Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/21qEmijyH2BObocV1lCyKW1oDYQ.roa
File: 21qEmijyH2BObocV1lCyKW1oDYQ.roa (raw, json)
Hash identifier: e05MNOb9UoW7rG3o2zdRkCfdIYJDvGv7+xA/uSQ16VE=
Subject key identifier: DB:5A:84:9A:28:F2:1F:60:4E:6E:87:15:D6:50:B2:29:6D:68:0D:84
Certificate issuer: /CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Certificate serial: 018CC3B692BE0BB41DDCE38543431B80F4EB
Authority key identifier: 25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/21qEmijyH2BObocV1lCyKW1oDYQ.roa
Signing time: Mon 01 Jan 2024 06:29:31 +0000
ROA not before: Mon 01 Jan 2024 06:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56849
IP address blocks: 2a09:be44::/30 maxlen: 48
2a09:be41::/32 maxlen: 48
2a0e:ec00::/30 maxlen: 48
2a12:49c0::/29 maxlen: 48
2a09:be42::/31 maxlen: 48
2a0e:ec04::/31 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:92:be:0b:b4:1d:dc:e3:85:43:43:1b:80:f4:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Validity
Not Before: Jan 1 06:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db5a849a28f21f604e6e8715d650b2296d680d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:48:a4:96:44:55:37:31:22:39:60:6d:b4:03:
c3:ff:e8:41:81:4f:ab:6f:1f:62:a4:cd:39:f3:4c:
fa:f9:61:1b:ed:75:28:a6:e9:5b:05:88:7c:f7:37:
82:04:5f:85:fd:38:c3:f2:1a:c4:ee:70:d8:c8:31:
99:27:5e:b9:a3:e7:e9:5f:1a:7a:68:90:9e:1d:ef:
1d:1d:81:43:11:c3:5f:80:9c:88:33:d4:60:c7:a0:
7c:fd:b2:f5:03:d4:2b:99:8d:de:4a:a2:d3:1a:7d:
7b:88:0c:9d:5b:70:f2:d6:f9:19:20:0c:c2:10:f5:
7e:79:15:ad:d4:18:82:84:0a:89:6a:d3:20:d9:59:
74:89:44:e3:cb:fe:fd:3d:9a:1c:b6:68:b0:f1:61:
82:d4:9f:ee:44:44:fa:bb:b0:86:b4:98:af:2b:da:
d2:7f:8a:e1:5c:41:1b:19:31:e5:21:c4:f4:b9:ec:
13:3f:36:5a:80:c2:ae:c1:31:69:93:e2:32:60:a0:
f3:e9:5b:05:2e:31:54:d7:6f:1b:d1:e8:5c:f4:bc:
95:9b:a1:91:aa:c7:77:f0:f0:43:32:17:da:74:ad:
d9:05:e0:ac:05:f7:08:79:52:f1:28:76:ea:6c:71:
c8:74:7e:74:65:00:ac:f7:ba:e0:f8:f0:eb:8d:33:
b0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:5A:84:9A:28:F2:1F:60:4E:6E:87:15:D6:50:B2:29:6D:68:0D:84
X509v3 Authority Key Identifier:
keyid:25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/21qEmijyH2BObocV1lCyKW1oDYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:be41::-2a09:be47:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:ec00::-2a0e:ec05:ffff:ffff:ffff:ffff:ffff:ffff
2a12:49c0::/29
Signature Algorithm: sha256WithRSAEncryption
62:6d:40:16:4b:fc:c8:ec:bd:79:6e:1b:12:02:35:58:6d:1f:
9a:9a:00:84:da:c0:01:ef:40:a1:60:10:e3:23:6c:25:82:74:
9a:e9:15:84:7b:5c:8e:2c:c7:10:d5:f5:91:1b:e4:7c:37:56:
a2:e4:11:89:f6:56:a9:1c:7c:33:ba:93:2b:68:01:13:0a:24:
e6:25:ce:f2:d5:60:e7:dd:ce:e1:21:6e:d1:c1:cc:f4:c8:3b:
6f:ad:b7:82:94:70:49:40:4e:d7:cb:34:4c:c6:c5:d6:30:70:
94:18:1a:79:9d:44:23:2b:c0:fe:66:10:80:e5:c0:10:f2:38:
3f:6e:85:60:17:db:d2:c4:86:a1:81:13:de:5a:04:45:75:ca:
51:5e:cb:db:b4:12:33:ca:60:bc:fd:3b:a0:c6:bb:11:63:a6:
a3:ab:ca:88:d7:cb:0e:a0:7b:28:77:55:65:e8:c9:ab:4f:b3:
c2:16:50:98:b2:db:a3:4b:e9:17:e4:71:f1:b6:31:a6:70:bc:
58:9d:15:a2:d9:63:b9:0c:57:9e:88:85:f3:8a:27:a5:b8:cc:
c5:4f:9f:7b:a0:a6:db:47:13:00:9b:28:8d:da:ce:c6:70:6e:
c0:56:e4:79:17:d3:03:5e:b2:8e:ec:21:f8:23:f0:b7:9a:97:
bd:40:37:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:52:35 2024 by rpki-client on console-ams.rpki-client.org