Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/5WvWh6g-dtfmfDFE114fMTPRpIc.roa
File: 5WvWh6g-dtfmfDFE114fMTPRpIc.roa (raw, json)
Hash identifier: 38Q2w5yDicFCiVWlQNOpOLmWb40dW9wsQM2l27wkTRM=
Subject key identifier: E5:6B:D6:87:A8:3E:76:D7:E6:7C:31:44:D7:5E:1F:31:33:D1:A4:87
Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Certificate serial: 018D4A95119E351DBA7A5D825C1CF40F2BBB
Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/5WvWh6g-dtfmfDFE114fMTPRpIc.roa
Signing time: Sat 27 Jan 2024 11:01:39 +0000
ROA not before: Sat 27 Jan 2024 11:01:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206813
IP address blocks: 2001:bf7:170::/44 maxlen: 48
2001:bf7:1310::/44 maxlen: 48
2001:bf7:1310::/48 maxlen: 48
2001:bf7:1314::/48 maxlen: 48
2001:bf7:1315::/48 maxlen: 48
2001:bf7:1320::/44 maxlen: 48
2001:bf7:1322::/48 maxlen: 48
2001:bf7:1350::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:4a:95:11:9e:35:1d:ba:7a:5d:82:5c:1c:f4:0f:2b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Validity
Not Before: Jan 27 11:01:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e56bd687a83e76d7e67c3144d75e1f3133d1a487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5e:1d:9e:0b:2a:1f:60:8f:45:50:f2:4a:87:
d3:a3:ca:e5:04:8d:ba:35:b7:dc:e1:b5:81:d8:4e:
16:10:13:9c:40:c0:64:df:12:db:11:cc:f6:6c:6b:
9a:2a:43:8d:23:6b:0e:12:96:cd:b3:ac:f0:94:41:
5e:3d:22:e4:3a:d8:d4:1b:0f:ad:3b:f0:6a:14:5d:
ad:66:0e:e5:c0:4d:67:0e:e6:22:f6:89:33:f4:13:
51:57:8c:47:aa:4b:83:ef:d1:40:96:34:42:e9:e2:
b4:d8:3e:93:59:b1:e0:4b:13:23:e5:1d:b0:9c:2f:
d3:4d:47:d5:7f:75:e2:a1:61:53:0e:74:73:b6:f0:
0f:4c:64:31:5a:ad:23:6f:cd:df:af:c1:d0:e3:8f:
ae:bf:00:a8:fd:92:77:08:9a:6d:b3:c7:cb:ff:58:
c4:8f:ec:fc:16:8d:34:f4:13:ab:ca:8a:32:7a:c4:
49:10:c7:8b:bb:fb:34:0d:6a:33:32:27:5f:01:1a:
5c:ca:87:7a:79:00:64:79:f9:e7:c0:5a:99:4d:4a:
bb:bb:0b:97:4f:f3:d4:67:f7:b8:ae:28:ce:c6:ad:
c0:92:8f:a5:6f:f0:18:20:7d:a7:0c:a7:b7:10:ce:
39:10:b6:74:e8:e7:fc:9b:9f:61:d1:3f:3b:11:3d:
47:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6B:D6:87:A8:3E:76:D7:E6:7C:31:44:D7:5E:1F:31:33:D1:A4:87
X509v3 Authority Key Identifier:
keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/5WvWh6g-dtfmfDFE114fMTPRpIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:bf7:170::/44
2001:bf7:1310::-2001:bf7:132f:ffff:ffff:ffff:ffff:ffff
2001:bf7:1350::/44
Signature Algorithm: sha256WithRSAEncryption
03:06:69:ab:1a:c3:a8:65:f5:d0:ff:fa:c3:e2:7c:bc:62:f3:
79:e4:a2:65:16:d2:d0:62:71:46:74:1c:87:ef:c2:08:f2:11:
74:aa:1f:a6:e3:20:d3:f0:5b:72:be:83:30:9f:cb:ca:62:6d:
2a:43:99:c0:0b:34:1c:a5:88:58:99:af:11:c3:60:68:42:eb:
4d:77:7b:61:9f:92:92:8c:4b:fe:c0:01:45:44:9d:f5:88:82:
78:2e:0b:e0:72:22:d7:a3:31:11:23:b2:88:be:03:07:8b:bb:
bf:92:89:b1:a4:1e:ee:e2:c7:a0:c8:a2:cb:af:ca:65:72:0e:
1a:3b:8c:1c:62:a9:c4:bf:85:55:2b:cf:78:7e:02:4b:75:50:
08:ff:88:64:d9:2d:b1:c7:37:e6:6f:f1:39:ae:46:00:97:27:
b7:ee:05:33:0c:80:8a:9d:4c:1f:62:ba:51:1c:c3:d1:34:44:
c7:ef:e0:e5:2d:5b:4d:51:03:b9:a7:a8:66:bf:78:5f:d7:9d:
10:ec:b0:86:ce:78:9e:3d:32:bd:e5:4e:9a:e3:7d:79:18:0d:
a9:e6:43:99:5c:9a:17:78:33:f4:44:48:70:7d:89:c0:9e:7e:
ab:79:78:30:d6:eb:f7:84:b4:ef:3a:2b:b3:67:ee:23:fa:4f:
c7:e6:7c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 18:44:25 2024 by rpki-client on console-fra.rpki-client.org