Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/2elKa6i_RzTZnRpnaJ2TYLp-Onk.roa
File: 2elKa6i_RzTZnRpnaJ2TYLp-Onk.roa (raw, json)
Hash identifier: aXu/tbE7ariGqykoQU8l7ZDuI5iPdhk9F9mNAz8jC2c=
Subject key identifier: D9:E9:4A:6B:A8:BF:47:34:D9:9D:1A:67:68:9D:93:60:BA:7E:3A:79
Certificate issuer: /CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f
Certificate serial: 018CC80158A12A3CBC257EF09A7CF45224EA
Authority key identifier: 5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/2elKa6i_RzTZnRpnaJ2TYLp-Onk.roa
Signing time: Tue 02 Jan 2024 02:29:40 +0000
ROA not before: Tue 02 Jan 2024 02:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60188
IP address blocks: 2a06:5040:9::/48 maxlen: 48
2a06:5040:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:58:a1:2a:3c:bc:25:7e:f0:9a:7c:f4:52:24:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f
Validity
Not Before: Jan 2 02:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d9e94a6ba8bf4734d99d1a67689d9360ba7e3a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:68:cb:bf:78:ee:86:28:a4:40:79:f3:64:a6:
70:6d:f1:c1:26:59:e3:8e:b7:b6:1b:e1:27:95:c4:
48:cc:64:d7:59:56:73:2c:b6:65:81:e7:06:a0:f6:
0c:15:b3:8e:0a:67:77:bf:63:6a:e4:d9:af:62:d5:
dc:d9:0c:f2:5b:54:ea:c5:f3:dc:4e:ef:b0:75:8f:
69:a3:f7:af:a9:ea:22:0d:b2:1f:0f:4f:78:d9:31:
18:82:f0:53:f5:6b:47:15:0f:4c:20:ad:8a:9e:bd:
cb:d7:0f:ed:77:e2:50:19:2e:35:27:f8:53:d0:e1:
55:7e:f7:c4:20:a6:be:ad:81:b8:6f:43:38:d5:a6:
0f:bf:d6:46:1d:c9:a5:5b:6f:ec:2c:58:7a:72:2f:
e8:a5:0f:37:24:4a:43:6d:ab:4e:ce:43:8d:5c:04:
5f:53:a8:cb:f2:c2:06:35:19:56:3d:99:7f:90:3b:
ee:f1:fd:b0:1e:33:28:e3:fe:9e:33:44:8d:43:7b:
0c:69:13:98:e9:eb:c3:0b:8e:2a:85:ab:ce:53:7a:
43:cd:d4:c2:6c:b5:08:b8:8b:b0:d0:da:45:eb:9c:
be:f5:0e:f4:6c:fe:31:2c:3b:42:c6:db:98:52:08:
2d:27:6e:64:22:c6:0c:d2:61:9b:74:f5:02:25:bf:
92:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E9:4A:6B:A8:BF:47:34:D9:9D:1A:67:68:9D:93:60:BA:7E:3A:79
X509v3 Authority Key Identifier:
keyid:5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/2elKa6i_RzTZnRpnaJ2TYLp-Onk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:5040:8::/47
Signature Algorithm: sha256WithRSAEncryption
34:97:56:ad:45:1a:81:d5:3d:ba:16:0d:3d:b1:75:3b:88:e9:
40:44:cd:11:02:01:c2:15:54:cd:71:63:cc:78:a3:71:74:41:
a9:59:56:9d:ab:a2:ff:79:65:d7:cd:26:c9:49:9c:03:10:98:
99:f7:04:54:2b:39:01:b6:60:61:a1:3e:71:c1:c4:9a:e1:29:
0e:7c:e5:12:82:a8:8f:36:6b:f3:02:f5:ce:16:66:d8:30:d0:
e6:2c:dc:3b:4c:0f:ab:79:bf:ab:d3:94:91:b9:aa:be:cd:c9:
d1:a3:32:b2:aa:89:c6:86:ad:93:7b:df:33:33:41:26:5a:a2:
fb:31:a1:18:b6:b2:fb:3e:a1:10:e5:1c:ec:08:04:40:40:99:
82:29:7c:d4:6a:57:3c:55:64:00:b8:5b:b6:6a:4d:51:c1:62:
a1:57:f3:b7:71:2b:1c:c9:2b:22:3c:9e:a5:f5:00:b4:c8:81:
95:39:0c:03:be:55:2a:3b:5d:e9:ef:20:f6:34:83:f9:92:70:
40:b8:f8:fd:b4:18:0c:2b:e0:97:ec:c6:b2:87:b6:c2:7e:a1:
78:9e:44:bf:fd:31:a3:aa:c3:3d:cb:40:22:fa:f3:7a:d2:e9:
15:e3:42:8c:67:95:3d:a8:f2:14:63:c8:69:11:ba:b8:ac:93:
df:88:dc:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 04:40:48 2024 by rpki-client on console-ams.rpki-client.org