Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/vlw60xom7GBngXO7zR8qpYIoeYU.roa
File: vlw60xom7GBngXO7zR8qpYIoeYU.roa (raw, json)
Hash identifier: jJOy9bGUdrayXXpiR+/srObAS1H4ddgFhRKLEA50u3k=
Subject key identifier: BE:5C:3A:D3:1A:26:EC:60:67:81:73:BB:CD:1F:2A:A5:82:28:79:85
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 018CC86FD91B905B3DEA595FB2989FB5FE9A
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/vlw60xom7GBngXO7zR8qpYIoeYU.roa
Signing time: Tue 02 Jan 2024 04:30:22 +0000
ROA not before: Tue 02 Jan 2024 04:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199586
IP address blocks: 2a03:5840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:d9:1b:90:5b:3d:ea:59:5f:b2:98:9f:b5:fe:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jan 2 04:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be5c3ad31a26ec60678173bbcd1f2aa582287985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:02:85:f0:7b:10:f6:7b:12:41:9b:b6:ff:47:
2e:98:79:e7:7f:4c:51:46:0a:3d:8a:9e:8b:9e:7c:
82:4a:fe:7a:d8:b0:ec:44:e0:37:b0:71:94:2d:b5:
6a:74:54:96:6e:00:d2:e8:84:77:a5:d2:84:dd:63:
a9:d8:1a:93:20:45:b7:17:17:b5:b0:99:f3:35:f9:
5a:3a:0a:c3:44:10:11:7d:4d:f4:59:cf:dc:c8:64:
26:cb:6a:c8:8a:54:ca:a4:a0:e5:7e:c3:11:c0:f9:
24:ef:65:25:d0:9d:c2:c4:31:ac:7b:3c:75:b8:c7:
3c:f2:8c:08:38:ee:44:7e:2c:92:11:88:18:05:28:
d6:3d:d7:65:ce:ce:7d:27:5b:41:53:dd:e6:79:16:
c0:b4:5c:77:19:4b:b8:37:cd:be:f3:f6:b9:15:17:
8a:d8:d9:8a:bd:df:91:09:52:a6:ef:b1:46:c3:b0:
fe:da:13:3d:82:36:0d:89:fc:f4:a0:c3:40:ea:dc:
e9:62:22:f6:b5:c2:81:d0:78:9b:bc:a3:f4:40:c6:
43:c1:60:2d:23:ad:29:53:4f:68:e1:47:0a:3b:97:
2c:fa:fc:ae:71:73:4e:dc:ae:c9:b2:5e:00:57:44:
7e:7b:65:46:a1:0f:8d:a3:77:e0:6c:fd:a1:86:a4:
f2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5C:3A:D3:1A:26:EC:60:67:81:73:BB:CD:1F:2A:A5:82:28:79:85
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/vlw60xom7GBngXO7zR8qpYIoeYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840::/48
Signature Algorithm: sha256WithRSAEncryption
4b:e2:b8:9d:5e:06:31:ae:6a:f6:90:9f:49:9d:ac:eb:1d:79:
ce:bc:9d:74:7a:d4:bc:ab:93:c4:c9:67:3e:6d:d4:69:53:36:
86:fe:d3:b2:9e:69:c2:67:92:e9:be:00:a8:d2:0e:ee:7e:85:
12:c6:11:94:b3:d0:ce:6f:77:15:7c:5d:9f:32:dc:c8:fe:91:
a9:30:63:f8:7b:e9:42:30:a1:59:cc:a1:3d:f1:81:79:5b:61:
3f:0e:62:48:08:26:ec:fc:a9:b4:69:70:6f:a6:a4:7f:44:fd:
64:c5:46:b8:20:dc:89:6b:be:49:69:de:ad:ce:ea:77:df:16:
0a:1e:55:df:f7:29:1a:00:ba:65:97:7c:c6:84:46:24:2c:09:
84:70:3e:86:a3:61:f6:a8:f2:d6:14:3d:58:7c:1d:ab:82:f8:
6f:e7:24:a5:f6:8d:da:17:83:78:6a:c2:a6:ea:97:09:be:a6:
cf:b2:4d:44:be:f4:a2:bb:db:d1:c6:e4:b3:69:15:80:fa:df:
86:2a:19:98:44:04:b5:a9:f6:02:d2:23:eb:7d:17:60:7e:a8:
43:fe:4b:67:62:e2:11:f1:e4:b9:7f:e1:26:93:33:e3:47:e8:
9b:3b:39:42:e7:cb:bb:5c:cd:8e:7a:6d:84:79:71:36:83:92:
3a:e5:aa:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:13:47 2024 by rpki-client on console-ams.rpki-client.org