Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/xfWeEB8zWYpVc6Qp2G4J8L82oPA.roa
File: xfWeEB8zWYpVc6Qp2G4J8L82oPA.roa (raw, json)
Hash identifier: COk0Lk/D4q/DWhH4YU66KwsNawjveA7GMicfyjswn0I=
Subject key identifier: C5:F5:9E:10:1F:33:59:8A:55:73:A4:29:D8:6E:09:F0:BF:36:A0:F0
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 018D0E1347518DF1033508BC48DA60CD0BB3
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/xfWeEB8zWYpVc6Qp2G4J8L82oPA.roa
Signing time: Mon 15 Jan 2024 17:02:40 +0000
ROA not before: Mon 15 Jan 2024 17:02:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207252
IP address blocks: 2a05:b0c6:3001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0e:13:47:51:8d:f1:03:35:08:bc:48:da:60:cd:0b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Jan 15 17:02:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5f59e101f33598a5573a429d86e09f0bf36a0f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6e:81:29:84:f1:43:60:eb:f6:ac:73:32:7a:
65:49:b0:21:d4:aa:dd:c5:0c:bc:32:4e:fa:87:9b:
19:a1:ae:04:2b:83:34:44:b3:7d:48:2e:8f:62:60:
9a:c3:63:ec:94:45:1a:90:dd:1e:c7:b8:29:96:12:
93:97:b6:81:8b:c8:7b:e0:34:0a:45:90:4e:38:d6:
86:3a:29:cb:86:44:69:2b:9e:60:47:88:3e:6b:74:
2c:fd:1c:f3:fb:84:c8:a9:27:00:e8:2e:f9:98:31:
a0:75:73:e4:57:f0:cd:fc:bf:74:53:90:ec:a3:1a:
b8:cb:f3:59:d5:2e:e3:17:2a:0d:9a:0f:2d:96:d6:
65:97:da:a0:64:2d:03:4e:8e:ed:1a:20:4b:f4:f4:
d3:04:9b:71:76:e7:d2:18:b7:53:d3:e0:d2:6c:be:
e4:e7:70:8a:8a:1b:d8:fa:7a:2d:37:58:f0:84:94:
31:bb:c9:d3:23:d0:51:dd:3b:a1:9d:bb:8c:a8:9c:
1d:4b:d8:d8:2e:37:48:f4:47:f8:b3:86:75:62:8c:
0c:a7:75:d7:48:e8:d5:89:8d:e0:7f:9b:3a:9a:da:
76:e7:7f:7d:2d:8e:84:8c:b9:bd:bb:4f:7e:1b:87:
29:50:f8:62:d2:5a:b8:e1:b4:85:46:90:ba:11:a2:
9e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F5:9E:10:1F:33:59:8A:55:73:A4:29:D8:6E:09:F0:BF:36:A0:F0
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/xfWeEB8zWYpVc6Qp2G4J8L82oPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b0c6:3001::/48
Signature Algorithm: sha256WithRSAEncryption
94:87:77:20:4a:b2:48:f6:23:05:1d:40:3b:82:e9:e6:92:66:
3c:fc:af:d1:03:18:21:9c:55:1e:83:2f:60:76:2c:dd:c6:ea:
8f:e2:17:16:4b:57:3e:95:91:74:11:e6:32:39:2a:bb:7a:ae:
80:bb:f0:40:c8:f7:65:ae:cb:f8:45:22:65:42:ad:f5:76:e8:
33:c7:49:03:f3:91:bf:30:e0:a6:22:94:44:ef:1a:ff:d8:32:
f0:12:ba:00:74:7d:09:6c:cc:d9:02:dd:cb:05:29:bc:43:d3:
63:70:fd:6f:4e:3a:e1:0e:bb:2e:db:81:0b:97:63:74:e4:fb:
94:34:bb:f3:72:61:80:8e:2f:4a:3a:61:23:06:89:98:a2:e3:
f8:67:29:db:80:3d:91:37:39:64:3b:9a:57:10:8d:1b:12:ec:
75:99:09:28:c8:d8:a1:d4:e0:e6:0b:3d:23:32:c3:3b:d7:19:
69:4a:53:fc:02:a1:52:3e:a9:e4:f9:3b:b0:71:75:6c:28:42:
5f:17:e5:e5:79:00:52:ac:13:ce:1d:73:0e:cc:1e:93:31:15:
45:1c:4b:2b:e9:cf:8c:b8:64:a1:63:a1:a9:44:6a:53:76:63:
b3:34:80:89:69:d8:5f:a9:f2:1a:61:97:f1:cf:75:64:9c:a2:
47:08:19:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:43:47 2024 by rpki-client on console-ams.rpki-client.org