Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/1_WLlox2SDo-pFfBeZxe1nV0UNg.roa
File: 1_WLlox2SDo-pFfBeZxe1nV0UNg.roa (raw, json)
Hash identifier: eikqbQbNkZ1vTQoZZUb+mRRbTn+UqntTvkGGl1tQCBA=
Subject key identifier: D7:F5:8B:96:8C:76:48:3A:3E:A4:57:C1:79:9C:5E:D6:75:74:50:D8
Certificate issuer: /CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
Certificate serial: 018CC9BC61EA9FC5388365541F2835B18DA7
Authority key identifier: CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/1_WLlox2SDo-pFfBeZxe1nV0UNg.roa
Signing time: Tue 02 Jan 2024 10:33:35 +0000
ROA not before: Tue 02 Jan 2024 10:33:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 2a0e:aa47::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:61:ea:9f:c5:38:83:65:54:1f:28:35:b1:8d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
Validity
Not Before: Jan 2 10:33:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7f58b968c76483a3ea457c1799c5ed6757450d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:56:8a:24:cd:c3:6e:e3:a9:38:b4:98:86:93:
e8:ed:2c:fb:09:26:19:ab:97:b1:d8:33:05:ac:42:
74:39:0e:00:f1:94:bc:69:06:cb:97:b1:89:dd:21:
41:7c:12:26:43:87:3a:3e:df:7b:07:60:d1:ca:d1:
f7:59:57:eb:60:98:e8:aa:13:f2:8b:2c:ab:fb:fd:
db:63:92:a7:8f:f7:5d:39:cc:db:bf:3a:9a:78:50:
43:9c:0d:68:2f:3c:02:32:9b:4d:a1:eb:20:ba:81:
64:11:95:13:23:5a:ba:5b:bf:bf:72:32:5a:00:ee:
f2:0d:2c:b1:ac:7e:0b:56:ac:66:ea:50:fc:f4:2a:
8d:d3:94:32:dd:0d:2a:14:f2:1b:34:66:0b:bd:5a:
a5:e5:89:a8:e7:f3:08:a0:3c:cc:eb:1b:52:b3:c2:
17:29:80:f9:71:27:c4:e7:79:64:b6:77:a3:c5:42:
83:d7:a8:f5:87:de:c5:46:65:c3:ce:58:90:9f:05:
3d:d7:70:96:2e:bd:94:a2:b1:04:f0:46:7f:2f:dc:
0d:e5:b5:0b:c1:32:2c:86:de:fe:41:1e:61:13:ec:
9f:92:17:1b:39:c1:42:4e:a1:64:2d:58:e8:13:1a:
d1:0d:a8:2b:f9:9a:58:17:5d:c3:d8:0f:6b:61:c8:
58:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F5:8B:96:8C:76:48:3A:3E:A4:57:C1:79:9C:5E:D6:75:74:50:D8
X509v3 Authority Key Identifier:
keyid:CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/1_WLlox2SDo-pFfBeZxe1nV0UNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa47::/48
Signature Algorithm: sha256WithRSAEncryption
9a:ff:71:9d:08:e0:9c:3f:21:64:93:5a:5c:99:8e:f1:15:85:
ad:2d:e2:d2:a5:7f:29:18:18:9b:34:8c:80:3d:25:df:fe:f5:
ef:ff:52:91:60:4f:80:f0:c6:50:2e:39:61:ff:bd:f8:e9:1a:
41:86:ad:23:df:78:e0:9f:80:e6:03:d7:c4:e8:b6:b4:26:80:
64:b2:25:11:59:6c:b3:a1:52:05:20:ce:c1:7a:93:18:10:2f:
e0:cd:44:dd:33:b7:ff:de:f1:8a:39:1e:5c:74:23:f7:88:2b:
6c:4c:df:bb:72:3b:9d:c7:35:b7:dc:ee:64:c5:42:cb:89:02:
0c:37:66:76:36:3d:de:c8:9b:f1:35:0f:8d:4a:d0:3d:9d:73:
00:35:fc:e3:2f:0f:e6:d6:a3:b7:d9:c1:2e:93:4c:b3:85:96:
ad:9c:ed:97:07:3d:1b:6b:0e:29:da:c6:87:e1:ff:3c:85:34:
76:d1:dc:a9:3a:22:ff:ed:00:10:74:48:4f:03:cd:92:2c:f2:
a2:3c:79:39:35:58:6f:52:48:9c:24:48:27:6d:0f:10:51:34:
53:0d:9b:af:34:7c:9f:9c:86:b6:05:5f:97:23:38:7c:59:9a:
45:44:97:6e:49:30:57:de:25:77:64:2e:b9:84:64:fc:77:56:
01:15:c7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 07:04:54 2024 by rpki-client on console-ams.rpki-client.org