Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/dPMyaVemdUDLzMighSCzbMB1RLs.roa
File: dPMyaVemdUDLzMighSCzbMB1RLs.roa (raw, json)
Hash identifier: DV9PLNH0yyfRR6Dsv9nKHxgGg4tPeHvxYy4da8VuaGs=
Subject key identifier: 74:F3:32:69:57:A6:75:40:CB:CC:C8:A0:85:20:B3:6C:C0:75:44:BB
Certificate issuer: /CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
Certificate serial: 019323999D0F64CE36F580489FFB0EF7ECB3
Authority key identifier: 3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/dPMyaVemdUDLzMighSCzbMB1RLs.roa
Signing time: Wed 13 Nov 2024 03:38:09 +0000
ROA not before: Wed 13 Nov 2024 03:38:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31404
IP address blocks: 2a03:9ec0:fc02::/48 maxlen: 48
2a03:9ec0:fc0f::/48 maxlen: 48
2a03:9ec0:fc60::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:23:99:9d:0f:64:ce:36:f5:80:48:9f:fb:0e:f7:ec:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0f37f43a268342eaf0fec53960634090b5b1b7
Validity
Not Before: Nov 13 03:38:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74f3326957a67540cbccc8a08520b36cc07544bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c9:50:bd:fc:b0:b0:a7:26:ec:cf:b6:00:ee:
50:dd:00:fd:84:71:1f:bb:91:7e:e6:7f:f4:d5:fe:
a5:3e:47:bb:34:87:3e:d6:d7:0c:74:db:3e:8a:a6:
23:c4:f9:17:85:fd:5f:7c:fa:9d:7c:02:22:97:32:
2d:48:b8:d7:db:13:07:4c:dd:56:a5:ac:a9:4c:5a:
51:7f:46:c1:18:56:20:04:40:e5:1a:13:7f:e0:f9:
fa:9c:78:07:64:87:0e:42:14:c1:5a:cc:63:23:8c:
7b:c4:56:81:a9:fa:67:ac:e1:22:be:3f:ed:3e:74:
6e:b7:57:a6:aa:67:05:6e:6d:55:c2:10:cc:fb:2b:
da:2d:1d:6e:3b:32:7e:bf:3c:a1:7a:3a:f7:0e:f7:
54:e0:a9:87:b9:7d:3d:95:b4:72:e7:c7:73:48:c9:
a4:29:5b:e9:0c:c7:bb:c7:db:3f:0c:19:77:90:15:
5a:f8:6e:22:dc:fa:48:f8:f3:46:07:25:d9:8a:eb:
3b:e9:3c:4a:21:39:a6:5a:72:8f:bf:82:49:7c:e3:
4c:49:47:b9:bc:12:9e:f0:c0:08:08:27:01:d0:b2:
f0:b6:11:05:c0:30:26:39:67:c7:0f:96:58:1f:e0:
1d:d6:54:5f:55:dd:18:ee:71:ba:43:42:25:6d:9f:
43:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F3:32:69:57:A6:75:40:CB:CC:C8:A0:85:20:B3:6C:C0:75:44:BB
X509v3 Authority Key Identifier:
keyid:3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/dPMyaVemdUDLzMighSCzbMB1RLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:9ec0:fc02::/48
2a03:9ec0:fc0f::/48
2a03:9ec0:fc60::/44
Signature Algorithm: sha256WithRSAEncryption
25:06:2e:17:f3:45:77:55:54:56:8d:41:e5:c2:b1:0a:28:92:
2e:2b:76:13:bf:d6:38:0d:11:00:b1:6e:6d:af:62:6b:f0:dd:
41:4a:44:79:47:ef:a1:5c:2d:6f:7d:41:9a:63:84:3f:c7:7b:
95:b9:2b:99:ef:d1:44:2d:da:27:b7:d8:8f:b0:51:f4:10:90:
ac:47:bd:b1:fb:73:3c:8a:1a:7e:6c:13:58:46:b0:13:57:06:
a6:11:aa:e5:ac:f4:f9:7d:6c:01:ba:af:8f:54:a5:66:50:02:
e2:a7:83:d8:5b:41:49:fc:03:bc:fb:1b:62:7e:30:0f:a7:47:
d8:03:9a:80:31:0b:a2:a6:c1:43:80:be:de:cd:d3:ba:22:f4:
0e:e1:f4:a9:46:ed:7e:e7:b3:85:81:9c:41:b9:ed:81:72:44:
ed:55:de:86:1b:c2:09:89:9b:e4:45:30:8b:ed:cd:3e:84:70:
88:a6:e0:f9:95:60:e1:dc:77:be:52:af:f2:bd:a1:06:6e:03:
eb:f8:fd:14:28:1e:6c:d3:05:cd:a8:22:f6:fd:3c:da:55:58:
34:72:4f:20:25:a3:7f:55:16:c3:bf:4b:35:38:a2:75:dd:f8:
a3:53:6d:42:21:60:a4:c7:57:ee:75:d5:da:8d:d5:81:6f:32:
10:00:ec:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:07:41 2024 by rpki-client on console-fra.rpki-client.org