Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/xkBvVpBL79ARzAQPgwSqNkwepmA.roa
File: xkBvVpBL79ARzAQPgwSqNkwepmA.roa (raw, json)
Hash identifier: 5ANUZbWaKs0Yx6hC1XAaCqhxd15n9VY9h9NmdIwrHLw=
Subject key identifier: C6:40:6F:56:90:4B:EF:D0:11:CC:04:0F:83:04:AA:36:4C:1E:A6:60
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 018CC5DC09BBD06F01C5FEAF1BDBD40EA1F1
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/xkBvVpBL79ARzAQPgwSqNkwepmA.roa
Signing time: Mon 01 Jan 2024 16:29:41 +0000
ROA not before: Mon 01 Jan 2024 16:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49581
IP address blocks: 2a05:b0c7:1200::/39 maxlen: 39
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:09:bb:d0:6f:01:c5:fe:af:1b:db:d4:0e:a1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Jan 1 16:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6406f56904befd011cc040f8304aa364c1ea660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9f:5c:bb:d8:62:6e:13:80:8d:b8:20:8e:94:
3a:e6:ba:91:d9:12:22:a5:66:cf:72:69:25:ee:02:
2f:ce:21:5b:63:8f:92:95:6a:ba:e0:80:3e:08:9f:
46:de:5f:20:96:25:36:e1:ce:f4:e6:6b:1e:52:b5:
04:ce:65:8e:86:79:96:67:6f:ff:9e:e6:08:a8:ee:
a7:18:20:6d:7b:cf:60:b4:e8:ad:f8:81:95:95:8b:
68:88:14:be:b0:71:63:95:b2:30:ca:92:32:3b:f7:
e7:93:cd:c7:72:dc:d2:b5:72:96:02:15:72:73:9d:
ca:7a:6f:c5:a4:4f:8f:ba:cd:5e:c8:25:52:b0:7a:
fe:da:6e:de:00:a5:15:3f:77:38:9b:0d:68:ce:35:
83:0a:04:f3:24:be:33:aa:73:05:db:26:59:00:b3:
12:4b:be:63:5b:5a:a9:f5:bb:b6:51:50:28:08:8f:
95:56:1a:95:da:90:f5:8e:e1:d7:36:f5:b3:86:20:
72:71:1f:6e:74:76:8c:1f:48:5d:d6:1e:34:fa:92:
82:03:14:42:fd:50:ec:41:25:2e:1e:4e:cf:69:1b:
ec:ca:2e:72:ab:82:17:e5:02:ed:8c:30:07:8c:69:
c7:37:58:95:c0:3e:6b:44:da:93:38:27:fe:ef:f6:
7c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:40:6F:56:90:4B:EF:D0:11:CC:04:0F:83:04:AA:36:4C:1E:A6:60
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/xkBvVpBL79ARzAQPgwSqNkwepmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b0c7:1200::/39
Signature Algorithm: sha256WithRSAEncryption
93:15:83:ec:c6:11:32:5b:40:f6:15:f5:9a:56:97:94:1e:da:
30:42:7e:00:f2:3f:47:9f:ac:90:5c:df:02:a3:98:b3:0c:69:
11:5f:08:e8:17:64:1c:f3:9d:18:17:6c:ec:09:7f:5e:63:d6:
2f:be:8a:ab:a0:a8:f7:d3:38:e5:f2:fb:4e:d1:91:3e:c6:55:
83:af:bb:04:f8:02:0e:58:0a:d4:85:7e:5c:a7:02:8e:d2:91:
6b:37:8e:ac:50:06:73:4d:c7:c2:70:bf:68:70:f7:57:9c:ff:
a1:86:46:16:ce:70:d3:64:c3:e1:82:cc:4e:4f:92:9a:b5:14:
4d:44:64:2b:0c:6a:8d:7c:2e:c2:11:54:07:3e:b6:6e:19:57:
c0:b2:3c:a4:e9:79:66:1d:e7:4a:d2:23:11:81:04:04:fc:af:
13:01:99:ee:d3:c7:6b:15:54:14:c6:b4:73:37:59:bd:9d:93:
1e:83:4e:e1:75:da:f3:62:7f:a0:25:70:57:1b:50:01:70:31:
2f:42:dd:1d:b4:5d:80:05:dd:d6:c7:1c:b4:42:ab:95:ce:db:
f7:33:3e:bf:db:01:9d:a1:9a:6e:79:f3:0a:5e:b1:c2:41:0b:
0a:d1:eb:c4:cd:0d:9e:74:b9:c4:16:87:83:6c:a1:12:7c:bf:
e7:11:25:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:39:32 2024 by rpki-client on console-ams.rpki-client.org