Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/WK1vHkLeqijkM_0W_nRJBe9MQPk.roa
File: WK1vHkLeqijkM_0W_nRJBe9MQPk.roa (raw, json)
Hash identifier: 1MefF9XUz32IUSniYO97IxbPu6UrNqqTMP2NQuBmKWs=
Subject key identifier: 58:AD:6F:1E:42:DE:AA:28:E4:33:FD:16:FE:74:49:05:EF:4C:40:F9
Certificate issuer: /CN=118ba4ef901aac10876ccf976a5f7d16c4ca79f0
Certificate serial: 018CC8019BB0A07E5E9928234E6E7DEBB4B2
Authority key identifier: 11:8B:A4:EF:90:1A:AC:10:87:6C:CF:97:6A:5F:7D:16:C4:CA:79:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/WK1vHkLeqijkM_0W_nRJBe9MQPk.roa
Signing time: Tue 02 Jan 2024 02:29:57 +0000
ROA not before: Tue 02 Jan 2024 02:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 2a03:5640:f000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 22:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:9b:b0:a0:7e:5e:99:28:23:4e:6e:7d:eb:b4:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=118ba4ef901aac10876ccf976a5f7d16c4ca79f0
Validity
Not Before: Jan 2 02:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58ad6f1e42deaa28e433fd16fe744905ef4c40f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:de:aa:3a:ad:7e:9e:30:4b:bc:b6:2f:d3:f3:
07:ba:2b:08:c6:a3:d6:e5:21:0d:83:7b:d9:39:77:
ff:e4:52:73:53:40:9f:c0:7f:c6:8a:64:d2:fa:9d:
eb:e5:76:bc:2c:a6:0e:80:4f:a6:24:5d:a4:57:8b:
e7:5d:36:78:bc:ba:25:af:c9:d5:97:b6:b3:87:a4:
50:2c:b4:70:66:b2:cb:97:63:b9:e0:30:44:ea:78:
4a:9e:ee:ef:96:a2:eb:2e:4e:f8:db:19:ab:f2:a0:
b5:bf:2e:3c:5a:cd:a4:f4:d4:95:77:ad:b2:ca:26:
5c:b9:af:c9:e1:dc:88:da:7f:60:1f:f7:b8:bf:5c:
15:1f:b5:01:9d:c9:8f:16:63:5b:a8:6b:f7:0a:ba:
6d:de:23:8f:96:f6:5e:9f:57:a4:c8:f0:33:96:03:
3b:0b:6a:1c:9e:f0:80:44:6b:99:74:e0:04:ec:af:
48:28:f9:9f:cd:c0:3b:a3:c0:62:46:54:7f:dd:a5:
d1:db:2b:ad:f7:0c:15:9f:8e:d7:93:18:89:1d:c7:
cb:61:40:7d:63:a0:5f:a8:7a:55:cd:aa:bd:05:8c:
37:1d:01:5d:b9:92:e9:e2:e3:51:73:ce:f4:f0:31:
93:f3:08:16:8f:ba:23:7f:30:2c:66:20:10:37:7e:
f1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AD:6F:1E:42:DE:AA:28:E4:33:FD:16:FE:74:49:05:EF:4C:40:F9
X509v3 Authority Key Identifier:
keyid:11:8B:A4:EF:90:1A:AC:10:87:6C:CF:97:6A:5F:7D:16:C4:CA:79:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/WK1vHkLeqijkM_0W_nRJBe9MQPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5640:f000::/36
Signature Algorithm: sha256WithRSAEncryption
93:5e:4a:2d:96:5f:d3:05:65:80:d6:75:75:99:f9:a2:2f:94:
10:0b:39:46:e3:93:09:db:91:46:d3:5b:7d:3f:21:46:16:98:
0d:71:1c:46:c6:bf:bb:a5:8d:bf:f0:29:45:c1:ee:61:61:28:
d4:e7:b0:4f:70:1b:77:79:34:b6:99:42:2f:c3:ad:c2:fa:d0:
a6:b2:a5:1a:44:77:12:52:7a:cb:ab:49:dc:13:1e:a6:bb:d5:
56:46:7f:bb:b3:33:74:9c:29:d5:5a:10:1c:2a:30:25:3c:42:
fd:73:28:6c:2f:13:8e:0e:17:b4:dd:63:18:b6:28:3f:7c:ba:
d8:8f:1c:78:ab:62:71:f5:9b:74:d6:82:af:95:d8:64:c0:1b:
89:f5:64:0a:20:98:49:11:0a:09:06:50:36:44:bf:bb:7e:a1:
41:38:6e:e6:77:55:83:76:df:69:07:99:4f:fc:52:13:3e:e3:
38:23:e8:0f:3b:95:09:26:0e:af:4d:7e:7f:db:f7:c1:c1:03:
06:92:55:53:a4:bb:46:3a:b6:21:a7:f0:7c:26:fd:01:71:ea:
48:cc:eb:e1:43:10:99:bc:38:02:5a:74:d6:a5:99:bf:c3:56:
63:e5:42:eb:e8:f1:89:4f:50:5e:7c:00:03:86:cc:42:99:4e:
8c:d2:a4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 07:40:26 2024 by rpki-client on console-fra.rpki-client.org