Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/5dKzTV8WB2p1t3W5fl0WWwb_ZVQ.roa
File: 5dKzTV8WB2p1t3W5fl0WWwb_ZVQ.roa (raw, json)
Hash identifier: AqXLvEaHHTH8BzTxt3PFg96qTIAdEIQrErkYvcLAdGE=
Subject key identifier: E5:D2:B3:4D:5F:16:07:6A:75:B7:75:B9:7E:5D:16:5B:06:FF:65:54
Certificate issuer: /CN=8f2824c61357dc344bbdf35b83577459b9d3fc44
Certificate serial: 018CC34896EBE0CF7B2F53CF88AC3ECC54E3
Authority key identifier: 8F:28:24:C6:13:57:DC:34:4B:BD:F3:5B:83:57:74:59:B9:D3:FC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/5dKzTV8WB2p1t3W5fl0WWwb_ZVQ.roa
Signing time: Mon 01 Jan 2024 04:29:23 +0000
ROA not before: Mon 01 Jan 2024 04:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 2a00:4bc0:2300::/40 maxlen: 48
2a00:4bc0:2100::/40 maxlen: 48
2a00:4bc0:2400::/40 maxlen: 48
2a00:4bc0:2600::/40 maxlen: 48
2a00:4bc0:2000::/44 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:96:eb:e0:cf:7b:2f:53:cf:88:ac:3e:cc:54:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f2824c61357dc344bbdf35b83577459b9d3fc44
Validity
Not Before: Jan 1 04:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5d2b34d5f16076a75b775b97e5d165b06ff6554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d5:e2:39:51:35:35:c7:4c:13:8e:16:05:b6:
fe:af:71:ff:33:a7:ec:a4:fa:25:a6:01:a8:63:c0:
f1:cd:77:d4:69:c8:85:2e:db:0d:67:b1:ea:34:22:
65:87:a2:cd:10:0b:bf:20:40:3e:f2:04:5e:1d:63:
67:9e:75:b9:6f:6f:90:f4:90:89:d3:d1:24:db:82:
31:7a:15:10:e9:8e:7e:c0:37:96:d2:14:bc:67:59:
44:19:82:11:1f:54:5e:01:fc:ca:97:16:c0:85:49:
b7:8a:fd:7d:c6:71:e3:f9:0c:97:af:a1:2d:44:3d:
5b:ea:9f:20:94:c4:0d:43:7b:f1:ee:3a:c5:12:87:
f7:41:1b:d9:5b:a7:a2:d3:03:07:12:1d:fd:d0:ea:
22:66:ff:83:d1:57:d4:a4:79:18:b0:7d:99:d7:34:
05:c9:65:91:00:06:63:55:01:58:b7:58:8d:cc:1b:
cf:f5:fa:28:e1:7e:6d:7f:81:f5:e1:ac:98:ef:dd:
05:44:f6:4f:66:a7:99:a3:40:10:54:2b:b3:f7:f1:
70:57:73:d1:ba:87:93:53:80:57:81:49:84:2a:40:
da:f6:d1:cc:f0:bb:25:d1:04:bc:0f:63:8c:a0:e4:
e6:e1:58:86:14:ce:73:2b:a9:9b:58:d8:ad:b0:60:
8d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D2:B3:4D:5F:16:07:6A:75:B7:75:B9:7E:5D:16:5B:06:FF:65:54
X509v3 Authority Key Identifier:
keyid:8F:28:24:C6:13:57:DC:34:4B:BD:F3:5B:83:57:74:59:B9:D3:FC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/5dKzTV8WB2p1t3W5fl0WWwb_ZVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:4bc0:2000::/44
2a00:4bc0:2100::/40
2a00:4bc0:2300::-2a00:4bc0:24ff:ffff:ffff:ffff:ffff:ffff
2a00:4bc0:2600::/40
Signature Algorithm: sha256WithRSAEncryption
86:3f:97:84:59:1b:8d:08:18:3b:9a:7a:2b:18:2e:07:59:70:
b8:02:5a:f0:8a:13:6e:10:23:96:e3:83:c3:c2:33:a4:69:a6:
b0:9c:cf:67:42:9b:6f:9a:fa:fd:3c:e3:85:40:1c:32:58:5d:
71:d6:9a:f0:b1:f9:62:a2:e9:bc:fb:9d:60:d5:9d:5e:d8:c0:
c9:4d:91:aa:91:ac:76:74:e2:b2:23:1b:49:af:a4:e0:3b:f4:
33:45:70:bd:f0:1f:d4:28:b3:e9:6d:bc:7e:95:28:0c:72:e0:
da:3f:7c:9d:b3:19:42:f5:c0:ad:43:49:43:3a:80:17:db:ee:
08:1c:0b:3a:68:ff:2b:13:af:53:e3:2e:b7:c4:57:89:16:b6:
a1:f2:9c:74:5f:b2:e6:fd:21:27:a1:17:ca:4a:2f:35:2f:f2:
e1:02:a5:f1:d7:e9:d2:43:ec:e2:fe:c4:10:8f:5e:ec:2b:01:
4b:c3:51:59:82:04:d8:59:d6:f7:49:8f:9b:1c:7c:8e:7d:32:
3a:3f:a7:fb:a8:e9:d8:05:6c:dd:b4:a7:32:5e:70:7b:c2:1e:
fd:aa:ca:74:81:0b:fd:66:24:77:c6:1c:24:a0:04:ac:c6:fa:
f7:12:8d:3e:e4:79:8f:51:c4:4a:f1:83:44:6d:7a:00:4e:52:
ba:32:81:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 12:21:37 2024 by rpki-client on console-fra.rpki-client.org