e81358f216c93c7
Validity
Not Before: Jan 1 10:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e55e2f932fc8080aa8b3e744b0f12075798bfbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e3:fe:3d:f8:5f:0f:26:86:40:55:cf:f1:de:
79:9b:7e:9d:7d:8a:2f:b0:92:3e:29:3d:9b:f0:24:
3f:26:00:ed:87:3a:49:b1:c8:ae:ce:03:73:31:8a:
2d:85:15:5a:45:dc:97:4f:59:4c:04:34:ed:0e:fe:
22:6a:4b:5e:be:84:e5:50:fc:93:c4:b9:9a:2e:5d:
76:d4:0f:38:4b:d7:ec:85:33:a9:2d:81:26:72:1b:
0c:e3:81:91:dc:39:6d:70:46:30:d5:0d:c3:55:8f:
a2:cc:6b:6c:38:97:ce:4b:51:90:12:d7:ff:75:16:
e6:20:3d:4a:0b:8e:64:3c:b0:3d:12:e1:8a:0d:a6:
e5:37:65:1c:30:92:7d:13:6f:83:cc:dc:0d:5a:a3:
d4:5b:e5:33:f7:ad:71:b6:ae:97:e7:a0:73:b6:fb:
e4:6f:34:04:a0:52:32:12:4f:13:6d:d3:60:74:f4:
df:72:d6:b1:be:46:69:f1:75:46:a7:af:96:27:4a:
b5:1c:96:fa:fc:1f:1a:1e:c0:21:ec:16:d6:f2:25:
3b:f9:b7:21:fe:ae:05:48:e0:8c:2e:9e:48:e0:84:
5b:d8:4d:5a:e6:5d:55:51:5d:2a:a8:07:1a:65:9b:
95:41:15:c4:ab:5f:fe:5d:c0:82:85:9a:42:74:94:
ae:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:55:E2:F9:32:FC:80:80:AA:8B:3E:74:4B:0F:12:07:57:98:BF:BD
X509v3 Authority Key Identifier:
keyid:55:B2:96:D6:B5:34:FE:3A:32:CC:1C:3A:4E:81:35:8F:21:6C:93:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbKW1rU0_joyzBw6ToE1jyFsk8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/blXi-TL8gICqiz50Sw8SB1eYv70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/VbKW1rU0_joyzBw6ToE1jyFsk8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:569::-2a02:56e:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2e:b7:e3:9f:08:6f:99:08:15:b0:ac:18:6d:64:6c:75:b6:b5:
97:38:76:27:c0:d8:0a:fd:9f:bd:a0:d6:fa:a0:56:f2:1d:d6:
63:39:bf:de:85:6b:69:ae:4f:4c:cd:19:1b:98:cc:c3:a9:3b:
4b:f5:b0:07:fe:48:c3:65:32:11:3f:73:29:18:fc:c6:4f:c9:
36:89:27:76:97:70:70:09:e0:e9:66:a2:60:ac:6b:90:fa:bc:
ad:46:a8:ee:74:da:c3:23:96:98:3a:55:cb:26:16:e3:2e:fe:
b7:06:86:a6:c5:7b:df:9c:3e:79:2c:0f:9f:b6:99:c0:45:da:
ba:c0:ad:de:4d:ff:c9:e7:9c:76:63:09:cb:a6:9d:cf:b1:74:
28:57:65:45:d7:18:63:af:0f:2e:3e:e0:fb:0f:7a:86:c2:80:
f7:4d:82:40:1d:a7:27:c7:86:7d:ca:71:0f:bb:92:6c:fa:5e:
c1:61:ba:d0:59:85:a9:a8:d5:87:c9:f8:52:78:32:0e:cf:6f:
28:59:e3:9b:59:da:e5:5e:89:90:d4:f5:e0:b4:d9:25:8a:99:
f1:d4:0f:19:6b:74:dc:28:59:45:8c:05:11:4e:b0:a2:60:22:
a2:19:01:08:88:92:35:7c:55:a1:3d:3a:87:3b:e2:49:f3:e2:
60:ea:8c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:29:23 2024 by rpki-client on console-ams.rpki-client.org