Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/5bw5C-wQ82Qd6eWukSTPpXCOmLk.roa
File: 5bw5C-wQ82Qd6eWukSTPpXCOmLk.roa (raw, json)
Hash identifier: byYYH/nQB44BvD8D/eCNgl/jtVEoDOKpPakbtQS7SDM=
Subject key identifier: E5:BC:39:0B:EC:10:F3:64:1D:E9:E5:AE:91:24:CF:A5:70:8E:98:B9
Certificate issuer: /CN=544194f8249773d3cd6fb654b239de769c42e864
Certificate serial: 018F2E079F9A2BDF10C94EF998645A134B8C
Authority key identifier: 54:41:94:F8:24:97:73:D3:CD:6F:B6:54:B2:39:DE:76:9C:42:E8:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/5bw5C-wQ82Qd6eWukSTPpXCOmLk.roa
Signing time: Tue 30 Apr 2024 08:03:22 +0000
ROA not before: Tue 30 Apr 2024 08:03:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47869
IP address blocks: 2001:678:730::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2e:07:9f:9a:2b:df:10:c9:4e:f9:98:64:5a:13:4b:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=544194f8249773d3cd6fb654b239de769c42e864
Validity
Not Before: Apr 30 08:03:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5bc390bec10f3641de9e5ae9124cfa5708e98b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:92:95:00:db:6e:04:f9:b6:98:72:76:d0:be:
48:29:a9:35:ad:54:e9:17:0c:c8:02:c4:b2:1d:a9:
7a:cb:23:35:d3:60:59:e9:ed:3f:07:44:0d:dd:b7:
b5:0f:c4:fe:6e:58:d0:f7:d0:63:7e:96:e1:31:d9:
aa:3e:34:7c:af:19:4d:25:be:be:7e:b8:4c:06:f0:
2e:2f:f4:d3:7f:d8:47:28:38:9b:0c:c2:7a:86:c6:
a7:c2:a6:49:5a:f6:7a:1f:f3:a2:49:8e:b4:36:36:
79:da:02:fc:eb:42:74:8a:5a:0e:3f:c5:42:5f:3a:
59:04:6b:76:60:36:8e:5a:35:85:c0:45:e6:5f:b6:
23:bd:95:0a:d6:08:40:4a:1f:8e:6c:5a:37:23:b7:
8e:c5:9e:91:d3:b1:e9:4d:71:14:cd:1e:6a:14:ab:
90:80:32:00:e7:08:a3:34:a8:35:3c:69:27:53:81:
b9:56:9e:90:fa:b1:fe:4b:ea:c2:06:c3:6d:81:01:
4a:cd:9c:f4:9a:9f:b7:28:43:de:94:60:86:86:b5:
01:fb:69:f8:c6:59:d4:db:05:1d:67:de:4b:54:12:
eb:d1:1f:1e:b5:b8:5d:a9:0f:cd:d2:72:96:2d:47:
2d:41:4e:26:3e:a4:ac:e5:7f:24:ea:e9:a2:84:ab:
75:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BC:39:0B:EC:10:F3:64:1D:E9:E5:AE:91:24:CF:A5:70:8E:98:B9
X509v3 Authority Key Identifier:
keyid:54:41:94:F8:24:97:73:D3:CD:6F:B6:54:B2:39:DE:76:9C:42:E8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/5bw5C-wQ82Qd6eWukSTPpXCOmLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:730::/48
Signature Algorithm: sha256WithRSAEncryption
cc:54:67:2d:a3:94:51:c7:7c:9b:01:8e:a8:bb:a5:e0:b6:d6:
95:96:b7:0d:c0:c6:c4:c0:b2:f4:46:a5:d2:5a:1c:9b:b5:1a:
90:ac:ea:c3:df:7e:be:01:16:c2:5b:c0:07:d5:1a:0e:94:fe:
22:4a:76:a1:42:55:ec:37:e2:58:ff:11:ac:b4:b8:c5:cc:8d:
32:89:ad:72:68:7e:04:f9:f2:7b:7f:4a:97:41:72:21:fb:15:
26:0c:c9:87:21:68:c1:3b:a1:59:df:a4:b2:ac:80:eb:ca:75:
eb:24:8b:9d:b4:10:db:6b:d1:78:53:d9:10:31:94:37:e7:9d:
80:24:0c:cb:46:13:2b:5f:43:6e:06:ae:25:fd:dd:d1:cb:fc:
db:6b:9a:0a:8e:56:62:bd:98:85:88:7a:82:d9:44:5c:f9:c0:
02:64:8a:15:e3:2a:f7:98:45:4f:6d:9e:a2:7b:9f:47:29:34:
71:6f:4e:a4:df:1a:3f:19:2b:fe:93:c0:c2:f1:8e:47:ca:70:
16:55:53:52:43:28:c6:04:12:92:35:bf:7f:1a:c5:4d:6b:65:
b6:a0:0e:dc:e8:e9:c4:32:ce:1e:50:82:cc:62:9b:81:df:b9:
8d:64:0d:ab:5a:94:6a:b9:2e:12:aa:5b:7a:00:9a:b6:52:5a:
60:5d:3a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:54:00 2024 by rpki-client on console-fra.rpki-client.org