Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/g5DoEyXby-AG7EAQ5MPpArQiQIk.roa
File: g5DoEyXby-AG7EAQ5MPpArQiQIk.roa (raw, json)
Hash identifier: Xd28w2GI2WFSYg6CK8qvN0iDxmxbNedeomtlFMGUM2U=
Subject key identifier: 83:90:E8:13:25:DB:CB:E0:06:EC:40:10:E4:C3:E9:02:B4:22:40:89
Certificate issuer: /CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Certificate serial: 01915B849B870AC65D031FAB6EF998758556
Authority key identifier: F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/g5DoEyXby-AG7EAQ5MPpArQiQIk.roa
Signing time: Fri 16 Aug 2024 14:08:22 +0000
ROA not before: Fri 16 Aug 2024 14:08:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42375
IP address blocks: 2a12:24c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:5b:84:9b:87:0a:c6:5d:03:1f:ab:6e:f9:98:75:85:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Validity
Not Before: Aug 16 14:08:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8390e81325dbcbe006ec4010e4c3e902b4224089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0e:45:de:cf:e2:8e:2c:42:85:cd:00:9f:ff:
92:89:ba:eb:bc:82:58:2a:db:0f:7f:21:2e:f9:ee:
97:7d:71:0f:76:63:17:ba:46:dd:b7:ce:2d:49:17:
a6:1f:a7:fb:19:03:61:cf:72:90:fc:a7:a5:f0:c5:
61:c2:40:b0:eb:c2:ff:ad:9b:e6:83:4a:64:c1:eb:
2f:d4:89:10:94:e4:44:41:01:e5:7b:20:a6:4b:d3:
4e:51:72:3a:6c:e7:69:76:fd:fe:ed:5b:77:ad:89:
9f:1b:fc:30:6f:61:47:33:76:53:a8:50:71:b0:4e:
f8:50:dd:58:44:f8:7f:97:eb:98:4e:5f:1e:b3:ad:
35:8d:b6:1a:3e:c0:5c:ad:41:e3:91:75:ef:f5:3c:
1c:15:e7:95:e3:2e:de:66:1e:a9:04:df:ed:b2:8f:
54:97:87:1d:7b:61:5b:d9:4b:0b:d4:70:58:c5:e2:
be:15:4f:ac:0e:66:b9:f0:0f:9b:f3:85:8c:32:90:
ee:26:36:04:92:97:e2:6d:55:ec:87:00:c3:68:38:
93:99:39:8e:3a:a2:43:62:3b:a9:44:28:d3:ae:6d:
81:fb:94:2b:3a:d0:20:aa:84:03:16:53:e8:61:d0:
07:af:74:e9:b8:b9:2a:92:b8:52:b1:4f:6d:df:58:
e8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:90:E8:13:25:DB:CB:E0:06:EC:40:10:E4:C3:E9:02:B4:22:40:89
X509v3 Authority Key Identifier:
keyid:F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/g5DoEyXby-AG7EAQ5MPpArQiQIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:24c0::/29
Signature Algorithm: sha256WithRSAEncryption
13:dd:59:91:ed:a9:d7:d2:54:c9:b4:f3:cc:25:52:09:a0:1d:
92:0a:20:36:e5:3e:66:ce:85:4c:f8:45:1e:56:15:9a:66:3c:
73:a5:2b:b1:6d:fd:60:00:34:44:f8:f4:0d:c6:0b:04:5f:29:
93:de:eb:35:8b:6c:64:fe:6a:b4:3f:fa:bd:28:68:5d:ce:6e:
a0:af:fe:cc:08:a8:d3:0e:af:d4:14:a0:70:d7:a3:74:a1:98:
b4:7f:f6:bf:eb:1c:9f:90:7f:56:7f:32:31:93:3a:15:f2:5e:
de:a8:b5:61:58:a8:98:01:00:9c:fb:92:82:b2:30:e0:42:fe:
a2:95:77:62:5d:51:f0:aa:65:f5:89:e9:71:bf:98:8e:0a:e0:
78:62:7a:f7:7b:60:fa:0a:e6:50:25:d9:c1:b0:85:73:d9:e1:
d2:d6:6a:90:f4:12:41:ec:d9:a9:1d:d1:ab:0a:12:35:2d:1b:
25:1d:0f:b4:1c:3a:2a:65:1f:31:10:c2:99:1d:40:c5:a6:cd:
f2:a2:62:eb:85:99:23:a1:92:0c:23:4a:5a:7e:f8:17:a9:f9:
d0:41:72:95:b3:bd:c3:4e:33:5e:58:a1:d8:2b:3a:0e:f2:68:
b0:ea:47:32:0e:40:da:7a:c1:8e:e7:05:2f:4d:05:60:4e:7f:
c3:99:cf:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:36 2024 by rpki-client on console-fra.rpki-client.org