Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/WdLrv5IRWT9YezljkHAn4stql9M.roa
File: WdLrv5IRWT9YezljkHAn4stql9M.roa (raw, json)
Hash identifier: wj8Ay+HLrziPcq+Rzq6Zxy0Oa8M8R5GhONJd4OJn0W4=
Subject key identifier: 59:D2:EB:BF:92:11:59:3F:58:7B:39:63:90:70:27:E2:CB:6A:97:D3
Certificate issuer: /CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Certificate serial: 018CC6B92210352DEB9D4044030A12F89CD9
Authority key identifier: 90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/WdLrv5IRWT9YezljkHAn4stql9M.roa
Signing time: Mon 01 Jan 2024 20:31:10 +0000
ROA not before: Mon 01 Jan 2024 20:31:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60939
IP address blocks: 2a13:5884::/30 maxlen: 30
2a13:5880::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:22:10:35:2d:eb:9d:40:44:03:0a:12:f8:9c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Validity
Not Before: Jan 1 20:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59d2ebbf9211593f587b3963907027e2cb6a97d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:2a:72:9b:2e:db:8f:e7:e2:65:dd:dc:9e:ac:
bd:63:ad:8d:49:a8:6b:37:8a:63:3e:36:bb:36:f5:
c9:2b:ce:68:f8:01:37:17:3a:a2:b2:7c:ba:98:72:
0a:07:96:15:e5:e0:1d:5e:7a:4b:df:4e:30:4b:9d:
df:0f:9f:06:28:78:74:18:5a:f6:14:55:9b:f2:1f:
2f:14:18:ae:db:cf:9c:e9:d6:6b:71:05:6c:b1:bf:
ac:1f:31:17:c5:db:fb:bb:db:7d:bc:2a:b3:0b:7f:
53:94:ce:6e:d2:b4:b5:ee:fa:d3:fa:4c:41:9b:66:
46:60:8a:f6:c9:d5:8c:0e:25:38:60:df:4d:01:70:
71:4b:3f:13:91:e4:bb:86:e1:72:c6:7d:2e:c7:99:
44:a9:b3:3e:0c:68:67:1c:39:b5:92:6f:10:dd:f7:
75:ff:90:70:6f:ae:21:a2:93:46:eb:ee:3f:8c:43:
0f:60:7c:bb:e2:35:f6:dd:22:11:69:44:09:8b:13:
1c:94:7a:60:46:97:72:fd:6c:ef:ca:07:d1:cc:54:
be:4e:a3:0c:01:30:44:5f:9c:65:60:91:3d:da:ce:
a1:f7:a5:d8:92:3c:a8:e6:1d:3a:4f:33:5b:03:15:
2a:08:bd:ed:5c:cc:71:fd:21:73:70:b7:3d:a6:30:
7a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D2:EB:BF:92:11:59:3F:58:7B:39:63:90:70:27:E2:CB:6A:97:D3
X509v3 Authority Key Identifier:
keyid:90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/WdLrv5IRWT9YezljkHAn4stql9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:5880::/29
Signature Algorithm: sha256WithRSAEncryption
4c:19:78:57:36:f4:cd:2b:31:01:1e:e9:bf:7c:b0:f7:19:6b:
6e:bd:b5:04:54:d8:45:1e:52:ef:3b:28:68:23:45:50:7c:4a:
58:43:c5:53:9e:26:2d:35:c2:e0:ba:99:3a:d2:0c:d7:4a:49:
82:c3:c7:2e:3b:fd:c9:a8:8e:ca:24:e4:46:e6:3b:13:8f:d9:
6d:ef:e7:f4:9d:d9:96:d1:5a:79:3a:9a:6a:92:01:f9:d6:5a:
51:e4:95:12:34:2e:49:5e:f6:43:14:23:36:12:b3:5a:74:8b:
4f:cb:bc:f8:da:93:8b:ed:32:c7:71:ce:8a:36:e9:bb:f8:ad:
63:85:94:20:39:f4:3e:be:bf:a5:b9:26:54:1a:c0:a9:0d:eb:
77:20:94:ed:38:e1:a0:86:ee:e0:52:e1:90:1f:38:32:8c:01:
cf:7b:1f:05:bb:35:a4:b7:8e:44:f5:8c:02:74:f3:78:23:be:
3f:7e:ad:17:60:7b:a5:2d:16:88:48:6b:24:16:a4:9d:aa:04:
aa:73:29:a7:92:d3:d6:98:54:80:c9:e6:ff:ee:f1:2c:12:8c:
a5:44:c0:9d:83:15:b9:08:da:a3:77:ed:e8:3d:a4:a3:a9:50:
bf:ff:12:3e:67:a1:50:b0:df:9a:92:52:d7:1c:0c:0f:2f:33:
93:d3:c8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:00:34 2024 by rpki-client on console-fra.rpki-client.org