Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/OzC9P-dSBhJUPBVcR6JA3sBdOvM.roa
File: OzC9P-dSBhJUPBVcR6JA3sBdOvM.roa (raw, json)
Hash identifier: c8jCl5HQ9Pt84SnIFcVQZpFooTWukQanu+6pw0qKM6Y=
Subject key identifier: 3B:30:BD:3F:E7:52:06:12:54:3C:15:5C:47:A2:40:DE:C0:5D:3A:F3
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 0193207971A813E94AF2F299FA4A11E04A9E
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/OzC9P-dSBhJUPBVcR6JA3sBdOvM.roa
Signing time: Tue 12 Nov 2024 13:04:09 +0000
ROA not before: Tue 12 Nov 2024 13:04:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215355
IP address blocks: 2a14:67c0:100::/40 maxlen: 48
2a14:67c0:110::/44 maxlen: 48
2a14:67c0:200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:20:79:71:a8:13:e9:4a:f2:f2:99:fa:4a:11:e0:4a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Nov 12 13:04:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b30bd3fe7520612543c155c47a240dec05d3af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a8:56:94:d2:8d:8b:c4:94:40:ab:d9:62:0b:
f6:97:a6:ad:c5:5b:53:d9:64:fc:e7:30:19:70:44:
33:cd:ba:eb:3e:45:5b:df:de:27:ad:fc:1a:d6:e3:
56:04:3d:9b:bd:0b:27:cd:be:e6:e5:a4:a0:33:a0:
4b:14:99:ca:79:43:ab:33:07:29:c6:79:3f:de:55:
c7:e3:27:0c:c6:de:dc:87:b7:15:63:0b:03:3d:e1:
e9:1c:91:3e:71:b2:6a:b6:43:f3:ab:af:82:76:0e:
2e:d1:03:ad:49:b9:0a:74:be:cf:6c:63:2d:f5:c0:
9e:18:a9:1e:52:db:5c:79:6f:ea:ed:4a:28:5b:fe:
09:42:77:1b:8c:e9:da:69:a4:28:e9:33:d8:96:ad:
ba:e8:0f:73:f9:02:cc:da:0f:8f:69:6d:02:97:17:
49:02:da:76:69:5f:8b:ab:07:d9:3b:e2:c9:68:bf:
8a:df:df:0f:a6:60:0b:f7:b8:85:c8:be:f3:77:07:
77:bf:e8:42:9a:7d:50:73:a5:fc:0a:1d:18:7c:b3:
52:53:9f:60:ba:74:5e:a4:e7:34:e4:30:e6:d7:f4:
33:a9:b8:30:7f:9c:b4:e7:dd:4e:9d:cb:cf:a2:96:
86:32:2d:c2:e1:a3:2c:ad:59:59:e3:80:dd:de:e3:
16:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:30:BD:3F:E7:52:06:12:54:3C:15:5C:47:A2:40:DE:C0:5D:3A:F3
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/OzC9P-dSBhJUPBVcR6JA3sBdOvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c0:100::-2a14:67c0:2ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0f:aa:28:3c:83:c8:5a:b3:5c:4c:7a:7d:29:8f:fc:0b:9b:14:
20:0b:a2:d5:22:aa:d7:ec:46:97:b8:31:72:07:dc:7f:c5:e5:
54:19:6c:cd:15:52:cd:5c:60:68:28:42:eb:c5:7f:82:02:33:
7b:81:5c:3b:ec:8a:02:17:1d:bc:cd:24:d8:b6:1c:43:12:60:
67:5c:8f:ce:4b:3a:30:05:b0:86:e3:ef:c3:d3:dc:cb:82:87:
74:76:54:6c:74:6c:4e:24:81:43:69:03:b5:a0:06:19:65:a1:
84:d5:e9:db:8c:dc:fa:5a:34:be:7f:30:9b:1c:7f:ae:f4:20:
2c:ff:a5:a8:78:a3:f5:b5:13:88:17:fa:fd:f5:c1:55:80:d9:
86:b9:f8:18:92:51:60:22:29:a1:89:c4:7d:80:5a:ce:64:be:
a7:3d:cd:87:36:18:18:e3:4d:92:30:f8:b1:8c:f3:40:94:a7:
76:bc:2b:dd:0e:bd:6d:23:f7:5c:4e:1a:d6:5e:9d:51:72:bf:
9a:25:b1:a1:74:2d:73:c0:6d:ab:fe:d3:11:a6:bf:e4:40:bb:
bb:fc:6c:1d:8e:0b:ce:c1:e9:49:86:c6:aa:e9:6a:ab:95:71:
87:40:90:7a:f6:64:7a:e9:55:9f:9b:46:a0:de:05:50:05:22:
b5:00:18:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:57:59 2024 by rpki-client on console-ams.rpki-client.org