Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/wWWXe0JR3f_ZHC_duhhfP-L5464.roa
File: wWWXe0JR3f_ZHC_duhhfP-L5464.roa (raw, json)
Hash identifier: 6af+f+D0wHBlk4oNpok0R22t4UVMZw4KUDkve2CF77k=
Subject key identifier: C1:65:97:7B:42:51:DD:FF:D9:1C:2F:DD:BA:18:5F:3F:E2:F9:E3:AE
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 018CCA2A59BF723CF3889EE2AE59D09EDE45
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/wWWXe0JR3f_ZHC_duhhfP-L5464.roa
Signing time: Tue 02 Jan 2024 12:33:42 +0000
ROA not before: Tue 02 Jan 2024 12:33:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209569
IP address blocks: 2a06:e881:5900::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:59:bf:72:3c:f3:88:9e:e2:ae:59:d0:9e:de:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 12:33:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c165977b4251ddffd91c2fddba185f3fe2f9e3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:71:2f:08:49:ce:be:c5:97:de:76:52:be:70:
3d:0a:4b:f3:8c:09:6f:94:a1:93:64:7c:a7:58:3f:
28:5f:3a:e0:0e:90:b6:dc:d9:bc:a6:f8:d4:10:8e:
ef:a2:5c:94:04:1b:46:44:a2:e8:62:d6:ba:a8:40:
e7:1c:b0:7f:a4:8f:e4:a5:83:c8:01:43:59:8c:b2:
90:23:70:2b:5f:39:d6:cb:05:6a:a4:73:e6:6d:9d:
d5:05:66:8a:f0:11:33:b9:eb:37:a7:0f:63:be:a1:
85:af:fc:e1:c7:ac:fd:03:fe:25:f0:0d:c8:d1:88:
fe:0d:05:41:37:36:3e:7c:33:10:f6:fb:f3:7d:18:
52:38:a7:e5:a9:86:a8:dd:a8:c8:71:7c:7a:bb:cd:
25:d4:56:de:9f:37:61:7c:30:12:cb:68:24:16:5f:
60:6a:94:35:b6:ff:58:08:31:d1:a2:18:b3:c8:7b:
3a:fc:b9:43:75:ed:35:88:82:d8:10:ae:11:7b:2c:
26:88:92:0a:6e:51:5b:d0:55:16:cb:8a:4f:c9:62:
b6:db:e6:7a:c1:c0:83:77:34:5a:b4:ca:36:84:eb:
21:59:de:b2:32:09:18:12:d3:98:a7:ff:81:38:46:
58:0e:3f:ff:8d:f1:b2:75:f6:04:c8:61:af:55:af:
8d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:65:97:7B:42:51:DD:FF:D9:1C:2F:DD:BA:18:5F:3F:E2:F9:E3:AE
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/wWWXe0JR3f_ZHC_duhhfP-L5464.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:5900::/44
Signature Algorithm: sha256WithRSAEncryption
90:30:e1:50:bc:e4:39:1d:6d:ef:56:01:3b:3d:32:16:77:0e:
60:96:5e:30:ac:7a:63:9d:1b:37:61:42:5d:2a:44:7c:8a:57:
d4:fb:ca:61:58:cb:4f:b8:38:8b:44:ed:b4:f8:46:ab:4c:0f:
62:d7:d3:82:be:bb:f9:46:dc:45:fe:94:ea:c6:ad:58:b8:71:
aa:77:cf:a4:fe:49:4b:b8:83:9e:66:18:dc:4e:52:5a:ed:77:
9c:48:d3:6f:17:c5:2e:da:26:aa:db:9b:36:98:32:4b:38:07:
f4:8b:52:0e:04:35:bd:c5:83:06:30:b6:b1:c7:26:e4:7e:65:
16:8d:cd:0a:02:df:66:e8:c4:db:3c:4d:0a:02:e4:31:74:da:
c4:f4:3f:bd:ac:cb:04:66:6b:dd:55:52:e8:df:63:f5:7e:39:
fb:ff:b8:d5:bf:56:d2:4e:67:44:d2:4f:65:65:cd:32:5a:c6:
12:28:aa:5d:d0:e3:c7:19:b8:2d:df:4d:ab:a4:7f:f2:ad:ca:
75:ad:f1:dc:cc:02:a6:76:eb:0c:4a:38:82:6c:8c:c6:14:03:
65:dc:3f:28:28:b1:63:06:ab:55:c0:0a:f9:bb:68:60:3d:52:
a9:71:a8:e3:92:21:cd:16:ac:c0:8e:cf:94:7a:26:ba:3f:7a:
69:6c:73:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:39:33 2024 by rpki-client on console-ams.rpki-client.org