Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/W4iPLZ1-zuiM5iDFPjX01NAPYZ8.roa
File: W4iPLZ1-zuiM5iDFPjX01NAPYZ8.roa (raw, json)
Hash identifier: azxVDLuTQTzvctMujIYbLj8fNlB7qroqgNk9+PvLYBo=
Subject key identifier: 5B:88:8F:2D:9D:7E:CE:E8:8C:E6:20:C5:3E:35:F4:D4:D0:0F:61:9F
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 018CC3488C6A93F8EA35228C279CCCAC58B1
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/W4iPLZ1-zuiM5iDFPjX01NAPYZ8.roa
Signing time: Mon 01 Jan 2024 04:29:20 +0000
ROA not before: Mon 01 Jan 2024 04:29:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24239
IP address blocks: 2a05:1085::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:8c:6a:93:f8:ea:35:22:8c:27:9c:cc:ac:58:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 1 04:29:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b888f2d9d7ecee88ce620c53e35f4d4d00f619f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fd:dc:49:95:34:bc:45:b0:92:5b:b6:f8:ea:
a9:2d:d4:9f:33:e6:19:e8:95:bd:11:68:f4:ac:68:
bc:91:16:28:5a:6c:b0:06:bd:bd:e2:85:85:83:a3:
dd:13:68:25:e5:5f:04:ed:ce:8c:c5:10:4d:d1:44:
28:24:b8:95:70:d4:37:b4:06:7c:30:fc:41:e0:9a:
6e:46:d0:e8:b8:36:ee:4e:06:c5:11:7d:a7:3b:25:
6c:31:47:c6:ec:9c:15:30:6e:95:4b:2e:f9:33:c4:
56:01:c7:b9:2b:a6:cb:38:ae:e1:7a:d5:75:50:30:
a0:23:88:76:b6:e7:21:32:ba:7f:98:84:42:b7:a3:
92:ab:72:8b:aa:60:8e:35:71:b2:a3:e6:9b:3f:be:
81:1e:cb:f2:f5:61:4b:a1:23:fb:12:38:bf:de:0f:
96:d8:d5:a4:aa:7e:26:01:41:df:7f:0b:c5:2d:12:
c6:fb:8d:b7:e0:e2:5b:79:f0:f3:1a:f9:65:d8:5f:
12:d2:ca:1a:dc:86:3f:cf:2b:d7:4a:65:10:22:1f:
a5:a5:ce:15:d8:c6:24:ca:f0:f2:4c:aa:df:f3:65:
a7:04:32:72:77:28:be:c9:19:5d:f7:b2:12:85:ba:
a0:9c:76:06:d4:05:05:a0:fd:6c:16:b6:2d:a0:c0:
85:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:88:8F:2D:9D:7E:CE:E8:8C:E6:20:C5:3E:35:F4:D4:D0:0F:61:9F
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/W4iPLZ1-zuiM5iDFPjX01NAPYZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:1085::/32
Signature Algorithm: sha256WithRSAEncryption
a5:68:a8:6a:f1:d7:2b:6a:24:78:dc:ea:18:8b:80:1a:cc:64:
69:60:54:c2:37:4a:a6:4f:5e:c1:46:98:18:ad:b9:4b:62:be:
a0:0e:ea:28:8f:5c:ea:c2:4f:fd:43:aa:08:dc:08:38:fa:fb:
f6:98:54:67:10:c8:b1:cb:94:a2:3c:a1:c4:3a:9a:a8:4d:7e:
c9:85:7e:40:6b:a8:4d:0c:16:2f:0d:b6:96:8a:47:91:ec:9f:
8f:8c:71:d2:2e:5f:a4:c7:7d:22:35:56:9e:40:dd:3c:b3:17:
21:f6:27:60:3b:5b:fd:23:35:12:e9:df:b9:69:85:b6:22:11:
fe:db:21:15:04:35:22:c3:ab:f7:31:d1:0e:72:52:ce:ff:9f:
c9:5c:74:c7:2f:5b:2e:88:d0:d0:6e:c6:ff:ce:d0:80:9b:d8:
8e:23:76:28:58:be:90:53:77:7b:73:f3:84:46:f6:67:c7:bc:
03:ad:74:ef:db:80:96:68:45:57:a3:3b:98:6b:c5:28:6e:b3:
6f:a1:6d:63:db:af:c6:49:f5:fd:15:8d:fe:24:d5:75:6a:44:
8b:51:d0:1b:e3:48:15:20:95:a2:b8:df:76:c7:d9:19:78:21:
7a:b1:c2:79:f0:49:a1:09:ed:7b:26:76:02:4f:6c:b2:22:90:
d6:39:25:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:16:37 2024 by rpki-client on console-fra.rpki-client.org