Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/XunsVOnmFL2qjslgnu0Yspkw6Po.roa
File: XunsVOnmFL2qjslgnu0Yspkw6Po.roa (raw, json)
Hash identifier: 6vOO59e6YvO2yAO7gO+8mrtw1xYZ0XPDgH7oHke1ql8=
Subject key identifier: 5E:E9:EC:54:E9:E6:14:BD:AA:8E:C9:60:9E:ED:18:B2:99:30:E8:FA
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 018CC500474C6A197A8D5E7462E912BC4E62
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/XunsVOnmFL2qjslgnu0Yspkw6Po.roa
Signing time: Mon 01 Jan 2024 12:29:38 +0000
ROA not before: Mon 01 Jan 2024 12:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39355
IP address blocks: 2a0c:6dc0::/29 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:47:4c:6a:19:7a:8d:5e:74:62:e9:12:bc:4e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jan 1 12:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ee9ec54e9e614bdaa8ec9609eed18b29930e8fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2c:5d:f9:da:b4:46:b1:25:6d:34:a0:e9:6a:
a8:e3:fd:56:93:1f:2f:2c:5d:fb:b1:50:0f:69:07:
c9:84:ba:05:79:ce:77:a9:40:07:c8:c1:24:71:bf:
ff:f7:96:c3:b9:c3:81:33:31:e1:b8:b6:97:8b:42:
6b:b8:fb:8b:98:4e:16:92:65:2c:0e:c1:c7:c0:49:
90:51:72:f1:ab:f2:1d:66:d0:64:cf:54:d2:e0:9d:
16:9f:04:0b:af:e0:05:c9:51:59:67:88:aa:b0:f0:
92:df:49:e4:68:fb:dd:6c:bb:ca:a0:b6:a2:d4:0d:
5b:05:14:03:ac:88:61:7d:4b:9b:0c:76:1e:b2:0e:
7c:4f:75:86:20:02:12:68:fb:d0:cb:cb:cc:e4:cd:
8b:02:08:05:60:1f:30:f8:c9:a3:2a:91:a6:14:10:
5e:85:32:b1:4d:89:00:ec:b6:f5:3d:55:c0:10:d5:
cc:a7:93:0a:0a:57:4a:a2:51:54:4a:1d:be:2d:55:
31:00:2a:69:6c:0c:1b:dd:46:5a:d7:3d:7e:96:94:
7c:e1:a8:f2:22:2b:1b:46:d5:ee:1a:a2:4f:ed:28:
89:7c:36:9f:bc:67:03:2d:07:a7:c9:18:bc:9c:8f:
8a:d8:85:89:09:2c:b0:74:36:a1:fb:99:ea:94:5e:
98:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E9:EC:54:E9:E6:14:BD:AA:8E:C9:60:9E:ED:18:B2:99:30:E8:FA
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/XunsVOnmFL2qjslgnu0Yspkw6Po.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:6dc0::/29
Signature Algorithm: sha256WithRSAEncryption
5f:9d:45:f3:0c:4e:67:34:88:55:60:ef:68:f3:8b:46:3a:82:
47:79:e8:af:0d:e0:1b:c8:1a:ab:bc:6c:2a:b3:a0:3a:c1:04:
45:cf:d0:d0:a6:0b:b5:ab:f4:96:2a:cf:e5:90:5e:aa:b1:af:
87:7a:ef:a4:1a:fd:50:50:e1:3d:c2:e0:e5:57:f7:ab:10:27:
6c:61:c3:6e:05:60:44:45:4d:78:e9:7c:5f:9b:16:fb:94:c9:
25:a1:f2:4f:4d:06:25:dd:44:38:40:32:52:35:f1:9b:06:c3:
ef:4a:fb:fc:1d:69:ce:97:70:fd:83:73:35:b4:18:5b:2a:bc:
b2:c5:4d:5e:81:7a:d7:64:1d:39:1a:e3:02:88:70:58:1c:7e:
2c:aa:5d:7d:42:16:29:a9:d9:81:ce:7b:f2:8d:17:b8:6d:db:
e8:4f:11:d7:19:ef:00:2e:6b:15:cb:d6:c8:50:8e:b2:09:4e:
80:f6:24:8f:44:96:07:74:3f:a8:b6:c5:4f:05:10:3f:f1:9e:
f9:2c:08:f5:11:c5:27:7b:78:8c:5f:04:c0:c0:a6:01:22:11:
40:76:5e:3b:53:2d:bf:fb:fd:ec:50:9b:a5:8f:24:7f:47:d7:
0f:f2:1e:4c:16:43:9f:bc:06:b3:b1:30:3a:8d:50:02:44:08:
ff:d7:8c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 05:30:37 2024 by rpki-client on console-fra.rpki-client.org