Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/W6IPBLmrdbaeZDmfnC6g4olOJWI.roa
File: W6IPBLmrdbaeZDmfnC6g4olOJWI.roa (raw, json)
Hash identifier: 4Hwfv6JLP2UA+XObFRyyUJqWC760nd+zVvxPWmwD8xs=
Subject key identifier: 5B:A2:0F:04:B9:AB:75:B6:9E:64:39:9F:9C:2E:A0:E2:89:4E:25:62
Certificate issuer: /CN=fa7eb1115130fac94091061e31462a565226885a
Certificate serial: 018CF841A67215845DC10CE71C0C872759BF
Authority key identifier: FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/W6IPBLmrdbaeZDmfnC6g4olOJWI.roa
Signing time: Thu 11 Jan 2024 11:21:40 +0000
ROA not before: Thu 11 Jan 2024 11:21:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57521
IP address blocks: 45.10.39.0/24 maxlen: 24
2a13:bc2:6::/48 maxlen: 48
2a13:bc2::/48 maxlen: 48
2a13:bc2:3::/48 maxlen: 48
2a13:bc2:2::/48 maxlen: 48
2a13:bc2:5::/48 maxlen: 48
2a13:bc2:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 07:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f8:41:a6:72:15:84:5d:c1:0c:e7:1c:0c:87:27:59:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa7eb1115130fac94091061e31462a565226885a
Validity
Not Before: Jan 11 11:21:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ba20f04b9ab75b69e64399f9c2ea0e2894e2562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7e:ef:2f:29:bd:c2:c7:cc:24:42:61:66:13:
91:78:8f:06:a6:9e:dc:dd:1b:19:34:bc:52:8d:ee:
f3:4b:f7:c2:9c:12:b7:a8:19:95:06:97:7b:d9:9a:
c1:8b:03:ff:db:35:35:bc:32:7b:c0:b2:94:ed:06:
9b:3d:0e:39:04:28:33:5a:fc:19:86:65:24:e0:55:
83:5d:b2:a8:94:34:44:2b:10:d6:14:88:5d:45:29:
43:a2:b0:90:4d:82:bc:3a:cf:a0:52:6d:cf:f0:c7:
81:31:9e:d0:57:6e:bb:f3:3b:fd:8a:f5:0d:5f:cd:
05:a9:47:e5:4d:83:a5:62:a3:c4:52:9b:da:26:96:
db:5f:04:8f:5d:b2:c9:37:35:ac:ce:47:55:7f:1c:
ae:c1:9c:85:8f:9e:49:47:9c:12:e6:ca:bb:06:db:
77:97:8e:62:2d:30:9c:4d:c6:2b:3f:6a:1c:78:2a:
4d:a8:56:ce:f3:c4:58:fa:03:3f:74:49:3c:43:96:
4d:43:8b:e4:a7:d5:8a:24:ab:59:09:be:fc:57:3c:
4c:ca:28:d5:90:66:24:26:99:37:48:9c:b3:4d:e7:
dc:eb:be:ac:ad:5f:fc:56:36:e3:3b:af:63:ac:dd:
00:c0:63:be:d6:b8:48:69:85:5c:55:40:74:35:da:
f6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A2:0F:04:B9:AB:75:B6:9E:64:39:9F:9C:2E:A0:E2:89:4E:25:62
X509v3 Authority Key Identifier:
keyid:FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/W6IPBLmrdbaeZDmfnC6g4olOJWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.39.0/24
IPv6:
2a13:bc2::/48
2a13:bc2:2::-2a13:bc2:6:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
02:a1:ed:ff:a3:98:1b:71:3c:38:6e:c6:6e:86:c0:b0:d3:22:
15:50:43:99:37:f1:4d:dc:ad:75:96:b8:eb:4a:1d:10:9b:86:
e8:5d:04:4e:87:34:de:33:06:89:ef:80:c9:87:a3:2f:f9:6f:
41:c1:3f:de:14:6e:da:5b:e9:74:f8:9d:44:be:f3:75:cf:35:
3f:73:2d:d9:48:f0:b6:d1:c9:4b:6d:f3:23:c4:af:b7:ad:b5:
8c:95:c9:13:e5:b4:c7:9f:99:53:29:b4:97:2a:e7:d6:c7:b4:
37:14:bc:7c:87:53:bd:40:1d:a5:3d:d3:6d:5f:6f:70:f5:d6:
7b:7e:6c:a0:7e:22:79:b9:e7:6e:3f:01:18:3d:a7:53:e5:08:
31:9d:97:67:3b:86:40:83:ce:a2:6d:42:b3:fb:6c:e0:0c:95:
ed:a9:fb:c7:05:ea:88:51:1c:e6:88:f4:5f:d9:85:58:1d:79:
fa:23:6e:5b:56:e6:db:12:6b:b5:e0:cc:d5:3c:65:54:cb:77:
3d:76:70:72:5f:d7:90:1c:89:a1:cd:94:bd:3b:17:5c:60:53:
8d:75:e6:d6:73:69:32:24:ea:f5:28:71:31:80:2f:ef:71:6d:
b4:72:80:df:b4:39:4b:2f:8f:9c:a3:b8:f9:dd:32:bb:a4:73:
44:48:40:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 14:20:57 2024 by rpki-client on console-fra.rpki-client.org