Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/v6aeYseNmxMPLq361xNfCHpSI8I.roa
File: v6aeYseNmxMPLq361xNfCHpSI8I.roa (raw, json)
Hash identifier: WsvXGa5CAkT0VWdxTN/fpDNjSCEMjowoVtd2n44jQRY=
Subject key identifier: BF:A6:9E:62:C7:8D:9B:13:0F:2E:AD:FA:D7:13:5F:08:7A:52:23:C2
Certificate issuer: /CN=e465acc90809efb45ccda250a1057618494b86eb
Certificate serial: 018CC5DC28175A866E74B344D4BB7692768C
Authority key identifier: E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/v6aeYseNmxMPLq361xNfCHpSI8I.roa
Signing time: Mon 01 Jan 2024 16:29:48 +0000
ROA not before: Mon 01 Jan 2024 16:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5408
IP address blocks: 2a07:8504:1a0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:28:17:5a:86:6e:74:b3:44:d4:bb:76:92:76:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e465acc90809efb45ccda250a1057618494b86eb
Validity
Not Before: Jan 1 16:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bfa69e62c78d9b130f2eadfad7135f087a5223c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a6:6c:e2:34:d8:44:74:be:2d:60:3e:c1:a6:
48:34:7d:ec:e0:2e:1b:4e:24:27:27:0a:4a:da:24:
bd:6a:19:21:fd:18:d6:bc:b5:19:c0:56:36:cd:06:
f6:89:9d:6d:db:c3:b7:17:8c:0b:87:bf:16:5c:ad:
ac:dd:b1:db:14:e1:4a:65:36:32:37:95:fd:55:ee:
36:82:95:65:8f:df:46:b1:aa:58:12:82:2c:dc:5b:
27:24:49:8c:78:9c:1d:89:8d:f5:49:c3:63:13:9f:
45:fe:7f:69:41:ad:f2:6d:38:86:c3:69:8a:07:60:
32:db:02:f2:07:c7:24:91:f1:d1:64:a9:92:64:3b:
d1:16:20:ab:27:24:1f:b3:05:23:28:b9:e8:3a:db:
38:1b:05:ef:96:a1:23:39:73:4c:46:4d:88:43:7f:
2b:fc:a5:2e:2f:37:1d:6f:1a:26:d8:d6:9c:08:3f:
c7:67:44:c0:5d:3b:97:15:28:0f:c2:ec:7b:00:99:
9a:33:e7:1e:3f:e0:eb:3f:06:dd:3e:79:1a:1b:9d:
b0:af:88:61:21:1a:c3:b9:0a:43:bb:70:2c:63:c1:
e9:4e:b1:20:24:8f:6b:b3:e4:49:cc:5e:82:90:03:
85:8e:31:c6:ed:6b:97:c2:e9:fc:5b:9b:9d:0d:f8:
82:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A6:9E:62:C7:8D:9B:13:0F:2E:AD:FA:D7:13:5F:08:7A:52:23:C2
X509v3 Authority Key Identifier:
keyid:E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/v6aeYseNmxMPLq361xNfCHpSI8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:8504:1a0::/48
Signature Algorithm: sha256WithRSAEncryption
a5:90:5e:70:a3:a4:dd:42:7b:34:36:8a:6f:79:19:2b:30:0b:
f6:2b:b3:ab:f5:7a:61:bf:75:95:ff:f0:fb:38:85:7f:88:95:
2c:c9:2f:dd:94:d8:2a:d6:79:93:68:f8:91:bb:29:c8:e5:7b:
2b:6b:3e:75:7d:1b:e4:53:13:67:13:7d:a9:74:cd:00:8a:5d:
5b:a8:0b:a7:c5:4b:00:ea:4e:e2:8e:66:59:84:d6:86:d1:59:
17:0f:bb:01:15:6b:0b:a9:3e:db:c0:41:95:fa:e4:87:b4:d2:
ac:37:81:08:87:f1:88:3b:b7:6c:93:7c:96:cb:bd:06:5f:15:
eb:65:1a:e4:87:fa:61:c1:01:8a:58:54:ac:3e:49:2d:39:64:
05:09:bd:92:97:08:57:40:7a:bf:ba:37:a6:77:a6:7a:4e:61:
cc:5d:e0:ad:31:18:64:67:38:b7:3d:75:c5:f3:6e:30:82:80:
ae:4c:10:5c:cd:4a:80:51:87:b1:46:3e:d5:64:0c:59:1a:d4:
10:9e:61:8e:47:ed:54:91:9c:32:ec:a1:f1:62:22:83:98:ec:
c4:26:d7:ec:57:a0:e7:ef:75:70:eb:eb:2c:72:e3:95:23:b0:
94:47:ab:dd:3e:e8:78:69:7e:7f:3a:ae:3e:21:ce:1a:ae:fb:
b8:7e:63:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 14:00:17 2024 by rpki-client on console-ams.rpki-client.org