Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/_sZNwehDkSl4NjIHkKUcQ6QknOk.roa
File: _sZNwehDkSl4NjIHkKUcQ6QknOk.roa (raw, json)
Hash identifier: NPYL5drGqvh1W4MjFb5Uq7ZBEkzZmzP9LrV0UAWiERY=
Subject key identifier: FE:C6:4D:C1:E8:43:91:29:78:36:32:07:90:A5:1C:43:A4:24:9C:E9
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 018CC5DC0B489A1D6DC7AF70799B79BCB551
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/_sZNwehDkSl4NjIHkKUcQ6QknOk.roa
Signing time: Mon 01 Jan 2024 16:29:41 +0000
ROA not before: Mon 01 Jan 2024 16:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202685
IP address blocks: 2a05:b0c6:be00::/39 maxlen: 39
2a05:b0c6:a200::/39 maxlen: 39
2a05:b0c6:a000::/39 maxlen: 39
2a05:b0c6:a00::/39 maxlen: 39
2a05:b0c6:4000::/36 maxlen: 36
2a05:b0c6:3000::/36 maxlen: 36
2a05:b0c6:5800::/37 maxlen: 37
2a05:b0c6:1800::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 01:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:0b:48:9a:1d:6d:c7:af:70:79:9b:79:bc:b5:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Jan 1 16:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fec64dc1e84391297836320790a51c43a4249ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:20:06:60:07:8e:07:20:66:5a:74:5d:10:80:
31:eb:53:01:17:f6:8b:a8:5d:68:01:f3:a5:bb:e6:
4f:ba:96:c9:12:89:19:12:6d:24:8d:71:02:37:d6:
ff:d5:07:87:c9:62:c7:ef:58:19:c4:3a:94:b0:ed:
a6:f5:65:06:17:61:6c:80:fc:23:fc:ce:1f:a7:dc:
94:00:ef:b0:d9:29:b6:2f:61:a8:d9:28:9c:4b:d7:
bc:a0:b5:fc:bf:af:d9:c0:41:be:1c:40:28:b7:c4:
9a:2e:3a:a2:30:7f:81:a3:4a:c2:3f:5b:28:2b:a1:
59:59:f5:fa:eb:38:9f:a6:e7:68:9b:a9:37:5e:64:
f7:f8:49:97:2f:18:d0:62:7a:cd:e6:cc:84:8f:e1:
38:b8:2c:af:0c:83:78:95:04:69:27:74:68:80:11:
c6:98:b4:26:27:c1:e0:b6:12:7f:7f:2b:c7:a7:de:
10:7a:a1:21:21:2f:b4:e9:2b:83:12:d5:8d:6f:7a:
49:28:ee:9a:4d:71:18:b6:d9:54:5a:ab:be:81:3c:
a4:60:7b:26:4e:28:21:a1:e6:d6:64:a8:90:c2:22:
c7:81:2f:8a:49:e0:82:b8:60:16:87:38:fd:63:e7:
2d:4c:4a:d1:ad:91:3a:8c:9b:5a:80:39:ff:64:a0:
78:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C6:4D:C1:E8:43:91:29:78:36:32:07:90:A5:1C:43:A4:24:9C:E9
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/_sZNwehDkSl4NjIHkKUcQ6QknOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b0c6:a00::/39
2a05:b0c6:1800::/37
2a05:b0c6:3000::-2a05:b0c6:4fff:ffff:ffff:ffff:ffff:ffff
2a05:b0c6:5800::/37
2a05:b0c6:a000::/38
2a05:b0c6:be00::/39
Signature Algorithm: sha256WithRSAEncryption
49:e9:6e:36:ab:1d:70:4d:60:d5:df:74:77:a6:41:1b:83:42:
c3:fb:54:1a:73:bd:7d:48:88:3e:aa:0a:f4:cb:c6:b7:ea:8f:
3d:36:33:40:1b:98:1a:38:cb:9b:72:5d:21:47:83:d4:52:4f:
fb:e4:3f:90:48:ff:16:93:df:53:c5:bd:71:1c:09:5c:10:02:
68:6e:09:0d:3b:45:76:51:08:f6:61:f7:af:91:74:ba:19:4e:
c9:0a:98:3f:91:7a:c7:da:a1:6e:db:fa:fb:7a:c4:d5:eb:bb:
18:91:1c:6e:0a:64:25:30:c6:fb:2c:d3:af:98:de:0b:bf:a2:
d7:51:a6:69:00:d1:e7:72:b0:49:81:c3:b3:83:9d:89:42:03:
35:5c:29:8e:ba:7c:27:3f:d9:ce:f0:c5:fa:11:63:f6:cc:1e:
91:02:68:3a:24:03:08:ed:cf:4d:1e:7e:2f:e2:99:d6:24:c3:
66:86:15:c7:31:b5:d5:37:8e:3b:8d:0c:a8:fc:4b:1e:c3:99:
17:eb:da:2e:9b:4a:db:d9:f6:6e:de:ae:f2:1f:33:d8:49:ef:
36:b7:17:12:ce:67:85:80:94:b2:01:e0:6f:78:73:37:a7:44:
9b:59:6b:c7:e1:99:01:f9:d4:a2:f9:19:52:32:ac:79:8f:33:
91:9b:87:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 05:50:49 2024 by rpki-client on console-ams.rpki-client.org