Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/5xxX0uDApWTnZ0BpbfEZ_71U8eI.roa
File: 5xxX0uDApWTnZ0BpbfEZ_71U8eI.roa (raw, json)
Hash identifier: atpe5V3gB3PY2TzVeziR6F1NDw3C54aqTtvrkpZ86GU=
Subject key identifier: E7:1C:57:D2:E0:C0:A5:64:E7:67:40:69:6D:F1:19:FF:BD:54:F1:E2
Certificate issuer: /CN=0bac82804700ad36538bf86f34c073e971430da5
Certificate serial: 018CC56E430CB216B22C4A8B05B0C98CB03E
Authority key identifier: 0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/5xxX0uDApWTnZ0BpbfEZ_71U8eI.roa
Signing time: Mon 01 Jan 2024 14:29:46 +0000
ROA not before: Mon 01 Jan 2024 14:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39870
IP address blocks: 2001:67c:2550::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 20:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:43:0c:b2:16:b2:2c:4a:8b:05:b0:c9:8c:b0:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bac82804700ad36538bf86f34c073e971430da5
Validity
Not Before: Jan 1 14:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e71c57d2e0c0a564e76740696df119ffbd54f1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5f:f2:fa:87:bb:de:85:dc:ea:55:1b:85:da:
ec:d5:df:47:45:54:8b:23:60:3e:78:4d:74:2d:bb:
6c:5a:cc:81:18:f1:1c:44:e7:1b:66:79:b5:c7:7c:
2a:3a:27:da:06:ed:22:39:ef:e4:17:8e:61:81:56:
ee:76:9a:ff:ae:43:40:4e:39:75:f5:65:cc:e1:08:
d7:64:0f:ce:d1:a7:d1:e8:11:e9:52:27:29:17:5a:
2f:93:8f:ec:73:84:46:e9:a7:84:43:b5:88:37:09:
63:e1:36:51:35:d4:e1:1a:98:f0:1b:ae:62:c2:bf:
8f:75:09:1d:5c:b1:a8:38:a0:38:f9:fd:06:f7:dd:
18:63:c7:35:65:b9:9a:63:a9:cd:ab:27:f1:90:c9:
69:b0:4a:5f:6e:e1:7a:0b:42:1d:b7:17:44:a6:04:
a8:f0:b0:3a:f7:29:82:95:9d:ee:89:3d:1e:88:88:
49:97:c4:30:04:61:91:4d:a7:e4:17:f4:6c:41:a4:
e4:bd:f6:2a:e8:ca:b6:8d:8c:0f:c8:fd:03:91:d4:
aa:6d:9a:52:59:ba:ee:eb:4a:60:42:fe:35:d5:73:
54:de:7e:98:05:91:1c:35:98:15:67:c3:40:da:83:
6d:9d:cb:a4:99:dc:75:36:4a:5b:dd:33:8d:c0:9d:
d9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1C:57:D2:E0:C0:A5:64:E7:67:40:69:6D:F1:19:FF:BD:54:F1:E2
X509v3 Authority Key Identifier:
keyid:0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/5xxX0uDApWTnZ0BpbfEZ_71U8eI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2550::/48
Signature Algorithm: sha256WithRSAEncryption
c3:36:07:17:7e:0f:f8:d4:22:d1:8f:93:3e:9c:5c:a7:28:78:
9d:5d:e9:c2:de:2c:37:f4:80:fa:84:59:e4:21:35:88:b2:ef:
2d:e7:32:90:03:f9:7b:69:ae:6b:50:c9:b8:66:01:59:dc:9a:
1e:03:3e:c3:cd:55:90:86:f9:30:2f:1b:31:1e:13:19:b6:7c:
72:db:ab:c8:47:42:20:bf:0b:dd:ff:61:52:14:4d:36:30:56:
23:22:a3:22:b9:e1:b5:50:34:3f:d0:c2:f4:4b:43:27:80:3f:
43:78:59:60:fb:6c:ad:0e:16:5b:82:01:d0:78:06:6e:50:58:
d8:da:c7:1b:c6:e9:42:fa:e9:e2:94:6b:13:e9:a6:ef:f6:29:
8a:1e:80:a8:da:a4:09:2c:b9:b2:b3:0b:2c:b2:61:c3:f5:55:
0c:83:2b:06:a1:63:c1:52:9c:58:86:f4:0f:a8:ab:6e:f8:68:
2e:67:17:4b:b0:87:c5:f1:0c:22:a0:06:c9:fb:83:3b:98:ec:
77:a3:dd:b0:78:5c:86:9b:fd:24:a5:b0:be:14:b4:31:1a:c0:
91:cd:92:72:ea:d3:57:ea:21:6e:f4:ed:bb:a1:5c:2a:c4:c5:
a2:fb:3d:08:e3:7e:b7:bd:40:35:bb:fa:53:60:d1:ad:8b:07:
dc:fc:18:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:41:45 2024 by rpki-client on console-fra.rpki-client.org