Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/UgdYxJZ4kSIL7GqlE3O86lqWSnY.roa
File: UgdYxJZ4kSIL7GqlE3O86lqWSnY.roa (raw, json)
Hash identifier: AZ86jCS/H/Vk4Auz884p3PVaLkrZIsAj1dOzZhCAs6U=
Subject key identifier: 52:07:58:C4:96:78:91:22:0B:EC:6A:A5:13:73:BC:EA:5A:96:4A:76
Certificate issuer: /CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f
Certificate serial: 018CC80156D25A5EA145C363BCB5DF7A6629
Authority key identifier: 5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/UgdYxJZ4kSIL7GqlE3O86lqWSnY.roa
Signing time: Tue 02 Jan 2024 02:29:40 +0000
ROA not before: Tue 02 Jan 2024 02:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 4785
IP address blocks: 2a06:5040:13::/48 maxlen: 48
2a06:5040:11::/48 maxlen: 48
2a06:5040:14::/48 maxlen: 48
2a06:5040:12::/48 maxlen: 48
2a06:5040:5::/48 maxlen: 48
2a06:5040:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:56:d2:5a:5e:a1:45:c3:63:bc:b5:df:7a:66:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f
Validity
Not Before: Jan 2 02:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=520758c4967891220bec6aa51373bcea5a964a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:49:59:69:1d:82:ec:be:72:23:a5:29:83:ad:
7d:4d:d1:fa:d8:53:53:db:3f:39:c2:60:c0:5d:bd:
ef:a9:c4:8b:7f:f9:34:e4:7f:c5:40:b4:a5:b9:7c:
8e:f7:f9:69:b6:9d:cb:fc:3b:2d:6a:c3:29:9c:8e:
88:68:8d:57:26:a6:3d:d0:91:2e:10:a6:34:57:4c:
53:fd:1c:3b:b9:91:fb:31:2f:ad:09:47:cf:73:2c:
ec:07:50:9e:7d:f2:66:3a:78:1b:2a:14:4f:4e:8c:
52:07:91:75:1d:3a:81:a0:aa:c7:6a:74:de:18:e2:
41:43:81:c3:f4:55:7c:36:02:9d:af:53:14:fe:ac:
ce:79:08:1b:57:1d:42:8b:74:25:8c:66:d5:b7:b2:
7d:16:d7:d5:cf:46:31:f7:8c:e5:2b:c1:d3:a2:c7:
57:fb:e5:f5:69:a4:60:52:0b:cd:94:d6:33:85:73:
fc:65:df:f2:86:9c:b5:02:a4:32:76:bd:5f:6a:83:
69:f0:dd:1c:92:34:d8:70:f8:56:64:a9:9b:e5:0d:
dd:18:da:8e:f3:51:19:c7:e1:de:95:1c:60:9d:04:
e8:8d:9f:e2:8f:a9:a8:22:8a:13:31:b8:cc:51:2f:
8b:9f:b8:b2:2a:12:63:88:33:05:66:e6:02:9c:0a:
71:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:07:58:C4:96:78:91:22:0B:EC:6A:A5:13:73:BC:EA:5A:96:4A:76
X509v3 Authority Key Identifier:
keyid:5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/UgdYxJZ4kSIL7GqlE3O86lqWSnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:5040:5::/48
2a06:5040:10::-2a06:5040:14:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
29:bd:39:9d:8c:fe:26:d2:b5:d2:4d:45:e8:b4:ff:1c:f0:7f:
43:41:40:62:2e:de:4e:f5:d0:69:8f:94:96:b1:6c:fb:83:93:
04:c0:9a:5f:9a:c9:50:11:1e:11:80:49:46:83:6a:9d:3b:67:
68:9a:b1:59:ed:a3:5a:be:00:c0:32:4c:ef:c5:ec:8f:09:2f:
52:cb:f0:7a:34:3f:3b:14:ad:69:d0:41:d5:eb:34:2a:22:e3:
d1:70:b2:7b:6c:17:46:1e:1c:64:4c:60:5c:57:59:7b:07:b2:
c8:0d:0e:bc:53:67:1b:97:90:06:a8:02:3b:e4:90:85:d2:88:
6a:a0:cd:85:7c:59:57:1f:4e:4a:15:50:3e:b2:9e:25:1f:43:
d7:5f:eb:94:d2:d5:d5:4b:2c:82:e9:82:c6:61:b6:e4:7d:c1:
f4:ee:78:1e:16:20:33:3f:61:cc:1c:c2:dc:06:fb:8a:5b:62:
03:70:06:23:85:5e:99:c6:7b:9b:e5:93:00:f5:75:b2:71:fa:
eb:bf:79:76:72:0a:cd:5c:09:8d:3e:bb:49:9c:c6:ba:d1:ee:
73:d2:79:ae:f9:c8:80:2a:2a:17:89:f2:b8:6d:e3:da:33:2d:
70:1a:17:d0:65:98:88:26:ff:1a:e3:62:48:86:b5:af:e4:7b:
c5:20:46:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:09:05 2024 by rpki-client on console-ams.rpki-client.org