Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/5PgwtsB_2h6rwaabpBJljydqmZg.roa
File: 5PgwtsB_2h6rwaabpBJljydqmZg.roa (raw, json)
Hash identifier: ZVEjutINPfuh/v9XpMpnQrpeetDp2TuSYFXQMz99WGs=
Subject key identifier: E4:F8:30:B6:C0:7F:DA:1E:AB:C1:A6:9B:A4:12:65:8F:27:6A:99:98
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 018D0E1346AFA9D1DBD3146B59509CC8A545
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/5PgwtsB_2h6rwaabpBJljydqmZg.roa
Signing time: Mon 15 Jan 2024 17:02:40 +0000
ROA not before: Mon 15 Jan 2024 17:02:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51396
IP address blocks: 2a05:b0c6:a000::/39 maxlen: 39
2a05:b0c6:a200::/39 maxlen: 39
2a05:b0c7:6000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0e:13:46:af:a9:d1:db:d3:14:6b:59:50:9c:c8:a5:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Jan 15 17:02:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4f830b6c07fda1eabc1a69ba412658f276a9998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:00:a1:bd:b8:7d:1c:3f:31:0e:b3:b2:b7:29:
78:95:2f:dd:42:61:81:db:e6:b5:94:39:c5:fa:58:
ee:1f:5b:a9:ff:29:b5:b0:5a:a6:2e:27:8c:d4:08:
fa:71:ae:53:e3:93:f2:d7:d9:a2:34:42:05:a1:62:
bd:4a:7e:ab:b2:2b:f5:96:a7:b4:b6:44:2a:49:85:
9b:0d:a9:4b:3e:90:35:6b:4f:24:3c:74:b0:f2:33:
b5:89:76:29:11:2d:81:1e:8e:ad:00:92:71:d6:59:
16:5b:24:6f:2a:6b:b0:42:64:71:d7:af:ae:ce:4b:
6a:f5:52:de:67:25:af:62:1d:4f:18:b7:46:05:1d:
2d:04:64:ec:e0:4c:95:0e:b0:8e:78:19:cd:da:c7:
34:64:ed:c8:ac:c4:a6:af:73:d6:92:f9:d1:bd:e2:
56:bf:54:40:b3:84:fe:8e:c2:29:5f:90:4a:62:00:
89:a2:de:3d:9b:07:e1:71:ec:2d:15:10:23:99:fb:
09:51:36:f3:c0:6c:5c:80:1f:60:67:1a:8f:ff:4d:
6b:5d:b0:27:cf:4e:4e:84:8a:63:05:32:1c:02:7d:
dc:2e:0c:f7:83:8c:e4:97:d1:74:ed:2e:a3:5b:57:
e8:0a:76:a0:31:d5:6b:5e:6c:87:f6:d7:54:c9:14:
9d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F8:30:B6:C0:7F:DA:1E:AB:C1:A6:9B:A4:12:65:8F:27:6A:99:98
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/5PgwtsB_2h6rwaabpBJljydqmZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b0c6:a000::/38
2a05:b0c7:6000::/36
Signature Algorithm: sha256WithRSAEncryption
77:a3:bb:54:5e:14:f0:b4:c2:87:93:c5:5d:e5:8a:57:10:3b:
36:88:59:11:46:53:8d:a9:72:5d:03:7d:b2:c5:6d:53:6c:c4:
ae:ab:b1:44:dd:83:de:c5:c5:d6:9c:21:62:96:fa:b4:4e:43:
62:80:0f:20:c0:d3:e4:da:6d:41:ee:92:35:26:81:06:57:f4:
76:fa:02:a0:44:68:64:1d:84:b0:77:80:8d:87:8b:51:fb:2d:
3c:81:45:3c:d8:2c:dd:92:54:07:43:70:f5:dc:f5:85:7e:ff:
3a:ac:84:ac:39:74:2b:97:2a:f9:65:e0:3a:4b:22:49:26:03:
46:24:d3:bf:9f:c2:41:dc:4c:3c:9a:67:d4:92:2b:4b:c4:5b:
58:00:63:c8:be:4b:1b:b2:3c:f0:94:d4:1c:e7:97:95:ed:75:
53:61:66:eb:7c:3c:bc:a8:d6:23:77:c9:d5:0e:c4:96:0a:e6:
d2:4b:24:82:a5:87:5a:0a:8a:41:f4:ff:d0:e3:20:57:9d:1b:
71:7d:58:24:e4:16:46:d8:91:a3:3f:82:0e:6f:c0:6b:20:70:
49:af:9b:78:7f:b3:9e:c2:31:18:59:c9:dc:98:e8:c6:da:27:
50:e4:e0:b3:03:11:bb:64:da:c0:7e:00:00:ff:6e:9e:f2:f2:
2d:f2:fb:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:40:24 2024 by rpki-client on console-ams.rpki-client.org