Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/X_aqwEMJvZO6dKEURgJe-8o0wOs.roa
File: X_aqwEMJvZO6dKEURgJe-8o0wOs.roa (raw, json)
Hash identifier: NEH0yWQws2RYYkcpFdnlZ4k3GoHVcnMz8hJjDDTzp8c=
Subject key identifier: 5F:F6:AA:C0:43:09:BD:93:BA:74:A1:14:46:02:5E:FB:CA:34:C0:EB
Certificate issuer: /CN=ac89af60986e6d958322fb026c6b65aeec949a0d
Certificate serial: 018CEDB12D343255DE4A9F69534D90FD14F0
Authority key identifier: AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/X_aqwEMJvZO6dKEURgJe-8o0wOs.roa
Signing time: Tue 09 Jan 2024 10:07:40 +0000
ROA not before: Tue 09 Jan 2024 10:07:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 2a13:ce40:6667::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:b1:2d:34:32:55:de:4a:9f:69:53:4d:90:fd:14:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac89af60986e6d958322fb026c6b65aeec949a0d
Validity
Not Before: Jan 9 10:07:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ff6aac04309bd93ba74a11446025efbca34c0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2c:9f:ce:ff:62:dc:df:98:c0:bf:5e:97:79:
33:02:97:0e:3b:02:f0:49:af:40:36:f3:c2:f2:55:
6d:b2:a2:e6:11:8c:aa:09:91:08:64:ab:8f:8c:ae:
aa:f3:d7:3a:64:e3:61:d1:de:30:97:e8:a4:65:8e:
0a:b0:81:50:66:78:a3:e3:22:58:a7:d4:ec:ac:c6:
30:1a:5c:b2:cd:1e:12:9a:e1:91:b8:5a:0d:72:45:
8f:b6:3b:21:41:03:b9:37:ff:17:82:f7:50:07:a5:
d5:05:85:83:0a:a8:c9:0c:ed:c6:4b:b9:1f:17:b0:
9f:3c:fb:fe:43:ae:f9:fe:ee:4b:a1:b5:22:a0:f3:
b7:1c:fe:51:58:46:50:af:e9:e4:4a:cd:ac:1e:6e:
ae:25:35:31:24:96:03:0b:4b:e4:c6:bf:85:75:69:
2f:f9:da:b0:5f:80:11:4d:03:53:1c:68:f7:1b:25:
9b:c0:46:5e:45:40:4a:44:d9:1b:c2:dd:f3:05:0f:
7e:9e:87:de:a8:38:35:e0:88:f9:45:bc:f0:3b:ac:
8e:a1:25:7d:fe:f9:a2:8d:fc:dd:71:68:be:16:37:
ae:68:9a:8e:fd:54:fd:31:15:e7:64:37:74:17:8e:
28:b3:17:c2:7f:e5:0d:08:e9:c0:c2:1f:72:33:db:
5f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F6:AA:C0:43:09:BD:93:BA:74:A1:14:46:02:5E:FB:CA:34:C0:EB
X509v3 Authority Key Identifier:
keyid:AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/X_aqwEMJvZO6dKEURgJe-8o0wOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ce40:6667::/48
Signature Algorithm: sha256WithRSAEncryption
00:15:45:d9:8a:81:02:ec:b8:a5:9c:46:35:be:04:62:e9:55:
45:03:c1:c1:67:4f:86:8d:d1:c9:1d:6e:0f:3a:07:7f:57:4c:
f3:56:81:0a:9c:05:6a:ab:ec:5d:e3:6a:c6:80:61:fc:10:15:
ca:31:30:b4:10:60:c7:ca:ad:7d:fe:04:fa:76:2b:2a:3f:d1:
e7:e1:9d:b2:32:d1:41:25:60:d6:8f:de:b8:ba:52:fe:a5:95:
fb:99:76:79:75:01:a3:48:59:45:0d:ef:01:17:77:79:f3:d9:
ce:78:68:a7:b6:54:af:60:9a:73:d8:e2:e1:3f:3f:c7:91:3f:
0b:c6:47:a5:dc:f3:8f:7d:b4:95:1a:97:01:1c:46:55:4c:b3:
ee:cd:bf:c2:2f:38:7d:b4:b6:df:21:a4:c9:41:d4:49:5f:36:
12:9a:14:3b:00:e8:ec:5b:29:22:ee:62:68:6a:55:d6:e4:58:
ef:ce:05:c9:f2:39:8f:c6:24:64:65:5d:29:f5:2c:8e:8b:2b:
8b:13:03:8a:3e:04:5d:26:6f:ec:56:34:02:41:22:85:00:72:
69:98:28:1d:ce:1f:42:8d:f1:c8:eb:e6:68:b5:fb:3f:64:e6:
39:e1:69:83:42:0b:5a:77:7c:60:20:bd:c3:89:d0:1f:e0:fc:
c4:d0:d6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 18:13:21 2024 by rpki-client on console-ams.rpki-client.org