Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/w0wZBXPf9VSkb2N8d65oMddEgKA.roa
File: w0wZBXPf9VSkb2N8d65oMddEgKA.roa (raw, json)
Hash identifier: nXYYKU3nRQB7MRtGGj84USq+QtbZlbL1HhvGZJEqy58=
Subject key identifier: C3:4C:19:05:73:DF:F5:54:A4:6F:63:7C:77:AE:68:31:D7:44:80:A0
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 018E14C2E7525A4A16CC7381096D20681A35
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/w0wZBXPf9VSkb2N8d65oMddEgKA.roa
Signing time: Wed 06 Mar 2024 17:15:01 +0000
ROA not before: Wed 06 Mar 2024 17:15:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7545
IP address blocks: 2a02:26f0:700::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:14:c2:e7:52:5a:4a:16:cc:73:81:09:6d:20:68:1a:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Mar 6 17:15:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c34c190573dff554a46f637c77ae6831d74480a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:71:4d:70:44:7d:1e:59:79:fe:44:fc:f8:20:
b1:eb:ed:dd:a0:3f:c2:48:fc:0f:f1:b8:2d:88:3e:
22:38:52:9e:9b:cd:5c:75:9b:74:ea:22:af:a0:0b:
36:5b:95:3e:58:ba:71:48:27:ed:63:8e:ea:94:37:
61:b9:20:93:49:6f:0d:8f:b2:64:d1:9d:10:35:f9:
81:c3:47:e6:0e:ec:87:07:3c:ff:df:8b:94:3f:d6:
3c:83:b6:85:fa:ea:66:b4:77:9c:7d:39:b1:c9:c4:
dc:47:ac:80:d3:40:ad:dd:e6:06:9c:85:b7:b0:b0:
88:ac:5e:da:a8:3e:b9:c8:4a:3c:36:b1:58:fd:ee:
d7:55:2d:14:ed:d8:14:4a:a5:aa:9f:5c:24:81:a5:
ce:20:fe:6f:39:d6:68:70:a4:64:5b:23:3f:90:20:
bb:5e:48:ac:16:7b:a5:aa:16:68:6e:33:21:ca:39:
93:43:fb:86:48:03:ce:6c:3a:5b:8e:3d:1f:f0:56:
86:27:95:ca:95:ea:56:0e:ca:2c:f0:01:be:64:f0:
1b:65:c3:c8:43:e8:d3:2b:5d:1c:20:d7:08:0f:4f:
e5:1c:5c:9f:55:9a:37:3e:0c:9a:16:e7:1b:86:8e:
31:76:13:62:e0:52:53:f9:9d:ba:6d:c7:07:52:86:
ed:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:4C:19:05:73:DF:F5:54:A4:6F:63:7C:77:AE:68:31:D7:44:80:A0
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/w0wZBXPf9VSkb2N8d65oMddEgKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:26f0:700::/48
Signature Algorithm: sha256WithRSAEncryption
8b:d4:33:8a:fd:3c:72:2c:bc:fd:3f:9e:02:0b:93:c7:a1:e6:
62:19:90:f4:c3:38:0d:c3:53:bc:33:3e:b9:dd:0b:9e:4d:0b:
dd:25:a1:70:9d:d0:52:72:aa:25:04:dc:ab:17:28:fb:e4:8e:
ed:08:e6:77:99:85:06:ef:35:8f:14:ae:6c:90:1a:f8:2c:b2:
1f:c0:af:fe:44:30:3d:a1:f1:54:82:67:0a:c7:dd:e7:44:eb:
34:91:07:87:6d:14:3d:44:be:d8:0c:b8:be:b8:af:36:58:8a:
6d:15:60:36:ab:28:d0:6f:85:1d:55:dc:ef:d5:e1:ff:7e:aa:
a8:1e:71:37:06:0f:f9:a9:a9:09:bf:b5:8c:34:df:4f:ab:e4:
58:92:ca:61:24:bf:c3:ab:db:3d:99:02:ca:95:1c:33:cb:3d:
46:14:8b:ac:36:ee:d1:32:0d:de:72:f5:70:19:33:f2:5a:56:
21:57:fc:33:1a:47:bb:4b:c1:16:5b:ce:f8:94:33:d2:bb:78:
f3:18:cb:4a:a9:f1:48:11:6d:5a:c0:34:6f:bf:5c:1e:a0:5d:
9e:6a:91:ab:c1:db:8e:96:e3:be:08:0d:91:22:64:0d:7b:36:
0b:da:6a:6b:6b:51:19:96:cf:92:d8:7d:b3:ae:7a:82:f8:0c:
ad:51:1a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:17:24 2024 by rpki-client on console-fra.rpki-client.org