Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/1XDwBFd-rZieEFClWZhW4vVZ-Pg.roa
File: 1XDwBFd-rZieEFClWZhW4vVZ-Pg.roa (raw, json)
Hash identifier: g6aMIwrTrVMRtlb11IoTyJ9TMr237Zgym93BLvLgc+Q=
Subject key identifier: D5:70:F0:04:57:7E:AD:98:9E:10:50:A5:59:98:56:E2:F5:59:F8:F8
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 018E7F898E8A3E56B5C49A088D1902940B37
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/1XDwBFd-rZieEFClWZhW4vVZ-Pg.roa
Signing time: Wed 27 Mar 2024 10:51:45 +0000
ROA not before: Wed 27 Mar 2024 10:51:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 719
IP address blocks: 2.20.0.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7f:89:8e:8a:3e:56:b5:c4:9a:08:8d:19:02:94:0b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Mar 27 10:51:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d570f004577ead989e1050a5599856e2f559f8f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:82:1a:53:98:eb:9b:1a:c9:dc:4a:4e:04:64:
fe:1a:cd:31:b5:43:48:f8:4d:fb:3c:ca:7e:00:cb:
a7:74:ed:8e:fa:ca:8f:66:8c:8a:b3:d9:d6:24:63:
75:80:b3:2b:d5:61:42:f2:eb:c9:b5:ae:56:bf:c0:
01:b0:32:31:40:3e:00:3b:08:a5:6c:a8:43:7f:49:
2e:28:69:43:3a:70:09:48:8f:a4:fa:73:b0:6b:e1:
e3:92:0b:96:1b:ad:27:12:f8:1f:96:f4:af:3a:21:
6c:03:38:e6:8a:47:96:26:e8:bf:63:40:0e:1d:7d:
61:d6:12:7b:31:c5:68:33:da:0c:98:fd:a8:69:36:
8b:23:4e:29:0b:44:b9:07:f7:40:bf:62:3e:c6:ec:
ee:d9:b8:0d:69:95:e6:c9:63:12:d9:f2:d0:f2:1f:
a4:66:5b:62:a2:26:83:97:7d:3f:4b:c6:43:fd:98:
7c:85:4d:e3:38:9d:3c:de:cf:e9:60:b5:d5:d1:41:
07:f6:74:5c:01:e4:16:63:1a:f7:db:4a:c0:d0:96:
60:23:2a:92:ea:4f:26:4a:02:33:6f:0f:9d:a8:5e:
4e:eb:13:78:7e:2d:29:5f:ff:74:4e:fc:0b:2b:af:
2e:bd:e1:b0:7a:fc:16:f4:aa:fb:fb:8c:83:a7:cf:
58:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:70:F0:04:57:7E:AD:98:9E:10:50:A5:59:98:56:E2:F5:59:F8:F8
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/1XDwBFd-rZieEFClWZhW4vVZ-Pg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.20.0.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:54:04:3c:4c:db:44:af:cb:67:54:62:8e:a5:54:14:0b:22:
c8:79:03:1b:de:e2:53:3a:52:77:fd:91:cd:40:02:bb:e8:8d:
77:69:4b:67:a4:5e:f1:5c:88:42:af:b8:7c:27:3f:73:a4:6b:
ed:36:e5:86:d9:31:a3:07:26:51:da:09:03:29:e6:79:8e:c5:
fe:17:56:82:7e:5c:ff:95:69:3f:f5:14:91:46:49:3d:b9:99:
3e:50:cf:91:19:75:1d:04:fb:24:d9:5d:0b:22:88:44:d0:aa:
ce:ab:a4:09:e0:31:9c:dd:2a:57:bc:ef:71:6b:ef:3f:92:99:
60:25:08:f3:e7:9b:d9:c4:25:bc:36:c6:2f:45:74:48:61:75:
dd:c2:f3:55:f4:f6:bb:b9:cc:cc:b6:04:d9:57:3a:29:ac:49:
38:67:43:9e:f1:ce:d7:aa:91:db:01:16:89:2f:55:66:20:bb:
4e:ca:14:b2:fd:3a:b6:c0:89:1e:3f:5c:c2:1e:08:21:2a:48:
ef:81:51:49:23:fe:9b:30:80:90:c9:14:5d:f0:d6:d4:fb:03:
ab:e9:a1:0d:14:97:af:4a:f2:fa:5d:28:49:ad:05:48:f2:d9:
ff:2d:44:45:fb:44:f3:07:b0:33:95:64:0a:d9:0a:3f:e6:59:
4e:4d:7c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:06:14 2024 by rpki-client on console-ams.rpki-client.org