Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/If_SpImH0eqa3ImYd3vfB9GZXfQ.roa
File: If_SpImH0eqa3ImYd3vfB9GZXfQ.roa (raw, json)
Hash identifier: offbiZzIzPYwCoQ8TY2e4wv74xOy9DsRQLeKTwBZTZE=
Subject key identifier: 21:FF:D2:A4:89:87:D1:EA:9A:DC:89:98:77:7B:DF:07:D1:99:5D:F4
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019204FC2F2E97BC4F9C5657AB5BB0988D14
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/If_SpImH0eqa3ImYd3vfB9GZXfQ.roa
Signing time: Wed 18 Sep 2024 11:54:48 +0000
ROA not before: Wed 18 Sep 2024 11:54:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214216
IP address blocks: 2a10:3140::/29 maxlen: 29
2a10:32c0::/29 maxlen: 29
2a10:5400::/29 maxlen: 29
2a10:6f00::/29 maxlen: 29
2a10:7f00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:04:fc:2f:2e:97:bc:4f:9c:56:57:ab:5b:b0:98:8d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 18 11:54:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21ffd2a48987d1ea9adc8998777bdf07d1995df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:84:7d:8c:bb:5e:16:ac:7c:6a:ef:5a:b8:40:
e8:06:1f:5b:5f:fd:27:e7:a4:e5:96:ed:ac:f6:cc:
2f:05:dd:4c:64:be:af:37:b0:5c:3c:a6:9b:77:cb:
19:28:34:ac:c3:85:10:a4:c6:8e:fa:2c:55:d9:0d:
07:89:50:2a:bb:f9:f4:98:2e:1a:6d:77:e4:6b:c1:
a7:5e:1c:0e:54:b9:13:9d:d6:ce:02:a3:9e:0b:25:
bf:fd:62:ff:d3:c5:71:c0:ce:3a:f5:cc:d7:9f:aa:
5d:ed:99:31:de:14:3a:7c:72:3a:53:bc:4f:a8:77:
63:ac:cc:29:f4:e6:aa:41:49:1b:86:fd:22:ea:76:
78:dd:c8:20:aa:c8:96:3d:9e:77:e2:8d:63:55:d4:
7c:89:99:0e:6a:1f:85:0f:88:f0:ab:02:b7:7f:17:
60:4e:9b:b5:f0:d6:50:76:94:3f:be:fb:03:8e:bb:
41:7a:40:46:7c:77:e5:45:8c:cd:bb:a4:6e:78:5e:
a8:84:27:ea:f5:f4:6f:ca:b4:64:f5:ed:74:1f:9d:
f9:4a:52:0d:0e:c8:2b:46:14:0a:44:f0:94:8a:ca:
b5:39:db:bc:69:d8:3f:d7:36:14:df:c5:18:55:53:
e4:e0:f6:f3:02:4d:df:3a:c5:ec:e0:d9:68:65:57:
fd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FF:D2:A4:89:87:D1:EA:9A:DC:89:98:77:7B:DF:07:D1:99:5D:F4
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/If_SpImH0eqa3ImYd3vfB9GZXfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3140::/29
2a10:32c0::/29
2a10:5400::/29
2a10:6f00::/29
2a10:7f00::/29
Signature Algorithm: sha256WithRSAEncryption
16:db:49:28:c4:8e:6c:83:8e:f0:cc:1c:1d:3d:ad:35:e9:6b:
bf:2d:6b:53:41:36:f6:24:77:a4:dc:ff:eb:55:ee:be:a6:da:
2c:20:20:78:ad:66:c3:54:44:b7:47:41:ff:f2:8f:75:3b:40:
08:23:c9:bf:57:c1:74:5c:01:61:8a:83:85:24:06:23:2c:2a:
cf:bd:79:85:b7:e7:5e:3d:63:43:41:e0:28:15:83:67:a8:a1:
86:e5:00:55:1a:2a:a2:18:06:ab:90:2a:32:79:87:ae:cc:03:
db:eb:7b:31:94:5e:ad:c1:c5:b1:51:dd:30:f8:0d:5d:88:71:
d7:85:96:10:93:e6:d3:6a:45:38:1a:eb:26:06:0f:b6:1b:34:
98:45:38:db:70:d5:a5:fb:e0:a2:b7:48:75:0d:36:90:21:1a:
a6:9c:8b:24:4f:d3:d0:7d:74:7b:e9:d2:fe:62:a7:45:8f:de:
f0:3e:c1:62:f1:c2:c7:d9:4e:fa:98:ea:bc:0d:2e:b9:e6:de:
bb:a8:54:61:09:4f:b1:dd:01:0e:e5:b9:d4:d9:bc:ca:f4:77:
42:cd:4a:68:5c:07:0e:23:be:6b:d7:6d:08:97:ae:27:7e:03:
c6:5c:38:c5:d0:80:27:63:b6:dc:f5:a5:2b:6e:7e:b6:b0:37:
46:66:0a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:18:57 2024 by rpki-client on console-fra.rpki-client.org