Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/WQwhjjbNDHeoFIzCtfQMC0P7Ojg.roa
File: WQwhjjbNDHeoFIzCtfQMC0P7Ojg.roa (raw, json)
Hash identifier: vffW/e/Wae/lKykclsso9azixX/6a5hkFT7kehuf32c=
Subject key identifier: 59:0C:21:8E:36:CD:0C:77:A8:14:8C:C2:B5:F4:0C:0B:43:FB:3A:38
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 018CC4936C30983E1E3348FF25F6C4209384
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/WQwhjjbNDHeoFIzCtfQMC0P7Ojg.roa
Signing time: Mon 01 Jan 2024 10:30:44 +0000
ROA not before: Mon 01 Jan 2024 10:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24940
IP address blocks: 2a0d:2146:8180::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:6c:30:98:3e:1e:33:48:ff:25:f6:c4:20:93:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 10:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=590c218e36cd0c77a8148cc2b5f40c0b43fb3a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:24:cb:3c:c5:ab:dd:db:a1:e9:32:bf:cc:df:
6e:2c:13:5c:89:fd:83:f9:23:4e:33:e6:c2:2d:73:
2e:df:84:6d:7b:e7:e2:0b:35:e0:64:6e:a2:ef:63:
0f:7c:2b:e7:93:72:6c:7b:06:d4:b8:13:54:b6:da:
52:af:2f:59:ad:31:0f:4c:95:d7:2c:5a:35:49:46:
94:0b:c6:6d:27:13:f3:3d:c3:dd:d5:e2:61:7d:c2:
55:8f:85:ba:ab:5e:47:de:ca:5a:c7:f6:b0:88:b0:
e6:78:e0:5e:78:de:78:fb:bb:ff:be:96:cd:e2:a6:
b7:02:01:c6:c1:11:8c:2c:63:a6:c2:c8:7f:49:f5:
d4:f4:13:64:c2:0c:35:6a:e7:fe:95:b2:f8:37:b8:
e2:14:79:99:11:12:c2:8d:99:26:17:24:de:5b:0d:
c1:e0:0f:aa:03:5c:45:84:c7:0c:f1:5e:fa:e9:ce:
ed:26:9d:c6:da:58:3c:23:30:0c:d9:05:75:ef:aa:
80:ea:9d:a0:83:ff:bb:b1:b5:05:33:87:5c:66:3f:
fa:9a:20:cc:e8:18:3e:a9:c0:61:5e:37:28:96:84:
82:07:de:2f:95:f7:d1:06:14:f6:b8:94:0c:35:5c:
f9:99:85:2a:7b:ef:d4:a5:7c:66:de:56:b2:47:79:
ae:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:0C:21:8E:36:CD:0C:77:A8:14:8C:C2:B5:F4:0C:0B:43:FB:3A:38
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/WQwhjjbNDHeoFIzCtfQMC0P7Ojg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2146:8180::/44
Signature Algorithm: sha256WithRSAEncryption
11:ae:10:eb:12:b3:d4:be:6b:46:9a:00:10:be:57:28:44:57:
ac:37:68:46:bb:27:67:c7:46:09:4a:10:68:12:9a:1f:29:52:
d8:f4:72:e1:60:fe:46:7a:f0:28:51:3e:9a:d5:bd:d0:6b:5c:
97:6f:97:10:03:a1:e5:7f:61:22:a6:1c:35:bd:1e:01:a4:8e:
a7:6b:ec:36:ae:5f:37:58:e2:8c:50:a3:82:92:36:6f:57:68:
a4:a5:f9:e1:f5:26:b0:e7:5a:e0:b0:da:0e:35:72:04:41:66:
56:84:bd:9e:13:ca:22:09:49:8f:f3:20:49:4b:16:b0:a5:40:
5b:4b:51:b5:f9:80:4c:47:6e:88:ca:99:36:cb:3c:d9:4c:28:
d0:fc:e9:46:2b:68:9c:7e:e2:f7:59:9a:2c:93:e4:82:b4:8d:
9b:7a:7a:25:98:f7:c6:30:da:87:72:70:7b:3e:45:51:67:aa:
6f:36:71:19:8a:c4:0e:fc:e2:17:31:14:0f:63:a1:2d:18:2f:
c9:e2:1c:dd:3e:b8:40:de:d0:ee:e0:8a:76:5d:0d:3b:5f:9d:
70:e2:0d:d9:be:94:8b:72:ce:62:8c:d8:77:f7:56:d5:df:04:
c0:f6:47:80:cd:d1:71:9a:1a:a8:57:c3:a7:56:ad:ef:5d:bc:
28:00:99:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:42:55 2024 by rpki-client on console-ams.rpki-client.org