Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/XWhjYbTr43R5WDh9gOflbZCMCo8.roa
File: XWhjYbTr43R5WDh9gOflbZCMCo8.roa (raw, json)
Hash identifier: aPDQeO4t93e7N/ggpe07xrvRwc4eJ34fIKpwL05pexI=
Subject key identifier: 5D:68:63:61:B4:EB:E3:74:79:58:38:7D:80:E7:E5:6D:90:8C:0A:8F
Certificate issuer: /CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Certificate serial: 018CC3B6917A42C49E854B755E806F1808FD
Authority key identifier: 25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/XWhjYbTr43R5WDh9gOflbZCMCo8.roa
Signing time: Mon 01 Jan 2024 06:29:31 +0000
ROA not before: Mon 01 Jan 2024 06:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1239
IP address blocks: 2a0e:ec01::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:91:7a:42:c4:9e:85:4b:75:5e:80:6f:18:08:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Validity
Not Before: Jan 1 06:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d686361b4ebe3747958387d80e7e56d908c0a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a2:d2:3d:b7:b8:41:02:54:f4:c4:65:8e:5a:
f6:59:6e:19:33:a2:65:a4:34:85:55:77:51:76:d9:
7d:ad:97:de:cd:37:cc:bc:24:9e:5f:84:00:63:53:
37:53:92:e3:88:f0:39:28:66:75:59:1c:51:ef:fd:
6c:c7:54:29:e7:34:49:00:2c:a7:24:b2:d4:58:2c:
46:65:2b:90:ed:5a:4f:02:00:ea:f2:a8:fd:73:c0:
5c:e0:c6:65:21:6a:cf:9b:4d:3d:09:8f:2e:19:12:
ac:21:ea:2a:97:fa:8c:b5:da:60:d3:77:da:f9:76:
6f:81:0a:c4:e6:d6:1d:cf:cf:03:9a:c6:e6:fe:6a:
a8:9a:1d:c5:b1:d8:f5:0f:a3:4d:1e:e1:98:79:10:
99:9f:da:58:2b:1b:e6:97:5d:47:7c:cc:a1:83:36:
24:6f:0e:ef:58:1d:ce:44:63:66:aa:83:db:cc:17:
58:50:cb:bf:e2:e7:b7:ae:43:e5:d0:a7:2d:5a:54:
3b:19:a6:3b:0b:66:eb:bd:54:ef:0d:ed:06:f1:91:
44:61:df:ca:ef:37:e7:7d:9b:f0:dc:cc:36:80:bd:
53:3b:a1:c6:03:bd:5f:49:fe:4f:06:6f:93:62:87:
df:7b:ee:64:71:a7:81:f2:1c:40:e0:12:08:22:75:
d6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:68:63:61:B4:EB:E3:74:79:58:38:7D:80:E7:E5:6D:90:8C:0A:8F
X509v3 Authority Key Identifier:
keyid:25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/XWhjYbTr43R5WDh9gOflbZCMCo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:ec01::/32
Signature Algorithm: sha256WithRSAEncryption
7e:99:85:cc:de:80:67:b2:6e:8e:cd:14:02:a1:70:c8:6f:21:
82:89:a5:ea:ad:05:8a:a6:35:af:7c:2f:18:eb:d2:88:bd:7b:
62:ea:63:dc:0a:2d:34:5f:7d:b1:28:59:34:17:a2:a3:c9:f1:
5c:5f:43:8d:ba:b5:1d:dd:a2:e3:06:50:da:f2:ec:b7:8f:77:
9f:54:21:61:65:a1:fa:42:21:fb:39:9f:6f:e1:db:8d:66:a1:
df:cc:ac:c2:9a:d3:a1:e3:02:8f:1b:65:22:9c:79:82:fc:fe:
b1:2e:a9:37:69:f5:9c:8c:01:1b:ca:db:af:aa:ac:c5:0e:62:
f5:be:99:5d:ef:db:3a:53:ce:bf:fc:08:47:cc:47:ae:16:df:
53:e9:ab:b4:a1:88:cb:3f:01:9c:ba:44:16:d5:7b:27:31:e2:
70:79:e0:92:a7:76:d7:97:fa:b8:be:95:0f:5c:71:14:af:8f:
45:e1:c8:09:37:a6:5c:25:8c:c7:b0:54:70:72:3f:e8:fb:1d:
f8:ef:f9:bb:76:ad:47:d7:af:01:60:94:90:9e:f5:55:88:df:
96:9f:14:c4:f5:49:9a:e4:23:ee:9c:87:57:35:9d:75:11:e2:
df:4d:1a:2c:b3:d7:01:d3:5d:55:85:e3:ee:8b:01:f3:09:42:
15:c5:d7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 21:00:25 2024 by rpki-client on console-ams.rpki-client.org