Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/6xZTW8nGIsSScCZfrxVSusi41cs.roa
File: 6xZTW8nGIsSScCZfrxVSusi41cs.roa (raw, json)
Hash identifier: pTksRd32Rhc+seNX88mImXOKvkbC5Sm/DtV49vzVxEI=
Subject key identifier: EB:16:53:5B:C9:C6:22:C4:92:70:26:5F:AF:15:52:BA:C8:B8:D5:CB
Certificate issuer: /CN=5906325e34418a57ce566efc0c3e8b38a0efa5db
Certificate serial: 018FA59A979B0EB990740EB61158A3E0396C
Authority key identifier: 59:06:32:5E:34:41:8A:57:CE:56:6E:FC:0C:3E:8B:38:A0:EF:A5:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/6xZTW8nGIsSScCZfrxVSusi41cs.roa
Signing time: Thu 23 May 2024 13:18:42 +0000
ROA not before: Thu 23 May 2024 13:18:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2119
IP address blocks: 2001:678:9dc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.mft
rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a5:9a:97:9b:0e:b9:90:74:0e:b6:11:58:a3:e0:39:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5906325e34418a57ce566efc0c3e8b38a0efa5db
Validity
Not Before: May 23 13:18:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb16535bc9c622c49270265faf1552bac8b8d5cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e2:e2:0b:06:5c:78:bc:5f:ce:46:52:08:ea:
a8:3b:7c:59:bf:7e:6c:0b:ac:b9:e7:4d:0b:a7:6c:
1e:9a:f4:78:66:f0:63:0e:c2:ae:c4:3e:9c:8e:27:
47:58:08:59:3f:e6:8e:5c:a8:c4:2c:ec:74:91:3b:
49:01:33:5e:e7:e2:19:1a:bd:88:fa:dc:1b:b2:9a:
d2:67:2d:33:2d:bf:f0:59:4f:0d:42:82:e7:7a:3d:
dd:cd:fe:b6:22:36:a5:a4:08:af:e3:b3:e2:68:e3:
1a:1f:a1:39:f5:54:b4:72:32:7a:63:28:a0:38:8f:
01:3b:6e:6b:90:47:8d:6b:3e:c0:fe:92:33:47:49:
ee:42:03:09:36:fc:ff:3b:58:b2:5b:5e:59:52:85:
bc:84:ac:92:45:d5:4a:08:78:2a:fd:d5:db:ee:79:
6b:c1:ff:39:90:e5:df:fd:cc:ac:90:88:78:f4:80:
d7:8a:31:5f:a5:dc:1d:69:5b:c7:13:60:11:4e:c7:
17:42:33:46:85:bc:a0:b3:8f:a0:04:45:56:a6:97:
af:e5:7c:9b:8d:29:e9:eb:7a:19:f5:fa:a0:e6:26:
0d:c4:f5:cd:dd:db:4c:f4:29:e9:db:52:55:6c:31:
c7:a5:63:d5:63:c9:41:f5:81:74:b7:d5:49:a5:72:
fa:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:16:53:5B:C9:C6:22:C4:92:70:26:5F:AF:15:52:BA:C8:B8:D5:CB
X509v3 Authority Key Identifier:
keyid:59:06:32:5E:34:41:8A:57:CE:56:6E:FC:0C:3E:8B:38:A0:EF:A5:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/6xZTW8nGIsSScCZfrxVSusi41cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:9dc::/48
Signature Algorithm: sha256WithRSAEncryption
15:f6:5b:1f:5f:0c:0e:a6:bf:23:8d:40:cc:a3:67:19:8e:d4:
dd:c4:59:79:0f:6b:4b:b7:c8:6a:47:b5:30:12:b1:17:bf:8b:
c2:7e:f4:56:7b:47:aa:d8:96:1e:f9:1d:16:66:7e:47:1d:42:
3b:4d:94:38:17:20:79:a9:37:63:0a:d0:2b:5f:41:38:ab:37:
56:13:2e:b5:ec:54:c2:23:9e:06:82:c4:35:54:14:b2:54:5f:
aa:da:64:fa:05:90:9a:a0:2d:c2:74:fb:18:2f:78:17:51:64:
fe:47:a5:48:d7:9a:92:f4:3e:96:ca:9d:92:53:1a:ab:2a:38:
5d:2b:52:ee:cc:47:72:32:56:c8:a6:42:86:48:2b:11:c1:68:
b9:e8:23:40:0f:ee:b4:26:44:a5:74:62:85:dd:d0:d5:4c:d8:
69:6e:c9:18:59:c1:61:96:e5:9e:bc:dc:ba:47:89:5c:6e:76:
7d:8d:c9:82:fd:6b:bd:f8:bf:46:6b:b2:f1:56:49:16:a7:dc:
03:f2:35:e0:33:c4:0d:83:94:89:c2:01:97:9a:40:0a:86:cb:
52:6c:54:a3:30:59:7f:68:c8:22:9f:18:b3:f3:83:64:0e:c2:
8d:57:9a:55:90:68:e5:e7:ef:05:d3:c6:f1:0b:73:4e:5a:af:
f2:be:52:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:33:06 2024 by rpki-client on console-fra.rpki-client.org