Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/ltki7k4i8SArFUhp_kdigOoePkg.roa
File: ltki7k4i8SArFUhp_kdigOoePkg.roa (raw, json)
Hash identifier: 7qHfh8804QZJZkWRKVURe3N7gbrCePzT5hk2Wc0a7xA=
Subject key identifier: 96:D9:22:EE:4E:22:F1:20:2B:15:48:69:FE:47:62:80:EA:1E:3E:48
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 0191523B8BD6DD0BFB81E2A8F22CBCEDB68C
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/ltki7k4i8SArFUhp_kdigOoePkg.roa
Signing time: Wed 14 Aug 2024 18:51:59 +0000
ROA not before: Wed 14 Aug 2024 18:51:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197992
IP address blocks: 2a10:9c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 00:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:52:3b:8b:d6:dd:0b:fb:81:e2:a8:f2:2c:bc:ed:b6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Aug 14 18:51:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96d922ee4e22f1202b154869fe476280ea1e3e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8b:a6:d4:a7:c9:7c:c7:15:61:ee:0f:f5:21:
cc:ac:db:73:7d:85:bb:45:05:3c:b1:d9:4b:15:96:
2d:33:a5:e9:0f:90:69:87:81:48:54:11:47:c1:02:
ea:1c:af:ca:44:c1:23:1a:a0:dd:5f:71:e3:d8:4c:
37:7a:f6:81:21:a6:75:8d:7c:71:2a:5f:05:0b:51:
c4:f7:90:eb:82:a1:85:27:85:24:5c:46:12:b0:7e:
36:df:82:59:41:9c:93:79:2a:1f:03:df:8f:16:39:
75:a1:ab:92:7e:08:19:09:56:f0:6f:b2:b4:25:fd:
17:fb:4b:52:57:a8:26:96:5c:46:f5:12:ab:fc:10:
2d:a9:06:27:a2:77:d8:ce:26:cb:38:21:bf:77:b8:
04:c8:e8:97:76:65:80:eb:c9:94:10:47:17:85:86:
2b:7d:03:70:0f:fb:9f:7c:59:c4:30:6f:91:15:a8:
d8:6b:a9:27:8b:f9:a0:bd:16:de:9c:17:66:b6:33:
fa:34:22:00:a0:11:62:92:84:fc:f4:46:2b:06:3a:
d6:c7:19:e3:10:ed:79:0a:0a:a0:8a:26:44:4d:fd:
a6:fb:a4:df:11:fb:f2:76:60:40:0d:cd:ce:9d:79:
90:3f:8a:80:95:e9:85:43:a4:be:10:cf:ff:aa:93:
25:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D9:22:EE:4E:22:F1:20:2B:15:48:69:FE:47:62:80:EA:1E:3E:48
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/ltki7k4i8SArFUhp_kdigOoePkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:9c0::/29
Signature Algorithm: sha256WithRSAEncryption
4d:a8:45:09:3b:af:3b:b0:33:70:13:b8:5b:67:35:0b:73:79:
99:83:54:4b:f4:61:55:af:f2:d0:4f:57:d4:fb:66:3f:09:07:
35:1a:4d:c6:b9:20:11:84:a3:de:af:6c:b8:3e:df:5b:51:79:
1f:7e:aa:26:41:b2:85:6b:40:60:8a:10:3d:a8:b1:01:f2:c2:
12:43:cb:7b:1e:ab:99:8a:76:fa:30:c7:cf:8a:c6:77:16:b7:
ad:f2:43:85:52:31:a6:3f:e4:7f:9e:36:5c:8a:7b:88:91:ed:
c8:cf:8e:c2:22:67:ce:60:a6:9d:b3:0c:e8:5d:5f:5a:33:74:
82:df:67:90:79:d3:08:38:aa:70:1f:44:d7:21:b0:e8:4f:e9:
1d:8c:37:6d:a5:8f:91:28:dc:a7:fb:e0:ec:90:7b:38:85:b8:
1d:31:4c:07:b8:8a:2c:2d:c6:ea:dc:74:59:a2:cd:9d:54:cf:
06:e7:fc:f4:0c:ed:d0:e7:1d:21:a9:28:32:5c:9c:14:00:24:
71:c6:1b:8e:88:f5:1a:6d:33:60:ec:b5:00:e7:71:fc:c6:a0:
d2:2e:39:52:f1:df:e2:d0:99:28:d5:34:80:16:66:86:f4:a7:
64:c3:44:e9:13:4a:5f:7c:68:7a:9e:3c:8c:1d:d7:9a:b0:44:
8b:9b:5e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:10:25 2024 by rpki-client on console-fra.rpki-client.org