Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RdR5aehe44JiS521ceyIADfLahs.roa
File: RdR5aehe44JiS521ceyIADfLahs.roa (raw, json)
Hash identifier: vgGp5V1SQLCnHPh1ICkYP3I66y5fB12PsfOZNIYosVA=
Subject key identifier: 45:D4:79:69:E8:5E:E3:82:62:4B:9D:B5:71:EC:88:00:37:CB:6A:1B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018E7A08904A540FD880AA32A3304F26C1D3
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RdR5aehe44JiS521ceyIADfLahs.roa
Signing time: Tue 26 Mar 2024 09:12:45 +0000
ROA not before: Tue 26 Mar 2024 09:12:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 32489
IP address blocks: 2a0f:db40::/29 maxlen: 29
2a0f:db40::/32 maxlen: 32
2a0f:db41::/32 maxlen: 32
2a0f:db42::/32 maxlen: 32
2a0f:db43::/32 maxlen: 32
2a0f:db44::/32 maxlen: 32
2a0f:db45::/32 maxlen: 32
2a0f:db46::/32 maxlen: 32
2a0f:db47::/32 maxlen: 32
2a12:f5c0::/29 maxlen: 29
2a12:f5c0::/32 maxlen: 32
2a12:f5c1::/32 maxlen: 32
2a12:f5c2::/32 maxlen: 32
2a12:f5c3::/32 maxlen: 32
2a12:f5c4::/32 maxlen: 32
2a12:f5c5::/32 maxlen: 32
2a12:f5c6::/32 maxlen: 32
2a12:f5c7::/32 maxlen: 32
2a13:cf00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Jun 2024 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7a:08:90:4a:54:0f:d8:80:aa:32:a3:30:4f:26:c1:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 26 09:12:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45d47969e85ee382624b9db571ec880037cb6a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cb:af:9e:86:8a:02:fc:5c:72:d6:14:d3:41:
2a:06:49:64:30:55:75:63:66:47:51:7b:ab:b8:6a:
13:2b:14:de:5e:dd:0d:8f:4b:46:d7:fd:75:4e:5c:
fa:7d:34:1e:47:f5:12:d0:45:0d:8b:b4:32:ba:63:
00:ee:66:78:8a:4e:40:40:a0:d6:3c:86:11:78:82:
8b:fb:19:34:f1:e9:d4:16:bb:91:f8:19:68:86:ea:
66:cd:c4:fc:a8:96:24:f1:f8:e8:90:79:0e:e2:38:
5b:0a:a7:6d:4e:ce:fc:ce:ce:8d:3b:86:2f:93:b9:
70:ca:aa:fc:5b:52:ef:e9:28:a1:29:13:48:ff:b6:
bc:d2:fe:db:61:63:09:fa:15:fb:86:e1:fa:dc:f9:
d3:6d:3b:74:19:31:b8:d5:fb:30:5c:60:c0:ca:1c:
28:ba:47:2e:a4:8c:68:96:ca:76:82:ce:15:58:e7:
05:bd:38:fe:d0:f8:9e:eb:e0:18:f6:49:3b:db:00:
23:96:03:59:8b:5a:39:17:03:b5:83:0a:e5:35:1e:
30:d0:db:07:5d:4e:30:4d:58:ed:4d:4c:62:03:bd:
4e:d1:24:32:7d:ec:a2:ef:7b:85:e2:5d:eb:81:5c:
5f:2d:a7:c4:bb:54:67:d3:47:11:02:5c:02:3e:d2:
39:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D4:79:69:E8:5E:E3:82:62:4B:9D:B5:71:EC:88:00:37:CB:6A:1B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RdR5aehe44JiS521ceyIADfLahs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:db40::/29
2a12:f5c0::/29
2a13:cf00::/29
Signature Algorithm: sha256WithRSAEncryption
52:a5:b7:a4:2b:f4:ba:ab:91:bc:3d:2d:68:bd:03:f2:e6:dc:
bc:05:ca:48:f8:19:c6:69:b5:9b:fa:73:bd:14:38:88:f7:b1:
be:82:15:a1:da:d5:ae:1e:64:86:4c:a1:2a:47:c4:1c:6a:04:
d2:ca:65:7c:33:30:f0:91:a9:78:cd:06:99:67:75:d9:a4:99:
d3:74:b8:0f:5d:27:ed:d2:e2:13:66:d7:7c:23:77:0a:59:49:
b7:30:0c:d2:9f:2a:c1:51:d5:6d:68:95:d8:4f:28:e7:97:47:
4b:34:a4:6c:9a:8a:52:a9:c1:09:13:25:42:28:8b:e3:ad:79:
14:8c:57:16:c2:0a:cf:9c:90:07:3f:ec:77:19:35:ca:6e:dd:
e4:3b:dc:a0:00:d3:5f:05:b2:1b:44:82:9a:26:3d:00:b2:71:
4d:a2:ac:50:3a:7f:34:e4:7c:13:39:2c:75:03:f5:5e:90:4d:
b3:32:0c:c1:1f:a9:8b:ee:2e:da:9e:22:2d:fc:b3:0b:33:d8:
e9:7d:8e:40:64:b3:03:29:89:7f:19:e1:f3:5c:49:56:98:d1:
43:87:8a:53:b3:fa:3c:7c:e6:ff:f2:2d:59:c4:e3:e6:33:e3:
63:ca:3e:24:a1:81:3d:cb:8c:16:20:0f:32:62:35:43:55:e1:
93:39:ab:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 22:54:35 2024 by rpki-client on console-ams.rpki-client.org